Privacy Policy

HIKMA is a clinical-reasoning study platform for medical students preparing for the USMLE. This policy explains what we collect, why, who we share it with, and the choices you have. Plain language, no dark patterns.

Who we are

HIKMA (“we”, “us”) operates the HIKMA platform at hikma.one. For any privacy question or request, email [email protected].

Information we collect

Account information

When you create an account, our authentication provider (Clerk) processes your name, email address, and login credentials. We receive a user identifier, your email, and display name — we never see or store your password.

Study and performance data

To personalize your learning we record how you use the simulator: practice sessions, the choices you make in cases, response times and confidence levels, per-concept mastery scores, flashcard reviews, chapter progress, and the readiness signals derived from them.

Documents you upload (Study Hub)

If you use Study Hub, the files you upload (lecture slides, notes, study guides) are stored, parsed into text, converted into embeddings, and mapped to study concepts so you can search and ask questions over them. This content is private to your account and is processed only to provide the feature to you.

Payment information

Paid subscriptions are handled by Stripe. We receive your plan, subscription status, and the last four digits and brand of your card for display — full card numbers are processed and stored by Stripe, never by us.

Usage and device data

We collect standard technical data (IP address, browser type, pages visited, error reports) to operate, secure, and improve the service. Sign-up forms are protected by Cloudflare Turnstile to prevent automated abuse.

Cookies and similar technologies

We use strictly-necessary cookies to run the site — keeping you signed in and maintaining your session (via Clerk), protecting forms against CSRF, and supporting Cloudflare's bot protection (including Turnstile). These are required for HIKMA to work and cannot be turned off.

We do not currently run advertising cookies. Any functional, analytics, or marketing technologies stay off until you turn them on through our cookie banner, and you can change your choices anytime — your preferences can be reopened from the banner whenever you like. For the full details, see our Cookie Policy.

How we use your information

• To provide the simulator and personalize your learning path and recommendations.
• To generate study content, explanations, and answers from your materials.
• To process subscriptions and provide support.
• To secure the platform, prevent abuse, and debug errors.
• To communicate with you about your account, and — only if you opt in — product updates.

We do not sell your personal information, and we do not use your uploaded documents to train shared or third-party AI models.

AI processing

Some features (case generation, explanations, Study Hub answers, readiness analysis) use large language models from providers such as Anthropic and OpenAI. When a feature calls these providers, the relevant prompt and context are transmitted for that request only. These providers act as our processors and do not use this content to train their models under our agreements. Mastery and embeddings are computed within our own infrastructure.

Service providers we share with

• Clerk — authentication and account management.
• Stripe — subscription billing and payments.
• Cloudflare — bot protection (Turnstile), delivery, and security.
• Loops — transactional and (opt-in) product emails, and the early-access list.
• Sentry — error monitoring and performance diagnostics.
• Anthropic / OpenAI — AI generation, as processors, for the features above.

Each receives only the data needed for its function, under agreements that require they protect it. We may also disclose information if required by law or to protect the rights and safety of our users and the platform.

Data retention

We keep your data for as long as your account is active. You can delete uploaded documents at any time from Study Hub, and you can request deletion of your account and associated data by emailing us. Some records may be retained where required for legal, security, or accounting reasons.

Your rights and choices

• Access, correct, or export the personal data we hold about you.
• Delete your account and associated study data.
• Opt out of non-essential product emails at any time.
• Manage or cancel your subscription from your account settings.

Depending on where you live (for example, the EU/UK under GDPR, or California under the CCPA), you may have additional rights. To exercise any of these, contact [email protected] and we will respond within a reasonable time.

Security

We protect your data with encryption in transit, access controls, and isolation of each user's content. No system is perfectly secure, but we work to safeguard your information and will notify you of a material breach as required by law.

Children

HIKMA is intended for medical students and other adults. It is not directed to children under 16, and we do not knowingly collect their data.

Beta status & changes

HIKMA is currently in private beta; features and data practices may evolve as the product develops. We will post any material changes to this policy here and update the date above. Continued use after a change means you accept the updated policy.

Contact

Questions about this policy or your data? Email [email protected].