Privacy policy.

Who to contact

For privacy questions, requests or complaints, contact the CCS Orbit operator at support@ccsorbit.com. Please include enough information for us to understand your request without sending sensitive identity documents or patient information.

Your study data stays on your device

The app stores your optional display name and exam date, study preferences, case attempts and scores, in-progress simulation, bookmarks, saved debriefs and error-review history on your device. These records support your study experience. The app does not upload them to a CCS Orbit account or study-data server, and you do not need to create an account.

Study reminders are local notifications. The app asks for notification permission when you enable reminders; you can turn them off in the app or in your device settings. We do not use a remote push-notification service for these reminders.

Your device and its backup settings may separately retain app data. CCS Orbit does not operate a cloud backup or device-to-device sync service for study progress.

Purchases and membership

Apple processes App Store payments. We do not receive your payment-card details. The app uses RevenueCat to validate purchases, restore access and determine your Orbit Plus entitlement.

RevenueCat processes purchase information, product and transaction identifiers, entitlement status and an app-generated anonymous customer identifier, together with technical information needed to operate the service. We use its purchase reporting for app functionality and purchase analytics. The app does not send your study profile or case history to RevenueCat, and does not use your optional display name as its customer identifier.

See Apple’s privacy policy and RevenueCat’s privacy policy for their practices. The Exam Pass and lifetime access are one-time purchases with no automatic renewal. Removing the app or resetting study progress does not erase store transaction records or restart the Exam Pass access period.

Support and case suggestions

When you submit a suggestion in the app, it sends the description you enter, an optional suggested correction, the case ID, number and title, the feedback category, the screen you submitted it from, the app version, the simulated time when available, and an optional reply email address that you enter. A report reference identifies the submission and prevents duplicate reports when delivery is retried; it is not an account ID.

Reports are sent over HTTPS through Cloudflare Workers and stored in Cloudflare D1. We use them to investigate clinical-content, scoring and app issues, respond when you provide a reply address, and improve CCS Orbit. The app does not attach your study profile, display name, exam date, purchase identifier, full attempt history or simulation chart. Information that you type into the report is included, so please keep personal or sensitive details out of it.

A copy of the suggestion stays on your device. If receipt is not confirmed, the app queues it and retries while the app is open or when you reopen it. Suggestions saved under the older local-only email flow are not automatically uploaded after an app update; you must choose to send them.

If you separately email support or share a copy, your email or sharing provider handles that action under its own privacy practices. When we receive an email, we receive your email address, message, attachments and any details you choose to include.

Please do not include real patient information, medical records or other sensitive information in suggestions or attachments. The app uses fictional patients and is not a place to store patient data.

Technical information and this website

Hosting and security providers, including Cloudflare, may process your IP address, browser or device details, requested page and request time to deliver and protect the website and feedback service. Cloudflare also processes connection and security information for submitted reports. Website fonts are hosted with this site. See Cloudflare’s privacy policy.

The website uses Google Analytics across its pages to measure visits and usage. Google may process page visits, browser and device information, approximate location and cookie or similar identifiers under its own practices. We do not send in-app study records or feedback submissions to Google Analytics, and we do not use advertising pixels. Your browser settings can limit cookies and some analytics requests. See Google’s privacy policy. Our hosting provider may also use essential security cookies and automated checks to protect the website from abuse.

The app’s crash-reporting integration uses Sentry when a Sentry endpoint is configured in the build. It can send error messages, stack information, app version and limited diagnostic context to investigate reliability issues. The current reporter does not intentionally attach your study profile, case history or feedback drafts. Network services may also receive technical connection information. See Sentry’s privacy policy.

Launch notifications

If you opt in on the website, we store your email address, the time you signed up and a record of your consent in Cloudflare Workers KV. We use it to send you one notice when CCS Orbit is available on the App Store. You can ask us to delete your email at support@ccsorbit.com. We keep it until the launch notice is sent or you ask us to remove it.

Cloudflare Turnstile checks signup requests for abuse and may process device and network information. See Cloudflare’s privacy policy for details.

Website mnemonic suggestions

The mnemonic database accepts the mnemonic and expansion you submit, plus any optional use case, source, requested public credit and reply email. Suggestions are sent over HTTPS through Cloudflare Workers and stored in Cloudflare D1 for editorial review; they are not published automatically. Cloudflare Turnstile checks submissions for abuse and may process device and network information.

We use the content to review and improve the database and any reply email to ask about your suggestion. Your reply email is not published. If you request a public credit, your chosen name or handle may be published with an accepted entry. You can leave credit and email blank. Please do not submit patient information. To request access, correction or deletion, email support@ccsorbit.com and identify the suggestion.

How information is used and shared

We use information to deliver the app and website, provide purchased access, maintain security and reliability, respond to requests and meet applicable legal obligations. We do not sell personal information or use it for cross-app advertising tracking.

We use service providers for these purposes and review their privacy and security terms. Providers may process information outside your country, where privacy laws can differ. Contact us about the providers involved in your request.

Where a legal basis is required, processing depends on the activity: providing a requested service, our legitimate interests in security and support, legal obligations, or consent where required. You may withdraw consent for optional processing without affecting processing already lawfully completed.

Retention and security

Local study records remain until you remove them using the app’s controls, remove app data or delete the app, subject to your device’s backup behavior. Deleting an attempt removes its linked local learning records. Local suggestions have separate storage; resetting practice history does not delete all suggestions or profile settings.

Submitted reports are retained for investigation, review and support. Marking a report fixed or dismissed does not delete it. Deleting a local copy, resetting practice history or removing the app does not delete a report already received by the support service. To request access, correction or deletion of a submitted report, email support@ccsorbit.com and include its report reference if available.

We retain support information only as long as needed to handle the request, maintain relevant support records and meet legal requirements. Purchase records may need to be retained for entitlement, accounting, fraud prevention or legal obligations. Provider retention schedules also apply. Contact us to request deletion of information we control; we will explain any information that must be retained.

We use reasonable safeguards appropriate to the information, including secure network connections, but no storage or transmission method is completely secure. Protect access to your device and your Apple account.

Your choices and rights

You can leave optional profile fields blank, change your profile and reminder preferences, and reset practice data in Profile. Review your purchase history through your Apple account. If you remove the app, study progress may be lost even though eligible purchases can be restored.

Depending on your location, you may have rights to access, correct, delete or obtain a copy of information, restrict or object to processing, or complain to a privacy regulator. Send requests to support@ccsorbit.com. We may ask for proportionate verification and will respond within applicable legal timeframes. We cannot remotely access or restore study records kept only on your device.

Children and changes to this policy

CCS Orbit is intended for adult medical learners, not children. We do not knowingly seek personal information from children. Contact us if you believe a child has sent us personal information.

We may update this policy as the app or our practices change. The effective date above identifies the current version. We will provide additional notice or seek consent where required for material changes.