LEGAL
The service is designed to store account identity, authentication providers, subscription status, study sessions, answers, notes, marks, flashcards, review history, support requests, and technical security logs. Payment-card details are handled by Stripe and are not stored by PM&R Board Review.
The service is an educational product and must not be used to store patient information or other protected health information.
Data is used to provide the learning service, synchronize progress, enforce entitlements, improve item quality using de-identified aggregates, prevent abuse, and answer support requests. Account deletion is available from the account area, subject to limited legal, billing, fraud-prevention, and security retention requirements.
The platform uses specialized service providers for authentication, cloud data, hosting, and payment processing. Access is limited by account identity and entitlement, and payment-card details are handled by the payment processor rather than stored by PM&R Board Review.
No internet service can guarantee absolute security. Administrative, technical, and access-control measures are used to reduce foreseeable risk.