Privacy Policy

TAFMEDS ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our digital fluency-building platform at tafmeds.com.

TAFMEDS is a commercial subscription service and a product of ClassroomPulse.io. By using our platform, you agree to the collection and use of information in accordance with this policy.

Account Information

When you register for TAFMEDS, we collect:

• Email address - For account access and communications
• Date of birth - Collected at registration (and when completing your profile after Google sign-in) solely to verify that you are 18 years of age or older, as required by our Terms of Service
• Account credentials - Password is securely encrypted using industry-standard methods
• Role designation - Student, teacher, or administrator status

Learning and Practice Data

To power your practice sessions, progress tracking, and charts, we collect:

• Typing baseline assessment results (speed and accuracy)
• Practice session data (responses, timing, accuracy metrics)
• Session frequency, duration, and completion rates
• Learning module progress and quiz scores
• Standard Celeration Chart data points

Usage Information

We automatically collect certain technical information when you use the platform:

• Browser type, version, and language preferences
• Device information and screen resolution
• Session timestamps and duration
• Feature usage patterns and navigation paths
• Error logs for troubleshooting purposes

We use the collected information for the following purposes:

We rely on a small set of third-party service providers (subprocessors) to operate TAFMEDS. Each processes data only on our instructions and for the purpose listed below:

• Google Firebase / Google Cloud: Authentication, database, and hosting infrastructure for your account and learning data
• Vercel: Application hosting and content delivery
• Stripe: Payment processing for subscriptions (we never store your full card details)
• Anthropic: AI explanations of missed items, the study coach (daily plans and conversations), and practical-scenario feedback. Your typed practice attempts, the vetted answers, aggregate performance statistics, and the messages you write to the coach are sent to Anthropic to generate feedback; your name and email are not, and the data is not used to train Anthropic's models
• Google (Gemini via Vertex AI): AI semantic matching of your typed responses on paid plans, progressive hints, and content generation for our decks and question bank, under the same purpose limitation as above
• Resend: Transactional and (opt-in) marketing email delivery
• Sentry: Error monitoring and diagnostics (error logs may include technical identifiers)
• Upstash (Redis): Caching and rate limiting
• Google Analytics: Consent-gated usage analytics (see our Cookie Policy)

All subprocessors are bound by data processing agreements. We will update this list when we add or replace a provider that processes personal data.

We do not sell your personal information. We may share your information only in these limited circumstances:

• Educational Institutions: Teachers may view student progress within their assigned classes only
• Service Providers: The subprocessors listed above (e.g., Firebase for authentication, Stripe for payments, Anthropic for AI features), all bound by data processing agreements
• Legal Requirements: When required by law, court order, or to protect our legal rights and safety

We implement industry-standard technical and organizational security measures to protect your data:

• Encryption in Transit: All data transmitted between your browser and our servers uses TLS 1.3 encryption (HTTPS)
• Encryption at Rest: Sensitive data is encrypted using AES-256 encryption in our databases
• Secure Authentication: Industry-leading authentication through Firebase with support for multi-factor authentication
• Access Controls: Role-based access controls limit data visibility to authorized personnel only
• Regular Audits: We conduct regular security reviews and vulnerability assessments

We retain your data according to the following guidelines:

• Account Information: Retained while your account is active and for 30 days after a deletion request
• Learning and Progress Data: Retained while your account is active. If you cancel a subscription, progress data is kept for 90 days so you can resubscribe and pick up where you left off
• Usage Logs: Retained for 90 days for security and troubleshooting purposes

You may request deletion of your account and associated personal data at any time by contacting privacy@tafmeds.com or using the account-deletion option in Settings.

Depending on your location, you have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you
• Correction: Request correction of inaccurate or incomplete data
• Deletion: Request deletion of your data (subject to legal and research requirements)
• Portability: Request your data in a portable, machine-readable format
• Objection: Object to certain processing activities
• Withdrawal: Withdraw consent at any time (where processing is based on consent)

To exercise these rights, please contact us at privacy@tafmeds.com. We will respond to your request within 30 days.

We use the following types of cookies and similar technologies:

• Essential Cookies: Required for platform functionality (authentication, session management, security)
• Preference Cookies: Remember your settings (theme, language preferences)
• Analytics Cookies: Help us understand platform usage patterns (Google Analytics)

You can control cookie settings through your browser preferences. Note that disabling essential cookies may affect platform functionality.

For more details, see our Cookie Policy.

TAFMEDS is an adults-only service for graduate students, educators, and professionals in the field of Applied Behavior Analysis. You must be 18 years of age or older to create an account. We verify age by collecting your date of birth at registration, and we do not knowingly collect information from anyone under 18 years of age.

If you believe we have inadvertently collected information from a minor, please contact us immediately at privacy@tafmeds.com and we will take steps to delete such information.

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors.

When we make changes:

• We will update the "Last updated" date at the top of this page
• For material changes, we will notify you via email or a prominent notice on the platform
• We encourage you to review this policy periodically

Your continued use of TAFMEDS after changes are posted constitutes acceptance of the updated policy.

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

We aim to respond to all inquiries within 48 business hours.