Boardright — Privacy Policy

Last updated: June 10, 2026

This Privacy Policy explains how EmergeMD LLC ("Boardright," "we," "us," or "our"), an Arizona limited liability company, collects, uses, and shares information when you use the Boardright mobile application and related services (the "Service"). By using the Service, you agree to the practices described here.

1. Who this applies to

Boardright is a study aid for anesthesiology residents, fellows, and physicians preparing for the American Board of Anesthesiology (ABA) APPLIED (oral) examination. The Service is intended for users who are 18 years of age or older. It is not directed to children, and we do not knowingly collect personal information from anyone under 18.

2. Information we collect

Information you provide

Account information — your email address and, depending on how you sign in, your name and the identifier provided by your authentication provider (Apple, Google, or email/password). Authentication is handled through our provider, Supabase.
Practice content — the answers and responses you type during practice cases and rapid-fire drills, the resulting AI-generated examiner dialogue, your scores, debriefs, and progress statistics.
Communications — information you provide when you contact us for support (e.g., the contents of your email to support@boardright.app).

Subscription information

If you purchase a subscription, our subscription provider (RevenueCat) and the app store (Apple App Store or Google Play) provide us with your subscription and entitlement status and a transaction identifier. We do not collect or store your payment card or bank details — all payments are processed by Apple or Google.

Information collected automatically

When you use the Service, our infrastructure providers automatically log standard technical data such as your IP address, device type, operating system, app version, and request timestamps. This is used for security, debugging, and reliability.

We do not currently use any third-party analytics or crash-reporting SDKs. If we add such tools in the future, we will update this Policy and, where required, the app's App Store privacy disclosures before doing so.

3. How we use your information

To provide and operate the Service, including generating AI examiner responses, scoring your performance, and tracking your progress.
To manage your account and your subscription, and to provide customer support.
To send you transactional emails (e.g., sign-up confirmation and password reset), sent via our email provider, Resend.
To maintain the security, integrity, and reliability of the Service.
To improve the Service and develop new features.
To comply with legal obligations and enforce our Terms of Service.

4. AI processing and service providers

To generate examiner dialogue, follow-up questions, and scored debriefs, the practice content you enter is transmitted to our AI provider, Anthropic, and processed by its Claude models through Anthropic's API. Anthropic processes this content to return responses to us and, per its API terms, does not use data submitted through its API to train its models.

We share information with the following service providers ("sub-processors") only as needed to operate the Service:

Provider	Purpose
Supabase	Authentication and database (account, practice content, scores)
Cloudflare	Application hosting, edge compute, and email routing
Anthropic	AI processing of practice content (examiner responses, scoring)
RevenueCat	Subscription management and entitlement status
Apple / Google	Sign-in and payment processing
Resend	Transactional email delivery

5. Do not enter real patient information

Important: Boardright uses fictional clinical scenarios for educational practice. You should not enter any real patient-identifiable information, protected health information (PHI), or other confidential clinical data into the Service. Boardright is not a clinical tool, is not intended to store patient records, and is not a HIPAA-covered service.

6. How we share information

We do not sell your personal information. We share information only: (a) with the service providers listed above; (b) when required by law or to respond to valid legal process; (c) to protect the rights, safety, or property of Boardright, our users, or the public; and (d) in connection with a merger, acquisition, or sale of assets, in which case we will notify you of any change in how your information is handled.

7. Data retention

We retain your account information and practice content for as long as your account is active. If you delete your account, we will delete or de-identify your personal information within a reasonable period, except where we are required to retain it for legal, security, or legitimate business purposes.

8. Your rights and choices

Access and correction — you can view and update your account information in the app, or contact us for help.
Account deletion — you can request deletion of your account and associated data at any time by emailing support@boardright.app (or via the in-app account deletion option where available).
Regional rights — depending on where you live (for example, under the EU/UK GDPR or the California Consumer Privacy Act), you may have additional rights to access, port, restrict, or delete your personal information, and to object to certain processing. To exercise these rights, contact us.

9. Security

We use reasonable administrative, technical, and organizational measures to protect your information, including encryption in transit and access controls on our databases. No method of transmission or storage is completely secure, however, and we cannot guarantee absolute security.

10. Children's privacy

The Service is intended for users 18 and older and is not directed to children. We do not knowingly collect personal information from children. If you believe a child has provided us personal information, please contact us and we will take appropriate steps to delete it.

11. International users

Boardright is operated from the United States. If you access the Service from outside the United States, you understand that your information will be processed in the United States, where data-protection laws may differ from those in your country.

12. Changes to this Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date above and, where appropriate, provide additional notice. Your continued use of the Service after changes take effect constitutes acceptance of the updated Policy.

13. Contact us

If you have questions about this Privacy Policy or your information, contact us at:

EmergeMD LLC
Email: support@boardright.app

This document is provided for general informational purposes and does not constitute legal advice. Boardright recommends review by a licensed attorney before publication.