Privacy Notice

1. Information We Collect

We collect the following categories of information:

Account information

When you create an account, we collect your first and last name, email address, username, password, expected exam (USMLE Step 1 or Step 2 CK), expected exam date, medical school, and country.

Feedback you submit

If you use the "Give Feedback" feature or otherwise contact us, we collect the content of your message, along with your account information, so we can respond to you and improve the Service.

Donation information

If you choose to make a voluntary donation, our payment processor, PayPal, handles your payment details directly. We receive limited information back from PayPal, such as the transaction ID, donation amount, and the name and email address associated with your PayPal account, which we use to record your donation and provide any associated benefits.

Usage & analytics data

We use Google Analytics to collect information about how you interact with the Service, such as pages viewed, features used, and general device and browser information. This is collected automatically and does not require a separate account.

Preferences

We may store small amounts of information on your device (such as your dark/light mode preference) to remember your settings between visits.

2. How We Use Your Information

We use the information we collect to:

• Create and manage your account, and provide the study content relevant to your selected exam;
• Process and record voluntary donations, and administer related benefits (such as lifetime access for beta donors);
• Respond to support requests and the feedback you submit;
• Monitor, maintain, and improve the Service, including analyzing usage trends;
• Detect, prevent, and address technical issues, fraud, or abuse;
• Send you promotional and marketing emails about new features, content, or offers;
• Reach out to you by email to gather feedback about your experience with the Service, consistent with our beta feedback expectations;
• Share your email address and related account information with select partners for marketing or business purposes, as described in Section 3 ("How We Share Your Information"); and
• Comply with applicable legal obligations.

You can opt out of promotional emails, or of having your information shared with partners as described above, at any time — see Section 7 ("Your Rights & Choices").

3. How We Share Your Information

We do not sell your personal information for cash. We do, however, share information in the following circumstances:

• Service providers. We share information with vendors who help us operate the Service, such as hosting providers, Google Analytics (analytics), and PayPal (donation processing). These providers are only permitted to use your information to perform services on our behalf.
• Business & marketing partners. We may share your email address and related account information with trusted third-party partners — for example, other medical education companies, sponsors, or affiliate organizations — for marketing, co-promotional, or business development purposes. Where required by applicable law, we will obtain your consent or provide an opt-out before sharing your information in this way.
• Legal & safety reasons. We may disclose information if required by law, subpoena, or legal process, or if we believe disclosure is necessary to protect the rights, property, or safety of OnlyHighYield, our users, or the public.
• Business transfers. If OnlyHighYield is involved in a merger, acquisition, financing, or sale of assets, your information may be transferred as part of that transaction, subject to this Privacy Notice or a successor notice.
• Aggregated or de-identified data. We may share information that has been aggregated or de-identified such that it no longer identifies you.

If you are a California resident, some of the sharing described above (particularly with marketing partners) may be considered a "sale" or "share" of personal information under the California Consumer Privacy Act (CCPA). See Section 7 for how to opt out.

4. Cookies & Similar Technologies

We use cookies and similar technologies (such as browser local storage) to operate the Service, remember your preferences (like dark/light mode), and understand how the Service is used through Google Analytics. You can control cookies through your browser settings; disabling cookies may affect how the Service functions. Where your browser sends a Global Privacy Control (GPC) or similar opt-out signal, we will treat it as a request to opt out of the sharing described in Section 3, to the extent required by applicable law.

5. Data Retention

We retain your account information for as long as your account is active, or as needed to provide you the Service. If you request deletion of your account, we will delete or de-identify your personal information within a reasonable period, except where we are required to retain it for legal, accounting, tax, or dispute-resolution purposes (for example, donation and transaction records).

6. Data Security

We take reasonable measures to protect your information. However, as disclosed at sign-up, OnlyHighYield is currently a beta product and our security infrastructure has not been fully audited. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. Please avoid reusing a password from any other sensitive account, and contact us immediately at contact@OnlyHighYield.com if you suspect unauthorized access to your account.

7. Your Rights & Choices (All Users)

Depending on your location, you may have the right to:

• Access, correct, or request a copy of the personal information we hold about you;
• Request deletion of your personal information;
• Object to, or request that we restrict, certain processing of your information;
• Opt out of promotional emails and marketing communications; and
• Opt out of the sharing of your information with marketing partners described in Section 3, including any "sale" or "share" as defined under laws such as the CCPA.

You can unsubscribe from promotional emails using the link included in those emails, or exercise any of the rights above by contacting us at contact@OnlyHighYield.com. We will respond to verifiable requests within the timeframe required by applicable law. We will not discriminate against you (for example, by denying access to the Service) for exercising any of these rights.

8. Additional Rights for EEA, UK & Swiss Users

If you are located in the European Economic Area, the United Kingdom, or Switzerland, the General Data Protection Regulation (GDPR) and equivalent UK and Swiss laws give you certain additional rights and require us to disclose the following.

Legal bases for processing

• Contract: to create and administer your account and provide the Service you request;
• Legitimate interests: to maintain, secure, and improve the Service and understand usage through analytics, provided these interests are not outweighed by your rights;
• Consent: for marketing emails and for sharing your information with business or marketing partners as described in Section 3, which you may withdraw at any time without affecting the lawfulness of processing before withdrawal; and
• Legal obligation: where processing is necessary to comply with applicable law.

Your additional rights

• Rectification, erasure, restriction of, or objection to processing, including processing based on legitimate interests;
• Receipt of a copy of your personal information in a structured, commonly used, machine-readable format (data portability); and
• The right to lodge a complaint with your local data protection supervisory authority, in addition to contacting us directly.

We do not use your personal information to make decisions that produce legal or similarly significant effects about you through solely automated means.

9. Children's Privacy

The Service is intended for medical students and other adult learners and is not directed at children. We do not knowingly collect personal information from anyone under 18 years of age. If you believe a child has provided us with personal information, please contact us so we can delete it.

10. International Users & Data Transfers

OnlyHighYield welcomes users from around the world. Your information is processed and stored on servers located in Germany, which may have different data protection laws than your country of residence. Where required by applicable law, such transfers are made subject to appropriate safeguards. By using the Service, you acknowledge this transfer, processing, and storage of your information.

11. Third-Party Services & Links

The Service integrates with or links to third-party services, including Google Analytics and PayPal, each of which has its own privacy practices. We encourage you to review their privacy policies. We are not responsible for the privacy practices of third parties.

12. Changes to This Notice

We may update this Privacy Notice from time to time. If we make material changes, we will update the "Last updated" date above and, where appropriate, notify you (such as by email or an in-app notice). Your continued use of the Service after changes take effect constitutes acceptance of the revised notice.

13. Contact Us

If you have questions about this Privacy Notice or how we handle your information, please contact us at contact@OnlyHighYield.com.