Privacy Policy

Contents

1. Who we are
2. What ORReady is
3. Scope
4. Summary
5. Data we process
6. Notifications
7. What we do not do
8. Purposes
9. Legal bases
10. Sharing and disclosure
11. International transfers
12. Retention
13. Security
14. Your choices and controls
15. Your rights
16. Children
17. Changes
18. Contact

1. Who we are

ORReady is an educational mobile app for surgical learning.

Controller: Willem Knijnenburg, trading as ORReady, The Hague, the Netherlands.

Contact: orready@hotmail.com

2. What ORReady is

ORReady is an educational app. It is not a medical device and does not provide diagnostic or treatment advice.

3. Scope

This Privacy Policy covers the ORReady app (Android and iOS) as implemented in the current version, and the website orready.app. The website is a static site that sets no cookies and uses no analytics; only the hosting provider's standard server logs apply (see section 10).

4. Summary

• Core learning progress is stored locally on your device. There is no account requirement and no server-side progress sync in the current implementation. On Android, your device may include ORReady's progress and settings in the automatic app backup to your own Google account, under your device's backup settings; we have no access to that backup.
• Crash diagnostics are enabled by default (you can turn them off).
• Anonymous analytics are disabled by default and only enabled if you opt in. Before you make a choice, analytics events may be buffered locally; if you opt in later they may be sent to Analytics, and if you decline they are discarded.
• Reminders use local notifications (no push-notification backend).
• Lesson content is downloaded from our content service when you open a lesson. Each download is logged with a random installation ID for abuse prevention (section 5.5).
• If you report a problem with a question, your report is stored on our content service and mirrored into a private issue tracker (section 5.6).

5. Data we process

5.1 Data stored on your device

ORReady stores learning and app state locally on your device, including:

• app settings (language/theme, reminder preferences, sound/haptics)
• onboarding completion
• learning progress (lessons/questions progress, attempts, review scheduling)
• streak/XP/badges/missions/rank state
• local profile preferences (for example a local display name/avatar, if used)
• local backup/export payloads (for backup export/import)
• a random installation ID (32 hexadecimal characters) generated on first launch. It is not linked to your name, e-mail, device serial or advertising identifiers, and it changes if you reinstall the app or clear its data. It is shown in Settings so you can quote it in a deletion request (section 15).
• a cache of downloaded lesson content.

5.2 Support emails

If you email us for support, we process your email address and the content of your message to respond.

5.3 Crash diagnostics

If crash diagnostics are enabled, the app uses Firebase Crashlytics to collect crash and error diagnostics so we can detect and fix stability issues. Firebase states Crashlytics collects stack traces, relevant application state, relevant device metadata, and a Crashlytics installation UUID. Firebase also states Crashlytics retains crash stack traces, extracted data and associated identifiers for 90 days before starting removal from live and backup systems. Free-text you type into the app (for example a question report) is never attached to crash reports.

5.4 Analytics

If you opt in to analytics, the app uses Google Analytics for Firebase for usage measurement.

Google states that, by default, the SDK automatically collects an app-instance ID and a masked IP address (used to derive coarse location), and collects app lifecycle data like screen views and sessions. ORReady does not request the Android Advertising ID or the iOS advertising identifier, so Analytics cannot collect them. ORReady may also send app parameters such as lesson/question IDs, language, and correctness.

Important: pre-consent analytics buffering. Before you make an analytics choice, ORReady may buffer analytics events locally on your device. If you later enable analytics, buffered events may be sent to Analytics; if you decline analytics, they are discarded.

5.5 Lesson content downloads and abuse prevention

Lessons outside the built-in bootcamp and ATLS course are downloaded from our content service (Google Cloud Firestore) the first time you open them and then cached on your device. For every download the app records: the installation ID, the lesson identifier, the app version and platform, and a timestamp. The service also keeps a per-installation counter of downloads per hour and per day. We use these records only to detect and block automated bulk copying of our question bank, and to keep the service available for everyone. Requests are additionally protected by Firebase App Check, which sends a device integrity attestation to Google to confirm the request comes from a genuine copy of the app.

5.6 Question reports

If you use "Report a problem" on a question, we store: your message (up to 280 characters), the question and lesson identifiers and a short preview of the question text, the language you were using, optional tags, the app version, build number and platform, the installation ID, and a timestamp. The report is stored on our content service and automatically copied into a private issue tracker hosted by GitHub, Inc. so we can fix the question. Please do not include personal data in a report; it is only needed to describe the content problem.

5.7 Store review prompts

The app may occasionally ask whether you want to rate it. The prompt is shown by Google Play or the App Store, and any rating you leave is processed by Google or Apple under their own privacy policies; ORReady receives no personal data from it.

6. Notifications

If you enable reminders, ORReady schedules local notifications on your device. On Android 13+ and on iOS, this requires the runtime notification permission granted by the operating system.

7. What we do not do

• No paid subscriptions or in-app purchases are implemented.
• No account login is implemented.
• No cloud sync is implemented.
• No push notification backend is implemented.
• No advertising, no advertising identifiers, no cross-app tracking.
• We do not sell personal data and do not share it with data brokers.

8. Purposes

We process data to:

• provide core learning features (progress, review scheduling, settings)
• deliver lesson content and keep it available (content downloads, caching)
• maintain and improve app stability (crash diagnostics)
• measure usage and improve the product (only if you opt in to analytics)
• fix content errors that you report to us
• protect the service against abuse and automated copying.

9. Legal bases

• App functionality (local progress/state, content downloads and caching): performance of a contract (providing the service you requested).
• Crash diagnostics: legitimate interests (stability and security of the app), with an opt-out; legitimate interests require a documented assessment and balancing.
• Analytics: consent (opt-in). Consent must be freely given, specific, informed and unambiguous, and must be withdrawable.
• Download logging, rate limiting and App Check: legitimate interests (protecting our content and service against abuse); a balancing assessment is on file.
• Question reports: performance of a contract (you ask us to act on your report) and legitimate interests (content quality).

10. Sharing and disclosure

• We do not sell personal data.
• In the current implementation, learning progress is not transmitted to our servers.
• If crash diagnostics and/or analytics are enabled, data is processed by Google Ireland Limited / Google LLC (Firebase) as a service provider (Crashlytics / Analytics).
• Content downloads, download logs and question reports are stored in Google Cloud Firestore (Firebase), operated by Google as our processor. Firebase App Check attestations are processed by Google.
• Question reports are mirrored into a private repository on GitHub (GitHub, Inc.), which acts as our processor for issue tracking.
• The website orready.app is hosted by Netlify, Inc., whose servers process your IP address and request headers in standard server logs.
• If you use the backup export/share feature, you may choose to transfer a backup file to another app or service. This transfer is user-initiated.
• On Android, the operating system may back up ORReady's app data to your own Google account (Android Backup). This is controlled by your device settings, not by us.

11. International transfers

Google, GitHub and Netlify are established in the United States. Transfers rely on the EU-US Data Privacy Framework where the provider is certified, and otherwise on the European Commission's Standard Contractual Clauses included in each provider's data processing terms.

12. Retention

We keep personal data only for as long as needed to provide ORReady, respond to your requests, and maintain the quality and security of the app. The following retention periods apply:

• Learning progress and app settings: stored on your device until you delete the app or clear its data.
• Crash reports: retained for 90 days before removal begins.
• Download records: retained for up to 2 years after collection.
• Security and abuse-prevention records: retained for up to 2 years after the last activity.
• Question reports: retained for up to 2 years after submission.
• Support correspondence: retained for up to 2 years after your last message.

13. Security

We apply appropriate technical and organizational measures. Data transmitted to Firebase is encrypted in transit using TLS. Access to our Firebase project and issue tracker is limited to the controller and protected by two-factor authentication. Our content service only accepts writes that match strict validation rules, and only from attested copies of the app.

14. Your choices and controls

• You can enable/disable analytics in app settings.
• You can disable crash diagnostics in app settings.
• You can enable/disable reminders and manage notification permissions in your device's system settings (Android Settings or iOS Settings).
• To delete local data, uninstall the app or clear its data.
• To stop Android from backing up ORReady's data, disable app backup for ORReady in your device's Google backup settings.

15. Your rights

Depending on your location, you may have rights of access, rectification, deletion, restriction, objection, and data portability.

Because ORReady has no accounts, the only key to server-side records about your installation is the installation ID shown in Settings. Send it to orready@hotmail.com and we will delete the download logs, counters and question reports linked to it within 30 days. Records that are already anonymised (for example a report whose installation ID has been removed) cannot be traced back to you and are therefore outside this request. Crash and analytics data are held by Google under identifiers we cannot look up; you can stop further collection at any time in Settings.

16. Children

ORReady is intended for general educational use. If you believe a child has provided personal data via support email, contact us for deletion.

17. Changes

We may update this policy. The "Last updated" date will change, and material changes will be announced in the app's release notes.

18. Contact

Privacy questions: orready@hotmail.com