Privacy Policy
EKGLab is an online platform for learning to read ECGs. This policy explains what personal information EKGLab LLC ("EKGLab", "we") collects when you use ekglab.com and its apps (the "Service"), why, who it is shared with, how long it is kept, and the choices and rights you have. It forms part of our Terms of Service.
No patient data. EKGLab is a teaching tool. Its ECG recordings come from public research databases, and you must not enter any real patient's health information. We do not collect protected health information.
1. What we collect
Information you give us
- Account: your name, email address and password (stored only in scrambled form by Google Firebase Authentication), and optionally your profession, occupation, experience level and organization.
- Username: if you choose one, it is shown publicly next to your record discussion posts and game leaderboard scores.
- Content you create: discussion posts and replies, favorites and your notes on them, simulator clips, quizzes and teaching notes (instructors and administrators), and feedback or support messages.
- Payment: when you buy a plan or student seats, your card or other payment details go directly to Stripe and its Link service. We never see or store your full card number. We receive and keep your Stripe customer reference, your plan, its status and renewal date, and the payments made.
Information created as you use the Service
- Learning records: quiz attempts with your answers and scores, flashcard progress, Delineation Lab results, game scores, and poll responses.
- Classes: the classes you join or teach, when you joined or left, and how you were given access (for example a student seat from your instructor).
- Account history: your plan and seat history, acceptance of these terms, and a log of administrative actions on your account.
- Sign-in and device information: sign-in events, IP addresses and browser information, recorded by Google Firebase Authentication.
- Analytics and advertising (only if you accept): the pages you visit, device and browser type, and approximate location, collected with cookies by Google Analytics for Firebase; and whether a visit that came from one of our ads led to a sign-up or purchase, collected with cookies by the Google Ads tag.
Information sent to our AI provider
When you use the AI Coach, AI search or reference search, or post in a record discussion, the text you send (and, for discussions, your post) is processed by Anthropic's Claude models to answer you or to check posts against our community rules. We do not keep AI Coach conversations after the session.
When you chat with Joules, the help assistant behind the Help button, your questions are sent to Anthropic's Claude models together with your first name, your plan, your role, the page you are on and, for instructors, your seat count, so Joules can answer for your account. We keep Joules conversations for 30 days after the last message so we can see where Joules gives poor answers and improve them, and then delete them. If you send a chat to the EKGLab team, it is kept with that feedback report. Please do not share patient information with Joules.
2. How we use it
- To run the Service: your account, your progress, classes, quizzes, discussions and games.
- To let your instructors see your results in the classes you are in, and to keep class and academic records.
- To take payments, manage subscriptions, renewals and student seats, and meet tax and accounting obligations.
- To answer support and feedback messages and send service emails (such as receipts, renewal reminders and replies).
- To keep the Service safe: preventing abuse, moderating discussions, and securing accounts.
- To understand how the Service is used and improve it (analytics).
- To comply with law and enforce our Terms.
If you are in the European Economic Area or the United Kingdom, we rely on: performance of our contract with you (running your account and paid plan), our legitimate interests (security, moderation, academic records, improving the Service), legal obligations (tax and accounting), and your consent for analytics cookies, which you can withdraw at any time (see section 6).
We do not sell your personal information, and we do not use it for targeted advertising.
3. Who we share it with
- Your instructors: the instructors of a class you are in can see your name, email and results for that class, including after you leave it.
- Other users: only your chosen username, your discussion posts and your leaderboard scores are visible to others.
- Service providers who process data for us under their own privacy terms:
- Google (Firebase Authentication, Cloud Firestore database, Cloud Storage, Cloud Functions, Google Workspace for email, and Google Analytics and Google Ads if you accept analytics and advertising cookies);
- Stripe, and its Link service, which acts as the seller for purchases and handles payment details, receipts and sales tax;
- Anthropic (AI features and discussion moderation, as described above).
- Legal reasons: when required by law, or to protect the rights, safety and property of EKGLab, our users or others.
- Business transfers: if EKGLab is merged, acquired or sells its assets, personal information may be transferred under this policy.
4. How long we keep it
| Information | Kept |
|---|---|
| Your account and everything in it | For as long as your account exists, including after you cancel a paid plan. |
| After you delete your account | Your profile, progress and saved content are erased and your discussion posts are removed. A copy of your academic record (the classes you were in, your quiz results, and your plan and seat history) is kept for five years for audit and institutional records, then deleted. During that time, your instructors can include your results in their class records. |
| Instructors who delete their account | Their name and email stay on the classes they taught, so their students' records show who taught them. |
| Joules conversations | 30 days after the last message, then deleted. They are included when you download your data, and deleted at once if you delete your account. |
| Backups | Copies of the database and sign-in records are kept for disaster recovery for up to 14 weeks, then overwritten or deleted. |
| Administrative audit log | A dated note of administrative actions, including when a record was opened, exported or deleted, with the account's email. |
| Payment records | Kept by us and by Stripe as long as tax and accounting law requires. |
| Analytics and advertising | Kept by Google Analytics and Google Ads under their data retention settings. |
5. Your choices and rights
- See and correct: your account page shows and lets you change your name and organization. Ask us for anything else.
- Delete: you can delete your account at any time from your account page (with the five-year academic record copy described above).
- A copy of your data: download it any time from your account page (Your records: a transcript as a PDF, and all your data as a JSON file), or email us and we will send it.
- Analytics: analytics cookies are off unless you accept them. Change your choice any time with Cookie settings (also in the settings menu and at the bottom of our public pages); the Service works the same either way.
- Emails: service emails (receipts, renewal reminders, replies to you) are part of the Service. We do not send marketing emails.
California residents have the right to know what personal information we collect, use and disclose; to delete it; to correct it; and not to be discriminated against for using these rights. We do not sell or share personal information for cross-context behavioral advertising.
EEA and UK residents have the rights of access, rectification, erasure, restriction, portability and objection, the right to withdraw consent at any time, and the right to complain to their data protection authority.
To use any of these rights, email support@ekglab.com from the email address on your account. We may need to confirm your identity, and we answer within 30 days (45 days where the law allows).
6. Cookies and browser storage
Strictly necessary (always on): your browser's storage keeps you signed in (Firebase Authentication), remembers your display preferences (for example the 12-lead layout and whether clinical reads are hidden) and remembers your cookie choice. Stripe sets its own cookies on its checkout and billing pages to process payments and prevent fraud.
Analytics and advertising (only with your consent): Google Analytics cookies count visits and show how the Service is used, and the Google Ads tag sets cookies that tell us when a visit that came from one of our ads leads to a sign-up or purchase. On your first visit we ask; until you press Accept, neither is started and neither sets cookies. If you later reject, we stop them and remove their cookies. Change your choice any time with Cookie settings.
We use the Google Ads tag only to measure our own ads. We do not sell your information or share it for other companies' advertising.
7. Security
Data is encrypted in transit and stored with Google Cloud's security controls. Access to the database is limited to our server code and to administrators who sign in with two-step verification. We keep regular and protected backups. No system is perfectly secure; if a breach affects your personal information, we will tell you as the law requires.
8. Age requirement
You must be at least 18 years old (or the age of majority where you live, if higher) to create an account. The Service is not directed to children, and we do not knowingly collect information from anyone under 18. If you believe a child has given us information, contact us and we will delete it.
9. Where your data is stored
EKGLab is based in the United States, and our database and files are stored by Google in the United States. If you use the Service from elsewhere, your information is transferred to and processed in the United States.
10. Changes to this policy
We may update this policy. We will change the effective date above and, for material changes, tell you in the Service or by email before they take effect.
11. Contact us
EKGLab LLC
25 Minuteman Drive, Templeton, MA 01468, United States
Email: support@ekglab.com