Privacy Policy
Last updated: October 2026 · Applies to SIG Trainer and all nosterHealth training tools
1. Who we are
SIG Trainer is an educational pharmacy and clinical training platform operated by nosterHealth (“we”, “us”). This policy explains what personal information we collect, why, who processes it, and the choices you have. Questions or requests: npen79@gmail.com.
2. Information we collect
We collect only what we need to run the service:
- Account information: your email address, username, role, and plan. Your password is handled and stored only in hashed form by our authentication provider; we never see or store it in plain text.
- Learning activity: your practice attempts, scores, Q-bank answers, Speed SIG results, and simulation progress.
- Class information: which classes you have joined, and for instructors, the classes they run.
- Billing information: your plan and a Stripe customer ID. Card details are entered on Stripe’s pages and are never seen or stored by us.
- Terms acceptance records: when you create an account we record the Terms version you accepted, the time, your IP address, and your browser’s user-agent string as evidence of acceptance.
- Text you submit to AI features: prompts and answers you type into AI-graded or AI-generated exercises.
We do not collect Social Security numbers, government ID or student ID images, or real patient information. All patients, prescriptions, and scenarios in SIG Trainer are fictional. Please never enter real patient or health information into the platform.
3. How we use information
- To provide, secure, and improve the training platform and grade your practice.
- To process subscriptions and prevent fraud and abuse (including rate limiting).
- To show instructors the progress of the students in their classes.
- To communicate with you about your account, the service, or support requests.
We do not sell personal information, and we do not use it for advertising.
4. Service providers who process your data
We use the following providers to operate the platform. Each processes data only to provide its service to us:
We may also disclose information if required by law or to protect the rights, safety, or security of our users and platform.
5. Students, instructors, and schools
If you use SIG Trainer through a class or school program, the instructor of your class can see your username, email, and training progress for that class. We treat student records as confidential, use them only to provide the service, and do not share them with other schools or third parties beyond the providers listed above.
Schools that need a written data-protection or student-privacy agreement (including for FERPA purposes) can contact us at npen79@gmail.com.
6. How we protect information
- All traffic between your browser and our service is encrypted with HTTPS.
- Our database and hosting providers encrypt stored data at rest.
- Database access rules ensure users can only reach their own records; administrative access uses restricted credentials and two-factor authentication.
- We apply rate limiting and input validation to protect accounts from abuse.
No online service can guarantee absolute security. If we learn of a security incident affecting your information, we will notify affected users, and school customers where applicable, without unreasonable delay.
7. Retention and deletion
We keep your information while your account is active. You can delete your account at any time from the Account Center. Deletion removes your profile, practice history, scores, class memberships, and terms acceptance records, and cancels any active subscription.
- Stripe retains payment and invoice records as required by tax and financial regulations.
- Our database is backed up daily. Deleted data may remain in these encrypted backups for a short period (currently up to 7 days) before being overwritten.
- Instructors who own a classroom should contact us first so students’ class records are not lost.
8. Your choices and rights
- Access and download: use “Download my data” in the Account Center to receive a copy of the information we hold about you.
- Correction: update your username, role, and email in the Account Center, or contact us.
- Deletion: use “Delete Account” in the Account Center, or contact us.
Depending on where you live, you may have additional rights. Contact us and we will respond to your request.
9. Children
SIG Trainer is not directed to children under 13, and we do not knowingly collect their information. If you believe a child has provided us information, contact us and we will delete it.
10. Changes to this policy
We may update this policy from time to time. We will post the new version here and update the date above. For material changes we will notify users by email where possible.
