Privacy Policy

We collect only what we need to run your account and your practice:

• Account details you give us when you register: first name, last name, email address and a password. We never store your password itself — only a one-way cryptographic hash of it.
• Workspace details if you join a training organization: which organizations you belong to and your role (for example, trainee or trainer).
• Learning activity: the courses, quizzes, flashcards and question banks assigned to you, the answers you submit, your scores and your progress.
• Content you upload if you are a trainer, such as course text, documents, videos and images.
• Technical information: when you last signed in, and standard server logs (such as IP address and browser type) kept by our hosting provider to operate and secure the service.

• To create and secure your account, including sending sign-in and email-verification codes.
• To deliver courses and practice questions, record your answers, and show your progress and scores.
• To send you service messages, such as new assignments or password resets.
• To respond to your support and privacy requests.
• To keep the service secure, prevent abuse, and meet our legal obligations.

Climb the Boards does not sell your personal information and does not share it for advertising. We share it only with:

• Your training organization, if you joined through one: its administrators and trainers can see your name, email address, assignments, answers and results.
• Service providers that run the service on our behalf: cloud hosting and database providers, file storage, and our email delivery provider.
• AI model providers, which receive course material uploaded by trainers so that we can generate practice questions and flashcards. Your name, email address and answers are not sent to them.
• Legal and safety recipients, when required by law or to protect the rights and safety of our users, and a successor organization if Climb the Boards is merged or sold.

We do not use advertising or analytics cookies, and we do not allow third parties to collect personal information about you through our website. Your browser's local storage keeps you signed in and remembers your display preferences (such as light or dark mode).

We keep anonymous daily totals of how many times our home page is visited and how many times its log-in and sign-up buttons are clicked. These totals are not linked to you, your account, your IP address or your device.

Because we do not track you across other websites, we treat all visitors the same way whether or not their browser sends a “Do Not Track” signal.

You can ask us to show you the personal information we hold about you, correct it, or delete your account by emailing [email protected] from the address on your account. We aim to respond within 30 days.

If you joined through a training organization, some requests (for example, removing your results from that organization) may also need to go through its administrators; we will help coordinate.

We keep your information while your account is active. When you ask us to delete your account, we delete or anonymize your personal information, except where we must keep it to meet legal obligations, resolve disputes or enforce our agreements. Verification and password-reset codes expire after 10 minutes.

We use industry-standard safeguards, including encrypted connections (HTTPS), hashed passwords and verification codes, limits on repeated sign-in attempts, and separation of each organization's data. No system is perfectly secure; if a breach affects your personal information, we will notify you as required by law.

Climb the Boards is intended for adult learners and professionals. You must be at least 18 years old to create an account, and everyone who registers is asked to confirm this. The service is not directed to children under 13, and we do not knowingly collect personal information from anyone under 18. If you believe someone under 18 has given us personal information, contact us at [email protected] and we will close the account and delete it.

We do not sell or share your personal information for cross-context behavioral advertising, and we do not disclose it to third parties for their own direct marketing. You may contact us at [email protected] with any privacy question or request, and we will not treat you differently for doing so.

We will post any changes on this page and update the effective date above. If we make a material change, we will also notify you by email or with a notice in the app before it takes effect.

Questions or requests about this policy or your personal information: [email protected].