Privacy Policy

1. Information We Collect

When you register and use The Resident Hub ("Platform"), we collect:

• Account Information: Name, institutional email address, program, PGY year
• Authentication Data: Hashed passwords, Google SSO tokens (if applicable)
• Usage Data: Quiz scores, lesson progress, forum posts, clinical pearls, shift swap activity
• Consent Records: Timestamps and versions of policy agreements
• Technical Data: IP addresses (for consent logging), browser type, device information

2. How We Use Your Information

• To provide and maintain Platform features and services
• To track educational progress and generate performance analytics
• To facilitate communication between residents (forum, shift swaps)
• To send administrative notifications (account approval, password resets)
• To improve the Platform based on aggregate usage patterns
• To maintain security and prevent unauthorized access

3. Data Sharing

We do not sell, rent, or share your personal information with third parties for marketing purposes. Information may be shared:

• With program administrators for educational oversight purposes
• With service providers essential to Platform operation (hosting, email delivery)
• When required by law or institutional policy

4. Data Security

We implement industry-standard security measures including encrypted data transmission (TLS), hashed passwords (bcrypt), secure token-based authentication, and role-based access controls. However, no method of electronic storage is 100% secure.

5. Data Retention

Account data is retained for the duration of your residency program or as long as your account remains active. Upon account deactivation, personal data will be anonymized or deleted within 90 days, except where retention is required by law or institutional policy.

6. Your Rights

You may request access to, correction of, or deletion of your personal data by contacting the Platform administrator. You may also request an export of your data in a portable format.

7. Cookies & Local Storage

The Platform uses session cookies and local storage for authentication and user preferences (e.g., dark mode). These are essential for Platform functionality and cannot be disabled while using the service.

8. Changes to This Policy

We may update this Privacy Policy periodically. Users will be notified of material changes. Continued use of the Platform after changes constitutes acceptance.

9. Contact

For privacy-related inquiries, contact the Platform administrator at [email protected].