Privacy Policy

INBDE Pro Lab ("we", "us", "our") is an online examination preparation platform designed for international dentists seeking licensure in the United States through the Integrated National Board Dental Examination (INBDE).

Our platform is accessible at inbdeprolab.com and through our mobile applications. This Privacy Policy applies to all users of our website, platform, and mobile apps.

We collect only what is necessary to provide and improve the service.

Account data

• Email address (used as your login identifier)
• Name (optional, used for personalized dashboard greeting)
• Password (stored as a secure hash — we never store your plain-text password)

Performance & session data

• Questions answered, answer selections, and correctness
• Session timestamps and duration
• Subject mastery scores and readiness percentages
• Difficulty settings and mode preferences (Stand Alone, Item Cases, Challenge)
• Notes created in the Quick Notes feature

Technical data

• Device type and operating system (mobile vs desktop)
• Browser type and version
• IP address (used for security and fraud prevention only)
• Crash reports and error logs (anonymized)

Payment data

We do not store payment card information. All billing is handled by Thinkific. We receive only a confirmation of successful payment and the plan type selected.

Your data is used exclusively to provide and improve the Pro Lab experience:

• Authenticate your account and maintain your session
• Generate your Subject Mastery Heatmaps and Readiness Score
• Power AI-driven personalization via Google Gemini (Challenge Mode and AI Deep Dive)
• Track your study progress across devices
• Send transactional emails (account confirmation, subscription receipts, expiry reminders)
• Detect and prevent fraudulent or abusive use of the platform
• Improve question quality, fix bugs, and develop new features

• We do not sell, rent, or trade your personal data to any third party
• We do not collect sensitive categories of data (race, ethnicity, health records, biometrics)
• We do not collect your physical location beyond the country level (inferred from IP)
• We do not use tracking pixels or cross-site behavioral tracking
• We do not collect data from social media accounts

We use a small number of carefully selected third-party services to operate the platform:

• Thinkific — course delivery and subscription billing. Subject to Thinkific's own privacy policy.
• Google Gemini (Firebase / Google Cloud) — powers AI Deep Dive explanations and Challenge Mode personalization. Data sent to Gemini is limited to question context and your performance metrics. No personally identifiable information is shared.
• Firebase Analytics — anonymous usage analytics (page views, session counts, feature usage). No personally identifiable information is included.
• Netlify — website hosting. Netlify may log server-side request data (IP, headers) per their standard infrastructure logging.

All third-party providers are contractually required to use your data only to provide their services to us and are prohibited from using it for their own commercial purposes.

• Your account data is retained for as long as your account is active
• Performance data (heatmaps, scores, session history) is retained for 60 days after subscription expiry. If you renew within this window, all your data is intact
• After 60 days of inactivity post-expiry, performance data is permanently deleted
• If you request account deletion, all associated data is deleted within 30 days
• Anonymized, aggregated analytics data (no personal identifiers) may be retained indefinitely for product improvement

Regardless of where you are located, you have the following rights regarding your data:

• Access — request a copy of the personal data we hold about you
• Correction — request correction of inaccurate or incomplete data
• Deletion — request deletion of your account and all associated personal data
• Portability — request your performance data in a portable format
• Objection — object to processing of your data for any purpose other than service delivery

To exercise any of these rights, contact us at the email below. We will respond within 30 days.

We take reasonable and appropriate technical measures to protect your data:

• All data is transmitted over HTTPS with TLS encryption
• Passwords are stored using industry-standard hashing (bcrypt or equivalent)
• Access to production databases is restricted to authorized personnel only
• We conduct periodic security reviews of our infrastructure

INBDE Pro Lab is intended exclusively for adults — specifically licensed dentists and dental graduates pursuing US licensure. We do not knowingly collect data from anyone under the age of 18. If we become aware that a minor has created an account, we will delete it promptly.

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page. For material changes, we will notify active subscribers via email at least 14 days before the change takes effect.

Continued use of the platform after the effective date constitutes acceptance of the updated policy.

For any privacy-related questions, data requests, or concerns, please reach out: