Privacy Policy

Denver Health EMS Academy (“Denver Health EMS Academy,” “we,” “us,” or “our”) operates the education and assessment platform at denveremsacademy.com, including Denver Health EMS Learn and Denver Health EMS Exams. This policy explains what information we collect, how we use it, and the choices you have. By creating an account or using the platform, you agree to this policy.

Information we collect

• Account information. Your name and email address when you register, and a student profile that is created automatically for your learning and readiness records.
• Authentication data. We use Supabase Auth to sign you in. If you choose to sign in with a third-party provider (Google, Notion, or Slack), we receive basic profile details from that provider — typically your name, email address, and avatar — to create or match your account. We never receive your provider password.
• Learning and exam activity. Course progress, notes, discussion posts, quiz and exam attempts, scores, skill sign-offs, and readiness status.
• Proctoring data (proctored exams only). When you take a live proctored exam, and only after you provide explicit consent, we may capture webcam, microphone, screen, and room-scan data plus exam-integrity events for the duration of that session.
• Technical data. Essential session cookies, and limited device, browser, and network information used to keep you signed in and to protect the platform.

How we use information

• Provide the learning and assessment platform and keep you signed in.
• Track course progress, exam performance, and certification readiness.
• Protect exam integrity and detect or prevent fraud, abuse, and security incidents.
• Communicate with you about your account, exams, and support requests.
• Meet legal, accreditation, and record-keeping obligations.

Cookies and sessions

We use essential cookies to maintain your authenticated session. These are required for the platform to function and are not used for third-party advertising.

Service providers

We rely on trusted providers to operate the platform, and they process data on our behalf under their own security and privacy terms:

• Supabase — authentication, database, and file storage.
• Vercel — application hosting and delivery.
• Resend — transactional email (for example, sign-in and password-reset messages).
• Google, Notion, and Slack — optional sign-in, only if you choose to use them.

How we share information

We do not sell your personal information. We share it only with the service providers above, with instructors, proctors, and administrators within your academy who need it to deliver instruction and verify exams, and when required by law.

Data retention and security

We protect data in transit with encryption and enforce database Row Level Security so you can only access your own records. We retain information for as long as your account is active and as needed to meet legal and accreditation requirements, after which it is deleted or anonymized.

Your rights and choices

You can access and update your account information from your account settings, and you may request a copy or deletion of your personal data by contacting us. You can also revoke a third-party sign-in connection from that provider’s account settings at any time.

Children’s privacy

The platform is intended for EMT students and staff and is not directed to children under 16. We do not knowingly collect personal information from children under 16.

Changes to this policy

We may update this policy from time to time. When we do, we will revise the “Last updated” date above and, where appropriate, notify you.

Contact us

Questions about this policy or your data? Email support@denveremsacademy.com.