Privacy Policy

Last updated: June 11, 2026

Step Up Boards ("Step Up Boards", "we", "us", or "our") provides an online platform that helps podiatrists and podiatric trainees study for their board exams through multiple-choice questions and practice tests. This Privacy Policy explains what information we collect, how we use it, and the choices you have. By creating an account or using Step Up Boards, you agree to the practices described here.

If you have any questions about this policy, contact us at team@stepupboards.com.

Information We Collect

We collect the following categories of information:

• Account information. When you sign up, we collect your first and last name, email address, and password (which we store only in a hashed, encrypted form). We also ask for your training year and how you heard about us (referral source).
• Phone number. We collect your mobile phone number and verify it by sending a one-time code via Twilio Verify. We store your phone number and the date it was verified.
• Payment information. Subscriptions are processed by our payment provider, Stripe. We do not store or have access to your full card number — we retain only the customer and subscription identifiers that Stripe returns to us.
• Study and performance data. As you use the platform we record your activity, including the tests you take, the answers you select, which questions you get right or wrong, your scores, bookmarked questions, reading progress, and your mastery by topic.
• Usage, device, and analytics data. We use analytics tools (including PostHog and Ahoy) that automatically collect information such as your IP address, device, browser and operating system, the pages you view and actions you take in the app, referring pages and UTM parameters, and approximate location derived from your IP address.

How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain the Step Up Boards platform;
• Verify your identity and secure your account through phone verification;
• Process your subscription and payments;
• Personalize your study experience and track your progress;
• Analyze usage and improve our questions, features, and content;
• Communicate with you, including transactional and promotional email and text messages (see below);
• Detect, prevent, and address fraud, abuse, and security issues.

Text Messages (SMS)

We use text messaging for two purposes. First, we send one-time verification codes through Twilio Verify to confirm your phone number. Second, by providing your phone number you agree to receive text messages from Step Up Boards, which may include occasional promotional and marketing messages. Message frequency varies, and standard message and data rates may apply.

You can opt out of marketing texts at any time by replying STOP to any message; reply HELP for help. Opting out of marketing texts will not affect verification codes or other messages necessary to operate your account.

We do not sell your mobile phone number, and we do not share your phone number or SMS opt-in information with third parties for their own marketing purposes. We share it only with the service providers (such as Twilio) that help us deliver these messages.

Email

We use your email address to send transactional messages (such as account, verification, and billing notices) and promotional or marketing messages about Step Up Boards. Email is delivered through our provider, Postmark. Every marketing email includes an unsubscribe link, and you can opt out of marketing email at any time without affecting transactional messages.

Your Performance Data

We treat your individual study and performance data as private. We will not publish or share your personal performance data publicly or in any way that identifies you. We may use your performance data in anonymized and aggregated form — combined with data from other users so that you cannot be identified — for purposes such as improving our questions and product, conducting research, and publishing general statistics (for example, in marketing materials).

How We Share Information

We do not sell your personal information. We share information only in the following circumstances:

• Service providers. With vendors that process data on our behalf to run the service, including Twilio (phone verification and SMS), Stripe (payments), Postmark (email), PostHog (analytics), and our hosting provider.
• Legal compliance. When required to comply with applicable law, legal process, or a valid governmental request, or to protect the rights, safety, and property of Step Up Boards or others.
• Business transfers. In connection with a merger, acquisition, financing, or sale of assets, in which case information may be transferred as part of that transaction.
• Aggregated or anonymized data. We may share information that has been aggregated or de-identified so that it cannot reasonably be used to identify you.

Data Retention

We retain your information for as long as your account is active or as needed to provide the service, comply with our legal obligations, resolve disputes, and enforce our agreements. You may request deletion of your account and associated personal data by contacting us at team@stepupboards.com.

Security

We take reasonable measures to protect your information. Passwords are stored only in hashed form, and payment card data is handled entirely by Stripe and never stored on our servers. No method of transmission or storage is completely secure, however, and we cannot guarantee absolute security.

Cookies and Tracking

We use cookies and similar technologies for essential purposes such as keeping you signed in and remembering your preferences, and for analytics through tools like PostHog and Ahoy that help us understand how the platform is used. You can disable cookies through your browser settings, though some features of the site may not function properly as a result.

Your Privacy Rights (CCPA)

Depending on where you live, you may have rights under laws such as the California Consumer Privacy Act (CCPA), including the right to:

• Request that we disclose the categories and specific pieces of personal information we have collected about you;
• Request that we delete personal information we have collected about you, subject to certain exceptions;
• Direct us not to sell your personal information (note: we do not sell personal information).

To exercise any of these rights, email us at team@stepupboards.com. We will respond within the timeframe required by applicable law.

GDPR Data Protection Rights

If you are located in the European Economic Area or the United Kingdom, you are entitled to the following rights with respect to your personal data: the right to access; the right to rectification; the right to erasure; the right to restrict processing; the right to object to processing; and the right to data portability. To exercise any of these rights, contact us at team@stepupboards.com, and we will respond within the timeframe required by applicable law.

Children's Privacy

Step Up Boards is intended for medical professionals and trainees who are at least 18 years old. It is not directed to children, and we do not knowingly collect personal information from anyone under the age of 13. If you believe a child has provided us with personal information, please contact us and we will promptly delete it.

Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date above. Your continued use of Step Up Boards after a change takes effect constitutes your acceptance of the revised policy.

Contact Us

If you have questions or requests regarding this Privacy Policy or your data, please email us at team@stepupboards.com. You can also review our Terms of Service.