Privacy Policy

What we collect. Usage events (page views, quiz progress, plan selections) tied to a random session ID stored in your browser. Your quiz answers, which include sensitive information about your sexual health, are used to build your personalized plan. If you buy, we store your email address, your subscription record, and your training progress in the app.

What we don't collect. We never see or store your card number: payment details go straight to Stripe, our payment processor, and we only ever receive the result. We do not ask for your phone number. We never sell your data.

Where it lives. Data is stored with Supabase on servers in the EU (Frankfurt) and served via Vercel.

Advertising & analytics. We use the Meta Pixel to measure whether our ads work, and PostHog (EU) to understand where people drop off in the funnel. Both may set cookies and receive non-identifying event names (for example “reached the plan page”) — never the content of your health answers. See Meta's and PostHog's privacy policies for how they process this data. On the plan page only, we also use Microsoft Clarity to see how the page is used (scrolling, taps, replays of the visit). Clarity never runs on the quiz, so it never sees your health answers; what you type is masked, and card details are entered directly with Stripe, outside anything Clarity can record. See Microsoft's privacy statement for how Clarity processes this data.

Your health answers stay private. Your quiz answers are health information and we treat them as such. They are stored only in our own database, and used only to build your plan and decide what the app shows you. They are never sold, never used to target ads, and never shared with Meta, our analytics provider or any advertiser. You can have them deleted, or withdraw your consent to us holding them, at any time by emailing support@drmasters.app. If you live in Washington or Nevada, this is the notice those states require about consumer health data.

Who else processes your data. Besides Meta, PostHog and Microsoft Clarity above: Stripe (payments), Resend (the emails we send you), Supabase (our database) and Vercel (hosting). They process it to run the service and for nothing else.

Retention. We keep your data while your account is active, and afterwards only for as long as tax and accounting law requires. Some of it goes sooner, automatically: sign-in requests are deleted after 30 days, and your email address is stripped off our usage records after 180 days. Email support@drmasters.app and we will delete the rest sooner.

Your rights. Wherever you live, you can ask us to show, correct, export or delete anything we hold about you. Email us and we'll do it, no forms and no hoops. Deleting means deleting: your quiz answers go with everything else, and if your plan is still running we cancel it first. There is one thing we cannot remove, and you should know it before you ask. Stripe keeps its own record of any payment you made, and we keep our copy of that invoice, because tax and accounting law requires both. Nothing else we hold in our own database survives. If you are in the EU or UK, GDPR rights apply in full.

Not medical advice. Dr. Masters is an educational training program and does not diagnose, treat, or cure any condition.

Questions or requests: support@drmasters.app