Privacy policy

What we collect

Account data: your email address, display name, and the profile details you choose to add (preferred language, avatar).

Messages you send us: contact-form submissions and booking requests, including the name, email, and message you provide.

Learning activity: which guides and posts you read, study-session results, and reward points — used to power your dashboard and progress tracking.

Purchase records: what you bought and when. Card details are processed by Stripe and never touch our servers.

Video sessions: when you watch member videos we log session details (time watched, approximate location, device) and overlay a personal watermark to protect course content.

What we don't do

We don't sell your data. We don't run advertising trackers. We measure how the site is used with Google Analytics 4 (in Consent Mode: no analytics cookies are set unless you accept them), Vercel Speed Insights and Vercel Web Analytics (cookieless, aggregated performance and page-view counts that cannot identify you), and Hotjar session recordings and heatmaps, which run only after you accept analytics cookies.

Cookies

Strictly necessary cookies keep you signed in (Supabase authentication) and are always set. Analytics cookies (Google Analytics 4, Hotjar) are set only after you accept them in the cookie banner, and you can withdraw that choice at any time from the Cookie preferences link in the footer (it takes effect from your next page view). No advertising or cross-site tracking cookies are set.

Service providers

Your data is processed by the infrastructure we run on: Supabase (database and authentication), Vercel (hosting), Stripe (payments), Mux (video streaming), Resend (transactional email), Google (website analytics), and Hotjar/Contentsquare (session recordings). Each receives only what it needs to do its job.

Email

We send transactional email (account confirmations, booking confirmations, receipts) and, only if you subscribe, an occasional newsletter. Every newsletter includes an unsubscribe link.

Retention and deletion

We keep your account data while your account is active. You can ask us to export or delete your data at any time by writing to hello@rxapply.com — we action deletion requests within 30 days, except records we must keep for tax or accounting reasons.

Contact

Questions about this policy: hello@rxapply.com. If we change this policy in a way that matters, we'll note the change here with a new date.