Privacy Policy

Account details (name, email, password credentials handled by our authentication provider), profile answers you submit (stage, school, goals), activity such as community posts, tool use and session attendance, support messages, and technical data such as device and browser information.

When a parent, guardian, or organization pays for a student, we collect the payer’s name and email alongside the student’s name and email so we can route receipts, billing notices, and access correctly. Payer and student records are linked to the same order.

Members under 18 must have a parent or guardian on the account. We collect the minimum needed to deliver the program, we do not sell personal information, and we do not serve behavioral advertising to minors. A guardian may request access to or deletion of a minor’s data at any time.

Payments are processed by Stripe. We never receive or store full card numbers. We store Stripe identifiers (customer ID, subscription ID, session ID), payment status, and subscription status so we can grant and maintain access.

Accounts, program data, and entitlements are stored in our managed backend database with row-level security so members can only read their own records. Passwords are stored hashed by our authentication provider.

We store, in your browser, how you found us: the UTM campaign parameters on your first visit (kept with the page referrer that sent you) and on your most recent visit. When you start a checkout while signed in, those values are saved with your account so we can attribute the purchase. We also look at aggregate usage of pages and tools so we can improve the program. We do not sell this data.

We send transactional email (receipts, membership confirmations, membership and session notices, session reminders) and, if you opt in, newsletters. You can unsubscribe from marketing email at any time; transactional email continues while you hold an account.

We share the minimum necessary data with providers who help us operate: payment processing, hosting, database and authentication, email delivery, and analytics. They are bound to use it only to provide those services.

We keep account and purchase records for as long as your account is active and afterwards as required for tax, accounting, and dispute-resolution purposes. You may request deletion of data we are not legally required to keep.

We use encrypted transport, row-level access controls, server-side gating of paid content, and least-privilege access to production systems. No system is perfectly secure, and we cannot guarantee absolute security.

You may access, correct, export, or delete your personal information, opt out of marketing email, and cancel recurring billing at any time. Depending on where you live, you may have additional rights under state or national privacy law.

Future Legends Medical Academy LLC — hello@futurelegendsmedacademy.com.