Privacy Policy

Effective October 17, 2026

Draco Learning (“we”) operates Draco EMT Prep. This policy explains what we collect, why, and your choices. We keep data collection to what the Service actually needs.

Information We Collect

Account information — your first and last name and email address, and, if you add them, a phone number and profile photo.
Sign-in information — if you sign in with Apple or Google, we receive your name and email address from that provider. With Sign in with Apple you may choose to share a private relay address instead of your own email.
Purchase information — if you subscribe in our iOS or iPadOS app, Apple processes your payment. We receive only the transaction details needed to unlock Premium on your account (the plan, purchase and renewal dates, and transaction identifiers), never your payment details.
Study data — the questions you answer, the trainers and skills checklists you complete, your results, and progress, so we can show your mastery and improve the Service.
Class games — to join a class game (Team Trivia) you enter the code your instructor shows, a first name or nickname, and your group number; you don’t need an account. Your instructor sees the names of the players in their game, and the class screen shows them only when the instructor chooses to show players by name. We keep your group’s answers and your own picks to score the game. Your browser keeps a random key for the game so you can rejoin after a reload; we store only a scrambled (hashed) copy of it. To stop people from guessing game codes, we note each wrong code with the IP address and a random browser identifier, and delete those notes within two days.
Offline practice — if your plan includes offline practice in our app, the app keeps the practice questions and your answers on your device, encrypted, until they sync to your account. Removing the questions in the app, deleting your account, or deleting the app removes them from the device.
Passkeys — if you add a passkey (Face ID, Touch ID, or your device PIN), we store only its public key and a label; your fingerprint, face, and PIN never leave your device.
Reviews — if you post a review, we show it publicly with the display name you choose.
Technical data — basic log information such as IP address and browser type, the pages you visit while signed in, and error reports from your browser when something breaks, used for security, to fix problems, and to keep the Service running.
Adaptive exam camera — the adaptive practice exam can show your own camera on screen to help you stay focused. The video stays on your device; it is never recorded or sent to us.

How We Use Your Information

To create and secure your account and provide the Service.
To send you essential emails (confirming your email, resetting your password, and account notices).
To measure your progress and improve our questions and features.
To protect against fraud and abuse.

Service Providers

We share limited information with trusted providers only to run the Service:

SendGrid — to deliver our emails.
Stripe — to process payments on our website (we never see or store your full card details).
Apple — for Sign in with Apple and for subscriptions bought in our app through the App Store.
Google — for Sign in with Google on our website.
Google reCAPTCHA — to protect our forms from abuse. Its use is subject to Google’s Privacy Policy and Terms.

Each provider may use this information only to provide its service to us, under terms that protect it at least as well as this policy does.

If you study in a school’s class: the instructors of that class can see your name, email address, practice results, and homework results, so they can support you. Leaving the class ends their access to new activity.

Skills Checks: when an instructor grades you on an NREMT skill sheet, the record is kept for your class: the skill, the date and times, your marks, the result, and the examiner’s comments. You can see and print the records kept on your account under My Skills Checks. If you delete your account, we delete those records too. An instructor can also record a check under a typed name instead of an account; that record isn’t linked to you, and we remove it if you ask. Checks you graded as an instructor stay with the class’s records, under the examiner name printed on them.

Dynamic Scenarios: when an instructor runs a scenario with you in the crew, the record is kept for your school: the scenario, the date and times, your place in the crew, what the crew did and when (as the instructor logged it), the result, and the instructor’s rating and comments. If you delete your account, your name, account, class, rating and comments are removed from every run; the run stays for the rest of the crew, with your place shown as “Former student”. An instructor can also add a typed name to a crew instead of an account; we remove it if you ask. Runs that are never finished are deleted after 30 days (180 once the call has ended).

We do not sell your personal information. Our app does not track you across other companies’ apps or websites and does not use advertising identifiers.

Cookies

We use only cookies the Service needs: a session cookie that keeps you signed in, a “remember me” cookie (30 days) if you choose it, a short-lived cookie that protects sign-in with Apple or Google, and a cookie that remembers whether you prefer the phone, tablet, or desktop layout. Google reCAPTCHA sets its own cookies on pages with a protected form. We do not use advertising or tracking cookies.

The class game page keeps its game key and a random browser identifier in your browser’s storage rather than in a cookie; leaving the game removes the key.

Do Not Track. We don’t track you across other websites, so we treat every visitor the same way whether or not the browser sends a Do Not Track signal.

Data Retention and Deletion

We keep your information while your account is active. You can delete your account at any time from your account page on the website or in the app (Account > Delete Account); when you do, we delete your practice history and progress and our copies of the emails we sent you, remove or anonymize the rest of your personal information, and revoke any Sign in with Apple authorization. We keep only what we need as a record: that the account existed and was deleted, your consent records, payment records the law requires us to keep, and security logs, which are deleted after 12 months (as are our copies of sent emails for active accounts). Deleting your account does not cancel an App Store subscription; cancel it in your device’s Settings. You may also contact us to request access to, correction of, or a copy of your data.

Class games: we clear players’ names from a game 30 days after it ends, and delete the whole game, with its answers, after one year, or sooner if the instructor who ran it deletes their account.

Children

The Service is intended for adults 18 and older and is not directed to children.

Security

We use industry-standard measures — including encrypted connections and hashed passwords — to protect your information. No system is perfectly secure, but we work to keep your data safe.

Changes

We may update this policy. Material changes will be reflected in the effective date above.

Contact

Questions about your privacy? Email support@dracoemtprep.com, or write to Draco Learning, PO Box 1679, Sacramento, CA 95812.