Privacy policy
Who is responsible for your data
Residency Tracker is run by one person, an internal medicine resident in Riyadh, Saudi Arabia, referred to here as the operator. For anything about your personal data, use Settings, Send feedback inside the app: it goes straight to the operator, and nobody else. Under the Saudi Personal Data Protection Law (PDPL) the operator is the controller of your data; under the EU General Data Protection Regulation (GDPR), where it applies, the same.
What we collect, and why
| Data | Why | Basis |
|---|---|---|
| Email address and a password (stored only as a salted hash) | To create your account, sign you in, confirm your email and let you reset your password. | Performing the service you asked for (PDPL art. 6; GDPR art. 6(1)(b)). |
| Name (optional), timezone, week start | To greet you and to count your days and weeks correctly. | Performing the service. |
| Your study data: topic statuses, checklists, study sessions, review schedule, queue, ideas, rotations, timer, podcast listening and notes | This is the product: it exists only to show it back to you. | Performing the service. |
| Feedback you send from Settings | To fix bugs and improve the app. | Your consent, given when you send it. |
| Server logs: request path, status, time, client IP address | To keep the service running and to stop abuse (rate limits on sign-in). | Legitimate interest in security; kept briefly. |
We do not collect anything else. No analytics, no advertising, no tracking pixels, no third-party scripts.
Cookies
One cookie, rt_session, keeps you signed in. It is strictly necessary, HttpOnly and lasts 30 days or until you log out. There are no other cookies, so there is no cookie banner.
Where your data lives
The application and its database run on Railway in the European Union region, with a continuous backup copy in an object-storage bucket also located in the EU. Confirmation and password-reset emails are sent through Resend, an email provider based in the United States, which receives only your email address and the message text.
That means your data leaves the Kingdom of Saudi Arabia. The PDPL allows this when the transfer is necessary to provide a service you have asked for and the data is protected to a comparable standard where it goes. Both apply here: the service cannot run without storing your account and study data, the amount transferred is the minimum (your email address, name if you gave one, timezone, week start and your study records), the EU applies the GDPR, and each provider handles the data under its own data-processing terms as a processor acting only on the operator's instructions. If a Saudi-hosted option becomes practical the operator will move the service and update this page.
How long we keep it
For as long as your account exists. When you delete your account (Settings, Delete my account) every row that belongs to you is removed immediately from the live database. The backup copy keeps history for 72 hours and then no longer contains your data. Server logs are kept for at most 30 days.
Your rights
- Access and export: Settings, Export my data gives you a zip with every row that is yours, as JSON, at any time.
- Correction: your name, timezone, week start and password are editable in Settings; study data is yours to change in the app.
- Deletion: Settings, Delete my account. No email needed, no waiting.
- Objection, restriction, complaint: use Settings, Send feedback. In Saudi Arabia you may also complain to the Saudi Data and Artificial Intelligence Authority (SDAIA); in the EU to your national data protection authority.
Security
Passwords are hashed with Argon2. Connections use HTTPS. Sessions are revocable server-side. Sign-in attempts are rate limited. Password reset and email confirmation links are single use and expire. Nobody can read your password, including us.
Children
The service is for medical residents and doctors and is not directed at anyone under 18.
Changes
If this policy changes in a way that matters, you will see a notice on the login screen and the date above will move.