Privacy Policy

Last updated: October 2026

Who is responsible for your data

Kilo Health Ltd (company number 13964412) is the data controller for OrthoQB. Contact: support@orthoqb.com.

What we collect

• Account details: your email address and password (stored securely by our login provider; we never see your password).
• Learning data: the questions you answer, your scores, flagged questions and practice history, so we can show your progress.
• Billing details: handled by Stripe. We receive your subscription status and a customer reference, never your full card number.
• Technical data: basic logs (such as IP address and browser type) kept by our hosting provider for security.

Why we use it (lawful basis)

To provide the service you pay for (contract), to keep the service secure and improve it (legitimate interests), and to keep financial records (legal obligation). We do not sell your data or use it for advertising.

Who we share it with

• Supabase (login and database, hosted in London, UK)
• Stripe (payments)
• Vercel (website hosting)

Some of these providers may process data outside the UK. Where they do, they use safeguards approved under UK data protection law, such as the International Data Transfer Agreement or standard contractual clauses.

How long we keep it

We keep your account and learning data while your account is open. If you ask us to delete your account, we delete it within 30 days, except billing records, which we keep for 6 years for tax purposes.

Your rights

You can ask to see, correct, export or delete your data, or object to how we use it, by emailing support@orthoqb.com. If you are unhappy with how we handle your data, you can complain to the Information Commissioner's Office at ico.org.uk.

Cookies

We only use cookies that are needed to keep you logged in. We do not use advertising or tracking cookies.