Privacy Policy

Last updated: July 14, 2026

MdoubleA LLC ("MdoubleA," "we," "us," or "our") publishes Cardiac Codex, a mobile and web application that provides RCIS and RCES exam-preparation study materials, adaptive quiz practice, and an AI study assistant ("Cardiac Coach") for cardiac catheterization lab and electrophysiology professionals (the "Service"). This Privacy Policy explains what information we collect, how we use it, and the choices you have.

By creating an account or otherwise using the Service, you agree to the collection and use of information as described in this Privacy Policy.

1. Information We Collect

Account information

When you create an account, we collect your email address and a password (handled securely by our authentication provider, Supabase). You may optionally provide a display name.

Profile and study preferences

To personalize your study plan, we collect the certification track you're preparing for (RCIS, RCES, or both) and your target exam date.

Study and performance data

We collect the data generated as you use the Service, including your answers to practice questions and diagnostic assessments, quiz scores, concept-mastery data, flagged or bookmarked questions, and lesson progress.

Cardiac Coach conversations

If you use the Cardiac Coach chat feature, we collect the questions you submit and the responses generated. These messages are sent to our AI processing provider, Anthropic, to generate a response (see "Third-Party Service Providers" below).

Payment and subscription information

If you purchase a subscription or exam pass, payment is processed directly by Stripe, Inc. We do not collect or store your full card number. We receive and store limited billing metadata from Stripe, such as your subscription tier, status, and transaction history.

Access codes

If you redeem an access code, we store the code and the date it was redeemed against your account.

Communications

If you join our waitlist, contact support, or otherwise email us, we collect your email address and the content of that communication.

Usage and device information

We automatically collect limited technical information needed to operate and secure the Service, such as IP address, device and browser type, and app usage logs.

What we don't collect: Cardiac Codex is a study tool for your own exam preparation. It is not designed to collect, store, or process protected health information ("PHI") about your patients, and MdoubleA LLC is not a HIPAA covered entity or business associate with respect to the Service. Please do not enter any patient-identifiable information anywhere in the app, including in Cardiac Coach conversations.

2. How We Use Information

To provide, operate, and personalize the Service, including adaptive quiz practice and the Cardiac Coach feature
To process payments and manage subscriptions
To send account-related and transactional emails (e.g., receipts, access-code redemption confirmations, password resets)
To maintain, secure, and improve the Service
To detect, prevent, and address fraud, abuse, or technical issues
To comply with legal obligations

3. Third-Party Service Providers

We share information with the following service providers solely to operate the Service. We do not sell your personal information.

Supabase, Inc. — database, authentication, and backend infrastructure
Stripe, Inc. — payment processing and subscription billing
Anthropic, PBC — AI processing of Cardiac Coach conversations
Resend — transactional email delivery

We may also disclose information if required by law, subpoena, or other legal process, or to protect the rights, property, or safety of MdoubleA LLC, our users, or others.

4. Data Retention

We retain your information for as long as your account remains active, or as needed to provide the Service. If you delete your account, we will delete or anonymize your personal information within a reasonable period, except where we are required to retain it for legal, tax, security, or fraud-prevention purposes.

5. Your Rights and Choices

You may request access to, correction of, or deletion of your personal information at any time by contacting us at the email below. Depending on your location, you may have additional rights:

California residents have rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information we collect and the right to request deletion.
EU/UK/EEA residents, to the extent the General Data Protection Regulation (GDPR) applies, have rights including access, rectification, erasure, and data portability.

6. Security

We use reasonable technical and organizational safeguards to protect your information, including encryption in transit and database-level access controls (row-level security). No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

7. Children's Privacy

The Service is intended for licensed and student healthcare professionals and is not directed to, or knowingly used by, children under 18. We do not knowingly collect personal information from children.

8. International Users

The Service is operated from the United States, and information we collect is processed and stored in the United States through our service providers. If you access the Service from outside the United States, you understand your information will be transferred to, stored, and processed in the United States.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the updated version here with a revised "Last updated" date, and material changes will be communicated to you as required by law.

10. Contact Us

Questions about this Privacy Policy or your data? Contact us at info@cardiaccodex.com.

MdoubleA LLC