Privacy Policy

Last updated: July 24, 2026

MdoubleA LLC ("MdoubleA," "we," "us," or "our") publishes Cardiac Codex, a mobile and web application that provides RCIS and RCES exam-preparation study materials, adaptive quiz practice, full-length mock exams, and an AI study assistant ("Cardiac Coach") for cardiac catheterization lab and electrophysiology professionals (the "Service"). This Privacy Policy explains what information we collect, how we use it, and the choices you have.

By creating an account or otherwise using the Service, you agree to the collection and use of information as described in this Privacy Policy.

1. Information We Collect

Account information

When you create an account, we collect your email address and a password (handled securely by our authentication provider, Supabase). You may optionally provide a display name.

Profile and study preferences

To personalize your study plan, we collect the certification track you're preparing for (RCIS, RCES, or both) and your target exam date.

Study and performance data

We collect the data generated as you use the Service, including your answers to practice questions, diagnostic assessments, and mock exams, quiz scores, concept-mastery data, flagged or bookmarked questions, and lesson progress.

Cardiac Coach conversations

If you use the Cardiac Coach chat feature, we collect the questions you submit and the responses generated. These messages are sent to our AI processing provider, Anthropic, to generate a response (see "Third-Party Service Providers" below).

Payment and subscription information

If you purchase a 6-Month Pass or Monthly subscription, payment is processed directly by Stripe, Inc. We do not collect or store your full card number. We receive and store limited billing metadata from Stripe, such as your plan, status, and transaction history.

Access codes

If you redeem an access code, we store the code and the date it was redeemed against your account.

Communications

If you join our waitlist, contact support, or otherwise email us, we collect your email address and the content of that communication.

Usage and device information

We automatically collect limited technical information needed to operate and secure the Service, such as IP address, device and browser type, and app usage logs.

What we don't collect: Cardiac Codex is a study tool for your own exam preparation. It is not designed to collect, store, or process protected health information ("PHI") about your patients, and MdoubleA LLC is not a HIPAA covered entity or business associate with respect to the Service. Please do not enter any patient-identifiable information anywhere in the app, including in Cardiac Coach conversations.

2. How We Use Information

To provide, operate, and personalize the Service, including adaptive quiz practice, mock exams, and the Cardiac Coach feature
To process payments and manage plans and subscriptions
To send account-related and transactional emails (e.g., receipts, access-code redemption confirmations, password resets)
To maintain, secure, and improve the Service
To detect, prevent, and address fraud, abuse, or technical issues
To comply with legal obligations

3. Third-Party Service Providers

We share information with the following service providers solely to operate the Service. We do not sell your personal information.

Supabase, Inc. — database, authentication, and backend infrastructure
Stripe, Inc. — payment processing and subscription billing
Anthropic, PBC — AI processing of Cardiac Coach conversations
Resend — transactional email delivery
Google LLC — Google Analytics, which we use to measure aggregate website traffic and understand which pages are useful. Analytics cookies and identifiers are set on our marketing website. You can opt out with Google's browser add-on or by using your browser's tracking-protection settings.
Cloudflare, Inc. — website hosting and content delivery, plus the Turnstile verification check on our free diagnostic, which is used to distinguish real visitors from automated abuse

We may also disclose information if required by law, subpoena, or other legal process, or to protect the rights, property, or safety of MdoubleA LLC, our users, or others.

4. Data Retention

We retain your information for as long as your account remains active, or as needed to provide the Service. If you delete your account, we will delete or anonymize your personal information within a reasonable period, except where we are required to retain it for legal, tax, security, or fraud-prevention purposes.

5. Your Rights and Choices

You may request access to, correction of, or deletion of your personal information at any time by contacting us at the email below. Depending on your location, you may have additional rights:

California residents have rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information we collect and the right to request deletion.
EU/UK/EEA residents, to the extent the General Data Protection Regulation (GDPR) applies, have rights including access, rectification, erasure, and data portability.

We use Google Analytics to measure aggregate site traffic, which sets first-party analytics cookies. You can opt out at any time using Google's browser add-on or your browser's tracking-protection settings.

6. Security

We use reasonable technical and organizational safeguards to protect your information, including encryption in transit and database-level access controls (row-level security). No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

7. Children's Privacy

The Service is intended for licensed and student healthcare professionals and is not directed to, or knowingly used by, children under 18. We do not knowingly collect personal information from children.

8. Intended Audience and International Users

Cardiac Codex is operated from the United States and is intended for clinicians in the United States. The RCIS and RCES credentials are administered by Cardiovascular Credentialing International, a US certifying body, and the Service is built around those US examinations. We do not target, market, or offer the Service to residents of the European Union, the European Economic Area, or the United Kingdom.

Information we collect is processed and stored in the United States through our service providers. If you access the Service from outside the United States, you do so on your own initiative, you are responsible for compliance with your local laws, and you understand your information will be transferred to, stored, and processed in the United States.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the updated version here with a revised "Last updated" date, and material changes will be communicated to you as required by law.

10. Contact Us

Questions about this Privacy Policy or your data? Contact us at info@cardiaccodex.com.

MdoubleA LLC