Information you give us

Account information. Created on rxce.com: name, email address, password (stored only as a cryptographic hash), and depending on your profession and purchases, mailing address and date of birth.

Professional credentials. Because we award continuing education credit and must be able to report it, we collect the identifiers your accrediting and licensing bodies require: profession, license number, licensing state, National Provider Identifier (NPI), and — for pharmacy professionals — NABP e-Profile ID and CPE Monitor date of birth. Date of birth is used for credit reporting and matching only.

Payment information. Handled by Stripe. Card numbers never touch RxCe servers. We retain records of purchases.

Things you write. Course evaluations, commercial-bias reports, Virtual Patient Labs responses, and support messages.

Information created by using our services

Courses started and completed, credit hours awarded, assessment and evaluation responses, episode listening progress in the mobile app, certificates issued, and dates for each.

Technical information

Server logs, which include IP address, browser or device type, and pages or screens accessed. This applies to both the website and the mobile app — the app's requests to our servers and content delivery network are logged like any other traffic, including IP address. On the website, cookies as described in section 6.

The mobile app

The iOS app is designed to collect only:

The app does not request your location, contacts, camera, microphone, or photos. It contains no advertising or analytics SDKs and does not track you across other companies' apps or websites.

Two honest caveats. First, as noted above, the app's network requests are logged server-side, including IP address. Second, some features open rxce.com inside the app — managing or deleting your account — and within that in-app browser, the website's own cookies and data practices described in this policy apply.

Credit reporting to accrediting and licensing systems

When reporting is required for the credit type, or when you request or authorize reporting on your behalf, we transmit the information the applicable system requires. The pathways differ by profession:

Pharmacists and pharmacy technicians. Credit is reported through NABP CPE Monitor, as ACPE requires. These reports use your NABP e-Profile ID, date of birth (month and day), the activity information, participation date, and credit awarded.

Physicians and physician assistants. We report completed credit through ACCME's Program and Activity Reporting System (PARS). PARS makes credit data available to participating state medical licensing boards and specialty certifying boards, which can eliminate the need to submit your own transcripts to those boards. These reports use your name, date of birth (month and day), state of licensure, and license number or NPI. For certain credit types — including Maintenance of Certification — this reporting is required for the credit to count.

These bodies are regulatory reporting recipients, not service providers acting on our behalf.

Virtual Patient Labs and AI processing

Virtual Patient Labs (VPL) activities are simulated clinical encounters: you interview a computer-generated patient, order tests, and make clinical decisions, and your performance is scored against the activity's rubric.

VPL uses an artificial-intelligence language model service to run these encounters. The simulated patient's responses are AI-generated in reply to what you type, and your written responses and decisions are processed by the AI service to produce your scores and feedback. Feedback may quote your own words back to you.

What this means for your information:

• The encounter transcript — the things you type during a VPL activity — is transmitted to OpenAI for processing, through its commercial API under a business agreement.
• We do not include your name, email address, or professional identifiers in the content sent for AI processing. The service scores a transcript; it is not told who you are.
• This content is not used to train AI models. OpenAI's commercial API terms state that data submitted through the API is not used to train its models.
• OpenAI retains API inputs and outputs for up to 30 days for abuse monitoring, in line with its published policy, after which they are deleted from its systems.

Your responses, scores, and feedback are stored in RxCe's own systems as described in this policy. Your VPL written responses are deleted if you delete your account (section 8).

As with all RxCe services, do not include real patient information in VPL responses. These are simulated encounters, and nothing you type should identify an actual patient.

Service providers

These companies process personal information only to provide their services to us:

We update this list when our providers change.

Legal

We may disclose information where required by law, to enforce our terms, or to protect the rights, property, or safety of RxCe, our users, or others.

Business transfers

If RxCe is acquired or merges, account information may transfer as part of that transaction, and we would notify you before your information became subject to a different policy.

How

• Website: sign in → Account → Manage → Delete Personal Data
• Mobile app: Profile → Delete Account, which opens the same page in an in-app browser

You will be asked to sign in, enter your password, acknowledge what is deleted and what is kept, and type DELETE to confirm. This is deliberate: an account cannot be deleted from a signed-in device alone.

What is deleted

Your profile — name, date of birth, email address, mailing address · license numbers, licensing state, and NABP/CPE Monitor settings · marketing preferences and list membership · support and staff notes held in your RxCe account · sign-in and activity history · saved sign-in tokens on every device · saved cart · Virtual Patient Labs written responses · saved topics in the mobile app.

Support correspondence. Deleting your account removes the support notes attached to it. Email you have sent to our support address is also held in our help-desk system, which is separate from your account. To have that correspondence removed as well, email us at help@rxce.com — including your deletion confirmation code if you have already deleted your account.

What is kept

Retained completion and evaluation records are de-identified: your name and professional identifiers are removed and replaced with a random reference.

If you contact us afterward

You will receive a confirmation code (RXCE-DEL-XXXXXXXX) by email. Keep it — it is the reference for any future support request.

If you lose the code, there is a narrow recovery path: if you present your own email address or license number, we can cryptographically confirm whether it matches a deletion record. This uses one-way keyed fingerprints — we retain no readable copy of either, and the mechanism can only confirm a match to information you supply. It cannot re-identify retained records or restore the account.

What deletion means for you — read before deleting

It cannot be undone, and your credit records cannot be re-linked to you afterward.

Download your transcript before deleting. Credit already transmitted to CPE Monitor or to licensing boards through PARS remains in those systems, but RxCe will no longer be able to produce, re-issue, or verify certificates for you.

Credit not yet reported may never be reported. Completions transmit on a schedule; anything unsent at deletion cannot be sent afterward.

Privacy rights

Several U.S. states, and other jurisdictions, give residents specific rights over their personal information. Rather than asking you to determine which laws apply to you, we extend the following to everyone who uses RxCe:

• Access — request a copy of the personal information we hold about you
• Correction — sign in at rxce.com to correct your information, or contact us for help
• Deletion — delete your account as described in section 8
• Portability — download your credit transcript from your account at any time
• Opt out of targeted advertising — contact us and we will exclude you, and see the opt-out tools in section 5
• No penalty — we will not deny you service, charge you a different price, or provide a lower quality of service for exercising any of these rights

To make a request, email help@rxce.com. We will verify your identity before acting on requests about specific information, and respond within the time the applicable law requires — generally within 45 days. If we cannot fulfil a request, we will tell you why. If you disagree with our decision, you may appeal by replying to us, and we will respond to appeals in writing.

Canadian users

The rights above are offered to everyone. If you are located in Canada, you may also have statutory rights described below.

If you are located in Canada, your personal information may be protected by the federal Personal Information Protection and Electronic Documents Act ("PIPEDA") and, depending on where you are located and the circumstances, applicable provincial privacy laws. These may include the private-sector privacy laws of Quebec, British Columbia, and Alberta.