Privacy Policy

This Privacy Policy applies to Etio’s website, accounts, and educational practice service. “Etio,” “we,” “us,” and “our” refer to the operator of the Etio service. Etio is not currently incorporated. The service is intended primarily for adults in the United States.

Questions or privacy requests may be sent to support@getetio.com.

Depending on how you use Etio, we collect:

• Historical waitlist information: if you joined before the open beta, we retain your email address, normalized email value, consent and source timestamps, a hashed unsubscribe token, and any unsubscribe timestamp. The open beta no longer accepts new waitlist enrollments.
• Account information: your email address, normalized email value, account and session identifiers, timezone preference, account access status, the versions of the Terms and Privacy Policy you accepted or acknowledged, and related timestamps.
• Learning information: cases started, selected diagnosis codes, submissions, scores, attempt history, hints and answer keys opened, progress, streak activity, bookmarks, and saved answer drafts.
• Payment records: Stripe Checkout and payment references, amount, currency, payment and fulfillment status, access entitlement, and related timestamps. We do not store full payment-card numbers or card security codes.
• Guest information: an opaque guest identifier, the cases started, and learning activity associated with that identifier. Guest answer drafts and migration records may also be stored in your browser until migrated or cleared.
• Technical and security information: request timestamps, request IDs, browser or device information made available through standard web requests, approximate network information, rate-limit signals, security events, error information, and shortened or hashed identifiers such as an IP-derived security signal.
• Product activity: limited events such as account creation, case starts and submissions, successful solves, retries, hints, answer-key opens, guest migration, and content-report categories. If optional product analytics is enabled, Etio also collects anonymous canonical page categories, declared landing and paid-access funnel actions, bounded UTM campaign values, referring-site hostname, and ordinary browser or device properties. Paid-access PostHog events do not include your account, email, payment reference, amount, or card details. If the Google Ads purchase tag is enabled, its purchase event includes the purchase price paid in USD and a unique opaque Etio order reference after payment fulfillment; it does not include your account, email, Stripe reference, card details, or learning activity.
• Communications: messages you send to support and the email delivery information needed to send magic links or account-deletion confirmations.

A case content report accepts a structured category only. Etio does not provide or retain a free-text report field. When optional PostHog analytics has already started its allowed masked replay in the same browser tab, the report may also retain a direct link to that anonymous replay. We use the link only to troubleshoot that report; it does not identify you to PostHog or expand replay to the case, account, or report page.

Etio uses synthetic cases and is not designed to receive protected health information, real patient records, names, dates of birth, addresses, clinical documents, or other identifiable patient information. Do not enter that information anywhere in Etio or send it to support.

Synthetic beta cases may contain errors or ambiguity. You can flag a questionable case for review without entering patient information or other sensitive details.

Etio does not store full payment-card numbers or card security codes, government identifiers, precise location, advertising profiles, or biometric information. Stripe collects payment details on its hosted checkout as Etio's payment processor.

We receive information directly from you when you sign in, practice, change settings, report a content issue, request deletion, or contact us. We also receive limited information automatically from your browser, essential storage technologies, our application, and our infrastructure provider when you use the service.

We use information to:

• provide guest and account access;
• process payments and fulfill, support, or revoke paid access;
• authenticate users and maintain secure sessions;
• save drafts, grade submissions deterministically, show feedback, and calculate progress, Review status, streaks, and recommendations;
• merge eligible guest activity into an account when requested;
• send magic links, deletion confirmations, and service communications;
• send account holders occasional emails about Etio product updates and pricing offers, which you can opt out of at any time;
• protect Etio, enforce limits, prevent abuse, diagnose errors, and maintain reliability;
• understand feature usage and improve educational content and the service; and
• comply with law and protect legal rights.

Etio does not use learner information to make medical decisions. Feedback and grading are deterministic, and learner account, submission and activity information is not used to generate individualized medical or coding advice.

Etio uses essential cookies for authenticated sessions and opaque guest journeys. These cookies help keep you signed in, associate guest attempts with the correct browser, enforce the three-case guest limit, and protect the service. Account sessions can remain active for up to 30 days and refresh while active. Guest-journey cookies expire after 30 days.

Etio uses local browser storage for guest answer drafts, pending submissions, bookmarks, migration state, and related continuity information. Clearing browser data may delete unmerged guest information. Registered account data is stored on the server so it can be available across devices.

If optional PostHog analytics is enabled, it uses session-only browser storage to associate anonymous activity within the current browser session. Etio does not identify the visitor to PostHog or send an Etio account or guest identifier. Clearing session storage or closing the browser tab clears this local analytics state.

If Google Ads purchase conversion measurement is enabled, Google's tag may use first-party advertising storage and standard browser, page, network, and ad-click information to associate an Etio ad visit with a fulfilled purchase. Etio configures the tag to deny user-provided advertising data and advertising personalization. Etio also stores a first-party browser marker containing only the opaque Etio order reference so refreshing the confirmation page does not resend the same purchase.

PostHog session replay may run only on the landing page and case library. Etio configures replay to mask all displayed text and input values, block media and embedded content, remove URL query strings and fragments, and omit console messages and network headers and bodies. Replay is not enabled on case-detail, sign-in, account, payment, Dashboard, Review, Settings, or deletion pages.

If you submit a case report after replay has started on one of those approved pages, Etio may store the direct replay link with the category-only report so an authorized operator can investigate it. The report works normally without a link. We do not send a separate report event to PostHog.

We may disclose information:

• to Cloudflare, which provides hosting, network delivery, database, email, security, logging, and analytics services;
• to Stripe, which hosts checkout and processes payments, refunds, disputes, and related fraud-prevention information;
• to PostHog, if optional analytics is enabled, which processes the minimized anonymous page, campaign, declared-action, and masked public-page replay information described above;
• to Google, if Google Ads purchase measurement is enabled, which processes standard ad-attribution signals and the fulfilled purchase's fixed value, currency, and opaque Etio order reference;
• to contractors or professional advisers who need it to support Etio and are required to protect it;
• when reasonably necessary to comply with law, legal process, or a valid government request, or to protect rights, safety, and service integrity;
• in connection with a financing, reorganization, sale, or transfer of all or part of Etio, subject to appropriate confidentiality and notice where required; or
• with your direction or consent.

We do not sell personal information. Etio uses Google Ads conversion measurement only to understand whether an Etio ad led to a purchase; the integration disables advertising personalization and does not send user-provided data or enable remarketing through Etio.

Historical waitlist information is retained until you ask us to delete it or it is no longer reasonably needed for the original launch-communication purpose. An unsubscribe timestamp may be retained as needed to honor that choice.

We keep account and learning information while your account is active so Etio can provide saved progress and history. Sessions and guest identifiers expire according to the periods described above. Security, operational, and backup records are retained only as reasonably needed for their purpose, legal obligations, dispute resolution, and service integrity. Retention periods may vary because logs and managed-service backups follow operational schedules.

Optional analytics, conversion measurement, and masked replay are retained according to the configured PostHog or Google Ads settings and provider schedules. Etio may disable or delete analytics data when it is no longer useful, when a free allocation changes, or when required to honor an applicable request.

Payment and transaction records may be retained after account deletion when reasonably required for financial reporting, fraud prevention, refunds, disputes, or legal obligations. Etio removes the direct user link where the data model permits and does not retain card details.

You can request account deletion from Settings. After you confirm with a purpose-specific, short-lived link, Etio revokes sign-in access and deletes your identity, sessions, drafts, bookmarks, progress, attempts, preferences, activity, access records, policy-acceptance receipts, and reports in one account-deletion workflow. Guest activity previously claimed by that account is also removed. Etio may retain irreversibly anonymized aggregates, non-identifying records required for security or legal purposes, and a user-detached hash that prevents a consumed guest journey from being claimed again.

You may:

• ask us to delete a historical waitlist email;
• review your email, timezone, and access status in Settings;
• correct your timezone in Settings;
• sign out to revoke the current session;
• opt out of product-update and pricing emails with the unsubscribe link in any such email or by emailing support@getetio.com; service messages such as sign-in links still send;
• delete your account and associated learning data in Settings;
• clear local browser storage to remove unmerged guest drafts and state from that browser; and
• enable a browser Do Not Track signal, which Etio's optional PostHog integration is configured to respect;
• email support@getetio.com to request access to, correction of, or deletion of personal information.

We may need to verify your identity before completing a request. We will not discriminate against you for making a privacy request. Some information may be exempt from a request under applicable law.

California residents may have rights to know, access, correct, and delete certain personal information and to receive information about its disclosure. Etio does not sell personal information. The optional Google Ads tag measures whether an Etio advertisement led to a fulfilled purchase and is configured without advertising personalization or user-provided advertising data. You may exercise applicable rights by emailing support@getetio.com or using the account controls described above.

Etio does not send personally identifiable information, Stripe references, or learning activity to Google Ads. Although browser “Do Not Track” signals are not standardized, Etio's optional PostHog integration is configured not to capture when that signal is enabled.

Etio uses safeguards designed to protect information, including encrypted transport, hashed magic-link and session secrets, secure HTTP-only cookies in deployed environments, access controls, parameterized database access, rate limits, data minimization, and restricted logging. No security method is perfect, and we cannot guarantee absolute security.

Etio is for users age 18 or older and is not directed to children. We do not knowingly collect personal information from anyone under 18. If you believe a minor has provided information to Etio, contact support@getetio.com so we can investigate and delete it as appropriate.

Etio is U.S.-focused and information is processed in the United States through Etio and its service providers. If you use Etio from another country, your information may be transferred to and processed in the United States, where privacy laws may differ from those where you live.

Etio may link to official coding resources or other third-party sites. Their privacy practices are governed by their own policies, not this one.

We may update this Privacy Policy as Etio or applicable requirements change. We will post the updated policy and revise its effective date. If a change materially affects how we use personal information, we will provide additional notice when reasonably practical.

Email privacy questions or requests to support@getetio.com. For the contractual rules governing the service, read the Terms of Service.