Privacy Policy
Effective Date: June 15, 2026
1. Introduction & Scope
Pathurn ("the Platform", "we", "us", or "our") is a high-fidelity digital histopathology atlas and learning platform owned and operated by Digisept LTD. Digisept LTD also owns and operates Clerkyn ("Clerkyn", available at clerkyn.pathurn.study), an OSCE clinical clerking simulator. Because both products share a unified platform architecture, this Privacy Policy applies to your interactions with both the Pathurn histopathology atlas and Clerkyn.
By accessing either Platform, you acknowledge that you have read and understood the terms of this Privacy Policy. If you do not agree with these practices, please refrain from registering or using our dashboard features.
2. Data We Collect and How We Collect It
To provide a fully personalized, adaptive spaced repetition study workflow and interactive clinical clerking simulations, we collect and process several categories of information:
- Unified Account Profile:Your name, academic title, email address, phone number (used for security and session alerts), country of study, university affiliation, and year of training. Because we use a unified account system, your profile and login credentials are valid across both Pathurn and Clerkyn, avoiding the need for duplicate accounts.
- Academic & Simulation Metrics:Your interactions with histopathology slides, OSCE/steeplechase test scores, custom study trays, learning streaks, and cards mastery levels on Pathurn, as well as patient clerking transcripts, diagnostic test choices, and OSCE workup feedback generated during Clerkyn clinical simulations.
- Security & Session Info:IP address, approximate location (to prevent regional pricing bypass and verify payment origin), browser configuration, login history, and list of currently active device sessions (which you can manage and revoke from your settings page).
- Payment Records:We process subscription payments exclusively through Flutterwave. Your full credit or debit card number never touches our servers. We only store transaction references, pricing tiers, and renewal status.
3. Unified Authentication & Cross-Subdomain Pass-Through
To provide a secure and integrated learning environment, Digisept LTD utilizes a unified authentication protocol across our subdomains:
Dynamic Redirection: When accessing Clerkyn (clerkyn.pathurn.study), you are securely redirected to the primary Pathurn platform (pathurn.study/login) for authentication. This design preserves browser password autofill integrity and enforces strict session policies under a single domain context.
Secure Token Handshake: Upon successful verification of your credentials (via Appwrite), the primary domain safely passes your session state back to the Clerkyn dashboard using secure, encrypted redirect parameters. We do not transmit cleartext passwords or sensitive credentials during this redirect process.
4. Our Subprocessors and Integrations
We rely on trusted third-party service providers (subprocessors) to power core functionalities of the Platform. These processors have been vetted to ensure they adhere to strict security guidelines:
Appwrite Cloud
Used for our secure database, real-time sync, file storage, user authentication, and serverless backend architecture.
Flutterwave
Handles all billing, subscription cycles, regional checkout options, and fraud prevention protocols utilizing mandatory 3D-Secure verification.
Resend
Delivers critical transactional notifications, including password resets, account verification pins, activity alerts, and subscription invoices.
PostHog & Microsoft Clarity
Provide user session analytics, page click metrics, and UI hot-spots to help us improve site performance and eliminate navigation bugs.
5. Data Retention, Security & User Controls
Your personal information and educational records are stored on encrypted cloud databases with strict access controls. We maintain records for as long as your account is active to preserve your learning progress and spaced-repetition schedules.
User Autonomy & Settings: We empower you with granular controls to manage your digital footprint within your dashboard:
- Device Sessions: You can view all active devices logged into your account and terminate any unauthorized logins with a single click.
- Native OS Notifications: If you opt to receive push notifications, we store a secure token. You can manage notifications on the Settings page or disable them entirely via your web browser settings.
- Account Deletion: You can request complete deletion of your account and all associated study progress metrics by writing to our support email.
6. Regional Regulations & GDPR/NDPR Compliance
We process personal data in compliance with the Nigeria Data Protection Regulation (NDPR) and the General Data Protection Regulation (GDPR) where applicable. You have the right to request access to your data, request corrections, export your data in a structured format, or object to specific processing methods. We do not sell or monetize your data for advertising purposes.
7. Updates and Contact Information
We may revise this Privacy Policy periodically to reflect changes in regulatory standards or Platform improvements. We will notify you of material changes via email or direct alerts within the dashboard.
For privacy requests, data access applications, or questions regarding our privacy architecture, contact the Digisept Data Protection Officer at:
Data Controller
Digisept LTD
Direct Email
hello@pathurn.study
Response Time SLA
Within 1 business day