Privacy Policy

Heart Saver USA operates USA HeartSaver. For privacy questions or requests, email [email protected].

When you register, we collect your name, email address, and account credentials (password authentication is handled by Supabase). While you use a course, we record enrollments, lesson progress, quiz responses and results, and certificate-related information. For a purchase, we record the course, order amount and status, and payment references. Stripe processes payment details; we do not ask you to send card numbers to us.

If you contact us, we receive the information you choose to include. Our website and service providers may also process technical information such as IP address, browser details, session identifiers, and service logs needed to operate and protect the site.

We use this information to create and secure accounts, deliver training, track course and assessment progress, issue applicable completion records, process orders, provide support and transactional messages, detect misuse, and meet legal and accounting obligations. We do not describe an optional marketing program here; any future marketing uses should be separately disclosed before they begin.

We share only the information needed for these functions with service providers: Supabase for authentication and student records; Stripe for payment processing; Resend for transactional email when configured; Replit for website and API hosting; and YouTube for embedded course videos when you play them. These providers may process information under their own privacy terms. We may also disclose information when legally required or to protect users and the service. We do not sell student records.

Sign-in and security functions may use cookies or similar browser storage. Stripe Checkout and embedded YouTube videos may use their own cookies or collect device and usage data when those services load. Your browser controls may let you limit some cookies, but essential login functions may then stop working.

We keep account, learning, and transaction records for as long as needed to provide the service, maintain completion records, resolve disputes, and meet legal obligations. We may retain records required for accounting or fraud prevention after an account is closed. We use reasonable access and security measures, but no online service can guarantee absolute security.

You may request access to, correction of, or deletion of your information by contacting us. Depending on where you live, additional privacy rights may apply. We will review each request, verify identity where appropriate, and explain if a legal or operational retention requirement prevents deletion of particular records. You can also contact us about transactional messages or an account issue.

We do not knowingly seek personal information from children without appropriate permission. If you believe a child has provided information without it, please contact us so we can review the situation. We may update this notice as the service changes and will post the updated version here; we will provide additional notice when required by law.