Last updated: June 13, 2026
CardioQFlow ("we," "our," "us") is a cardiovascular disease board exam preparation platform operated by CardioQFlow LLC, a California limited liability company. This policy explains what information we collect, how we use it, and the choices you have when you use the Service at cardioqflow.com. CardioQFlow is an independent product and is not affiliated with, endorsed by, or sponsored by any medical board or certifying body.
Account information. You can create an account with Google Sign-In or with an email address and password.
Profile information. If you choose to complete your profile, we store the details you provide, such as your name, training level, and training program.
Usage data. We collect data about how you use CardioQFlow, including:
Analytics and technical data. We use Google Analytics 4 to understand how the Service is used (for example, which pages are viewed and where new users come from). This involves standard technical information such as browser type, device type, approximate location, and event timestamps. Our analytics provider processes your IP address to derive a coarse, approximate location (such as country or region) and does not share your IP address with us; we do not store IP addresses for the purpose of identifying you. We do not collect special categories of personal data, and we do not ask you to enter patient information.
Your account and study data are stored in Google Firebase (Cloud Firestore and Firebase Authentication), hosted in the United States. Firebase provides encryption in transit and at rest. Your study-progress data is accessible only to your authenticated account and to the operators of CardioQFlow for support and administration. Payment data (such as card details) is collected and stored by Stripe, not by us.
We do not sell or rent your personal information. We share limited information with the service providers we rely on to operate CardioQFlow:
Each provider processes data under its own privacy policy. We may also use anonymized, aggregate data (for example, "65% of users answered this question correctly") to improve question quality and display answer distributions; this data cannot identify individual users. We may disclose information if required by law or to protect our legal rights.
We use Google Analytics 4, which sets first-party analytics cookies (such as _ga) to measure usage and improve the product. We do not use advertising or cross-site tracking cookies, and we do not sell your data. We also use your browser's localStorage to remember preferences (such as dark/light theme and highlight settings) and to hold the authentication tokens that keep you signed in.
You may:
If you are a California resident, the CCPA/CPRA gives you the right to know what personal information we collect, to request access to or deletion of it, to correct inaccurate information, to opt out of the sale or sharing of personal information, and not to be discriminated against for exercising these rights. We do not sell your personal information, and we do not share it for cross-context behavioral advertising. To make a request, email support@cardioqflow.com; we will verify your request and respond within the timeframe required by law.
We keep your account and study data for as long as your account is active. If you ask us to delete your account, we will remove your personal data from our active systems within a reasonable period, except where we must retain certain records (for example, billing records) to comply with law.
CardioQFlow is intended for medical professionals and trainees. We do not knowingly collect information from anyone under 18 years of age.
We may update this policy from time to time. We will revise the "Last updated" date above and, for significant changes, notify users via the app or email. Continued use after changes take effect constitutes acceptance.
For privacy-related questions or requests, contact us at support@cardioqflow.com. See also our Terms of Service.