Privacy Notice
Who we are
OrthoAleph ("OrthoAleph", "we", "us") operates the OrthoAleph orthopedic learning platform at orthoaleph.com. OrthoAleph is the data controller for the personal data described in this notice. You can reach us at support@orthoaleph.com.
Personal data we collect and why
- Account data (email address, password credentials, display name, hospital/affiliation, language) — to create and secure your account and provide the service. Legal basis: performance of a contract.
- Learning data (questions answered, scores, bookmarks, notes, flashcards, streaks, progress) — to deliver the study features, analytics, and leaderboards. Legal basis: performance of a contract.
- Support and feedback messages (contact form content, question reports) — to answer you and improve content. Legal basis: legitimate interests.
- Technical and usage data (IP address, device and browser information, log and error data, feature usage) — for security, abuse and fraud prevention, and product improvement. Legal basis: legitimate interests.
- Subscription status (plan, status, renewal dates, provider identifiers) — to give you access to paid features. Legal basis: performance of a contract.
Payment card details are never collected or stored by us — they are handled directly by our payment provider.
Who we share data with
- Service providers / subprocessors — hosting, database and authentication infrastructure, email delivery, error monitoring, and AI providers that generate explanations and translations.
- Merchant of Record — Paddle.com, which handles the sale of our products, subscription management, payments, invoicing, and tax compliance.
- Professional advisers — legal and accounting advisers where necessary.
- Authorities — where required by law or to protect our legal rights.
We do not sell your personal data.
International transfers
Our providers may process data outside your country, including outside the EEA/UK. Where that happens, transfers are protected by appropriate safeguards such as Standard Contractual Clauses or an adequacy decision.
Retention
We keep account and learning data for as long as your account is active. If you delete your account, we delete or anonymise your personal data within a reasonable period, except where we must retain records (for example transaction and tax records) to meet legal obligations.
Your rights
Depending on where you live, you may have the right to access, correct, delete, restrict, or object to our processing of your personal data, to receive a portable copy, and to withdraw consent where processing is based on consent. Users in the EEA/UK also have the right to complain to their supervisory authority. Contact us at support@orthoaleph.com and we will respond within one month.
Security
We use appropriate technical and organisational measures, including encryption in transit, row-level access controls in our database, hashed credentials, and two-factor authentication for administrative accounts.
Cookies and local storage
We use essential cookies and browser storage to keep you signed in, remember your language and preferences, and store your current study session. We do not use advertising cookies. You can clear or block cookies in your browser settings, but the platform may not work correctly without essential ones.
Children
The platform is intended for users aged 18 and over and is not directed at children.
Changes
We may update this notice. Material changes will be posted on this page with a revised date.