Privacy Policy

WhatsTheDx is operated by PreTectal LLC. We provide a daily clinical reasoning game and related Dx+ features for healthcare students and professionals.

This Privacy Policy describes how we collect, use, disclose, retain, and protect personal information when you use WhatsTheDx. It applies to the website, account features, gameplay, subscriptions, support communications, and related services.

• Account information: email address, authentication identifiers, display name if provided, and account settings.
• Gameplay information: specialty selections, clues revealed, guesses, session status, completion status, streaks, history, and performance statistics.
• Subscription information: selected specialty, plan type, subscription status, customer identifiers, checkout events, and billing portal events. Stripe processes payment details; we do not store full payment card numbers.
• Device and usage information: IP address, browser type, device type, pages viewed, referrers, timestamps, diagnostics, and standard server logs.
• Product usage information: a record of actions you take that our servers handle — such as submitting a guess, finishing a case, starting a checkout, or completing a Clinical Brain review — together with a random first-party identifier stored in your browser so we can tell repeat activity apart. We use this only to understand which parts of WhatsTheDx are used and how people arrive at an account. It is never sold, never shared with advertisers, and never combined with data from other websites.
• Communications: messages you send us, support requests, feedback, and related metadata.

WhatsTheDx cases are educational scenarios. Your guesses and game activity are not medical records and are not intended to contain real patient information.

Do not enter patient names, contact information, medical record numbers, dates of birth, images, or other protected health information into WhatsTheDx, support messages, or feedback.

• Operate, secure, and maintain WhatsTheDx.
• Create and authenticate accounts.
• Save gameplay state, history, streaks, and performance analytics.
• Process purchases, renewals, cancellations, and subscription access.
• Send transactional messages such as account, security, billing, and service notices.
• Send a weekly email digest summarising your recent activity and the cases released for your specialty. We send it only if you opt in, every digest includes a one-click unsubscribe link, and your choice never affects your account or gameplay.
• Respond to support requests and feedback.
• Debug errors, prevent abuse, improve reliability, and develop new features.
• Comply with legal, tax, accounting, security, and regulatory obligations.

We do not sell personal information. We do not share personal information for cross-context behavioral advertising.

We may share information with service providers that help us operate WhatsTheDx, including:

• Supabase for authentication, database, storage, and related backend services.
• Stripe for checkout, payment processing, billing records, and subscription management.
• Vercel for hosting, deployment, delivery, and technical logs.
• Clerk for account authentication, sign-in, and the email address associated with your account.
• Resend for delivering transactional email and the weekly digest, including delivery and bounce reporting.
• Other vendors that provide email, security, analytics, support, or infrastructure services.

We may also disclose information if required by law, to protect rights and safety, to prevent fraud or abuse, or in connection with a merger, financing, acquisition, reorganization, or sale of assets.

We use cookies and similar browser storage for authentication, security, theme preferences, account state, and core app functionality. We also set a first-party identifier that lets us measure how WhatsTheDx itself is used; it is described in our Cookie Notice and is separate from the optional third-party analytics you can decline. We may also use limited logs to understand service performance and diagnose issues.

You can control cookies through your browser settings, but blocking necessary cookies may prevent account login, gameplay persistence, or subscription access from working correctly. Read our Cookie Notice for more detail.

We keep personal information for as long as needed to provide the service, maintain your account, comply with legal obligations, resolve disputes, enforce agreements, and protect the service.

If you request account deletion, we will delete or de-identify personal information within a reasonable period unless we need to retain certain records for legal, billing, security, fraud prevention, backup, or accounting purposes.

Depending on where you live, you may have rights to access, know, correct, delete, or export your personal information. You may also have rights to opt out of certain uses, limit certain sensitive-information uses, or avoid discriminatory treatment for exercising privacy rights.

To make a privacy request, email contact@whatsthedx.com. You can also review our Delete User Data page. We may need to verify your identity before completing a request.

We use reasonable technical and organizational measures designed to protect personal information. No internet service is completely secure, so we cannot guarantee absolute security.

WhatsTheDx is operated from the United States. If you access the service from another location, your information may be processed in the United States and other places where our providers operate.

WhatsTheDx is intended for users who are 18 or older. We do not knowingly collect personal information from children under 13. If you believe a child has provided us personal information, contact us so we can take appropriate action.

We may update this Privacy Policy from time to time. When we do, we will update the date on this page and provide additional notice if required.

Questions or requests about this policy can be sent to contact@whatsthedx.com.