Last updated: September 1, 2026

Privacy Policy

Who we are and what this policy covers

Rad at Hand LLC ("Rad at Hand," "we," "us," or "our") operates radathand.com, Radiology CaseBank, the Radiology CORE QBank website and mobile application, the Radiology Calculators mobile application, and related services (collectively, the "Services"). This Privacy Policy explains how we collect, use, disclose, retain, and protect personal information when you use the Services.

For privacy questions or requests, contact us at support[at]radathand.com. Replace [at] with @ when sending an email. If a study-specific information sheet gives different privacy or research contact details, that document provides additional information for that study.

Information we collect

Website visitors, accounts, and communications

Depending on how you use the website, we may collect:

  • Account and profile information: name, email address, username, institution or organization, and account settings.
  • Authentication information: account credentials are handled by the applicable authentication provider. We do not receive your plaintext password. If you use Google, Apple, or another supported sign-in provider, we may receive the profile information that provider makes available to us, such as your name, email address, and provider identifier.
  • Comments and submitted content: the information you enter in a comment, contact, feedback, support, or other form. Comments may also include your IP address and browser user-agent information for spam prevention and security.
  • Technical and security information: IP address, device, browser, operating-system, application-version, log, and security information that is generated when you access the Services or is needed to prevent abuse and troubleshoot problems.
  • Social-login information: public profile information that you authorize a supported social-login provider to provide. We use it to create and manage your website profile.

Payments and subscriptions

If you purchase website access or a subscription, payment is processed by Stripe or another processor identified at checkout. We may receive transaction and subscription information such as your name, email address, plan, payment status, subscription dates, invoice history, processor customer and subscription identifiers, and limited card details such as card brand, last four digits, and expiration date. We do not store full payment-card numbers or payment-account credentials on our own servers.

Purchases made through Apple App Store or Google Play are handled by the relevant store. We may receive purchase, entitlement, or refund-related information needed to provide access, manage subscriptions, prevent fraud, and respond to a refund request you initiate.

Educational and learning data

When you use Radiology CORE QBank or another account-based educational feature, we may collect and store the data needed to provide the feature. This can include quiz sessions, selected answers, correctness, scores, time spent, progress, bookmarks, highlights, notes, flashcards, spaced-repetition status, study streaks, chapter or topic activity, and related settings. We associate this information with your account so that your progress can be available across your signed-in devices.

When you complete a Radiology CORE QBank quiz, we use the server-verified quiz result to update aggregate QBank performance statistics. Your learning record remains associated with your account so we can provide the quiz and progress features, but the aggregate used for peer comparison contains only the QBank, score-range counts, and update time; it does not contain your name, email address, account ID, or session ID. We keep a limited account-scoped marker while your account exists solely to prevent a completed quiz from being counted more than once and to maintain one current score range per user for each QBank.

Peer comparison is shown only after there is a minimum aggregate QBank user cohort. It provides an approximate percentile for your completed quiz; it does not disclose another user's score, identity, profile, or individual quiz record. We use these aggregate or de-identified statistics to improve the QBank, understand question difficulty, and provide peer-comparison features.

Radiology Calculators app

The Radiology Calculators app provides clinical calculators and related educational tools. Calculator inputs and results are processed on your device for the calculator feature itself. If you choose to save an image from the app, the app asks for the device permission needed to save that image to your device's photo library; we do not receive the saved image merely because you save it. The app may also store account settings, favorites, access status, and other information needed to provide the app and any account features you choose to use.

Mobile-app diagnostics, feedback, analytics, subscriptions, and security

Our mobile applications and some website features use diagnostic and security services to detect crashes, improve performance, and protect the Services. The information may include crash reports, stack traces, performance information, navigation or event context around an error, device and operating-system information, IP address, and pseudonymous device, application, or online identifiers. In the Radiology Calculators app, diagnostic information may be associated with a pseudonymous account identifier when you are signed in.

We may use Sentry for diagnostics. We may use Firebase App Check and its supported providers, such as reCAPTCHA Enterprise, Apple App Attest, and Google Play Integrity, to help determine whether requests come from genuine versions of our applications rather than bots, scripts, or modified clients. These services may process device and software-environment information for security and abuse-prevention purposes.

Our mobile applications use Firebase Analytics to understand app use and improve the Services. Firebase Analytics may process app-instance identifiers, device and operating-system information, app events, and general usage information. In the Radiology Calculators app, a signed-in Firebase account identifier or RevenueCat app-user identifier may be associated with its Firebase Analytics identifier for subscription and app-functionality purposes.

We use RevenueCat to manage in-app subscription status and purchases. It may process an app-user identifier, purchase and entitlement information, app-store information, and the Firebase app-instance identifier used for subscription management. On iOS, the Radiology CORE QBank and Radiology Calculators apps collect an Apple Search Ads attribution token through RevenueCat for purchase attribution.

Some mobile applications may request access to motion sensors only for a shake-to-feedback feature. Raw motion data is processed locally to detect that gesture and is not recorded or transmitted by us for that feature.

Radiology CORE QBank website optional analytics

The Radiology CORE QBank website may use Firebase Analytics/Google Analytics to understand overall product usage and improve the service. We enable this optional analytics only after you choose to allow analytics through the website's privacy-choice banner or Privacy Choices control. If you decline or withdraw that choice, optional analytics is not enabled by the Radiology CORE QBank website.

The Radiology CORE QBank website's analytics events use broad page or feature categories; they are not designed to include quiz answers, notes, highlights, account identifiers, or URLs containing content identifiers. Advertising storage is disabled in that website's implementation.

Website analytics and tag management

The radathand.com website uses Google Tag Manager to manage website tags and may use website analytics or similar measurement technologies. These technologies can process online identifiers, IP address, browser, device, and interaction information. Where required by law, we will obtain the required choice before enabling non-essential technologies and will provide a way to change that choice. Google may process information under its own privacy terms.

Optional CaseBank research studies

Some Radiology CaseBank courses include an optional research component. You may use the educational material without joining research unless a study-specific document states otherwise. If you choose to participate, we may collect information for that study, including:

  • research participation, eligibility, consent or information-sheet acknowledgment, and withdrawal status;
  • course-specific demographics or background responses;
  • case responses, correctness, confidence ratings when configured, and course progress;
  • timing data, such as time to an answer submission or opening intervention teaching content, where that study collects it; and
  • a randomly generated Study ID.

Research exports and analysis are designed to use the Study ID rather than your name, email address, WordPress user ID, IP address, or browser user agent. The link between an account and Study ID is stored separately from the research response data. Authorized members of the study team, platform administrators, and, where applicable, an institutional review board, compliance personnel, or regulator may review research information as needed for the study.

Each research study may have its own information sheet or privacy notice. Read it carefully because it may provide study-specific details about purpose, procedures, risks, benefits, confidentiality, contacts, and retention.

Please do not submit patient information

The Services are educational tools. Do not enter patient names, medical-record numbers, accession numbers, dates of birth, dates of service, contact details, or other patient-identifying information in notes, comments, feedback, research forms, or any other free-text field.

Cookies, local storage, and similar technologies

We use cookies, local storage, and similar technologies to operate the website and applications. These technologies may include:

  • Strictly necessary technologies: account login, session management, security, fraud and abuse prevention, load balancing, and remembering privacy choices.
  • Functional technologies: settings such as display preferences and, where you choose it, remembering comment-form information.
  • Optional analytics technologies on the Radiology CORE QBank website: Firebase Analytics/Google Analytics, only after your analytics choice.
  • Website tag-management and measurement technologies: Google Tag Manager and any tags enabled through it. Where required, non-essential technologies are subject to your privacy choices.

WordPress login and comment features may set cookies when you use those features. For example, a comment-form preference may last up to one year, a login session may persist according to the option you choose, and a temporary login cookie may be removed when you close your browser. Embedded content, such as a video or social-media widget, is controlled by its provider and may use that provider's technologies when you interact with it.

You can manage browser cookies through your browser settings. Blocking necessary technologies may prevent sign-in, purchases, account features, or other parts of the Services from working. On the Radiology CORE QBank website, you can change optional analytics choices at any time through the Privacy Choices control.

How we use information

We use personal information as needed to:

  • provide, maintain, personalize, and secure the Services;
  • create and manage accounts, authenticate users, synchronize account data, and provide purchased or institutional access;
  • process payments, administer subscriptions, maintain financial records, and respond to billing or refund requests;
  • provide educational features such as progress tracking, flashcards, study statistics, and privacy-bounded QBank peer comparisons;
  • send essential communications, such as account verification, password-reset, purchase, security, and service notices;
  • respond to support requests and feedback;
  • detect, investigate, and prevent security incidents, fraud, abuse, and violations of our terms;
  • diagnose errors, improve reliability and usability, and understand optional Radiology CORE QBank website analytics where you have allowed it;
  • conduct optional CaseBank research in accordance with the applicable study materials; and
  • comply with legal, accounting, tax, regulatory, contractual, and audit obligations.

Legal bases for users in the EEA, United Kingdom, and similar jurisdictions

Where a data-protection law requires a legal basis, we process personal information to perform a contract with you or take requested steps before a contract; for our legitimate interests in operating, securing, improving, and defending the Services; with your consent where required, including optional Radiology CORE QBank website analytics and applicable research participation; and to comply with legal obligations. You may withdraw consent at any time, but this does not affect processing already carried out before withdrawal.

How information is disclosed

We disclose information only as reasonably necessary for the purposes in this policy, including to:

  • service providers that help us operate the Services, such as Google Firebase, Google Cloud, Firebase Analytics, Google Analytics, Google Tag Manager, and reCAPTCHA for authentication, database, hosting, analytics, security, and tag-management services; Stripe, RevenueCat, and applicable app stores for payments and subscriptions; Sentry for diagnostics; Resend for service and support email; and hosting, infrastructure, email, security, and support providers;
  • third-party sign-in providers when you choose to use their sign-in services;
  • research collaborators, study teams, institutional review boards, compliance personnel, or regulators where applicable to an optional research study;
  • professional advisers, insurers, auditors, or public authorities where reasonably necessary to comply with law, enforce our rights, or protect the Services and their users; and
  • a successor or prospective successor in connection with a merger, financing, acquisition, reorganization, sale of assets, or similar transaction, subject to applicable law.

We require service providers to process information according to our instructions and applicable contractual or legal safeguards. Their own privacy notices may also apply to information they process.

International data transfers

Rad at Hand and its service providers may process information in the United States and other countries where they operate. These countries may have different data-protection laws from the country where you live. Where required, we use a legally recognized transfer mechanism and appropriate safeguards for international transfers.

How long we retain information

We retain personal information for as long as reasonably necessary for the purpose for which it was collected, including to provide an active account or subscription, maintain educational progress, resolve disputes, protect the Services, and meet legal, tax, accounting, audit, and research obligations.

  • Account and learning data: generally retained while your account remains active and then deleted or de-identified when no longer needed, subject to the exceptions described below.
  • Comments and feedback: may be retained while needed for moderation, follow-up, security, and recordkeeping. Approved public comments may remain visible until removed.
  • Support and service communications: retained for the period needed to respond, maintain a service record, protect against abuse, and meet legal obligations.
  • Payment and subscription records: retained for the period required by applicable accounting, tax, payment-network, fraud-prevention, and legal requirements.
  • Diagnostic, analytics, and attribution information: retained according to the applicable provider configuration and only as long as needed for diagnostics, security, subscription management, attribution, or the applicable analytics purpose.
  • Aggregate QBank performance statistics: may be retained without direct account or session identifiers after account deletion because individual contributions can no longer reasonably be identified within the aggregate.
  • Research data: retained as needed for the study, analysis, audit, institutional-review-board, administrative, legal, and regulatory purposes described in the applicable study materials.

If you withdraw from an optional CaseBank research study, we will stop collecting research data for that course and delete the research responses, demographics responses, case attempts, and account-to-Study-ID link where feasible, except where limited retention is required for administrative, legal, regulatory, audit, institutional-review-board, or study-accountability purposes. We may retain a minimal record that withdrawal occurred so that we can honor it and maintain study accountability.

Your choices and privacy rights

Depending on where you live and the applicable law, you may have the right to request access to, correction of, deletion of, restriction of, or objection to our processing of your personal information; to receive a portable copy of certain information; to withdraw consent; and to complain to a data-protection authority. These rights are not absolute and may be limited by applicable law, the need to verify identity, the rights of others, security requirements, or a lawful record-retention obligation.

You may update certain account and learning information through the applicable account or app settings. Radiology CORE QBank users can request account-data access, correction, deletion, or export through the Data & Privacy area in Settings when available, or by emailing support[at]radathand.com. You may also use that email address for a request relating to the website, the Radiology Calculators app, or CaseBank research.

To protect your information, we may ask for information needed to verify your identity before fulfilling a request. We will respond within the time required by applicable law. If we cannot fulfill a request in full, we will explain the reason where required.

Account deletion does not necessarily remove information that must be retained for legal, accounting, security, fraud-prevention, or research-accountability reasons, or information that has already been aggregated or de-identified so that it no longer reasonably identifies you.

Children's privacy

The Services are intended for medical professionals, trainees, and other adult users. They are not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided personal information to us, contact support[at]radathand.com so that we can investigate and take appropriate action.

Security

We use reasonable administrative, technical, and organizational measures to protect personal information. No internet transmission, storage system, or security control is completely secure. You are responsible for maintaining the confidentiality of your account credentials and for promptly contacting us if you believe your account has been compromised.

Changes to this Privacy Policy

We may update this Privacy Policy as our Services, legal requirements, or data practices change. We will post the revised policy here and update the "Last updated" date. When required, we will provide additional notice or obtain a new choice before a material change takes effect.

Contact us

Rad at Hand LLC
Website: https://radathand.com/
Privacy and support requests: support[at]radathand.com