Privacy Policy

BiochemDrill™ by Swift Mart LLC · Effective November 5, 2026

Exam reminders

This optional service is separate from saved trial emails and your study progress. It is for people aged 16 and over. We collect the email address you provide, your optional exam date, the scheduled reminder date and time, and a record of your consent: its wording and version, when you gave it, and when you confirmed it. We use these only to send one confirmation link and one requested study reminder with a link to a free practice question. We do not send study tips or offers or add you to a marketing list.

We rely on your consent. The reminder checkbox starts unchecked. You must confirm by email within 24 hours before we schedule a reminder. Consent is optional and does not affect access to free practice or start a trial. Saved trial emails are handled separately (see Study data and access). Choose an exam date 4–90 days away for a reminder 3 days before it, or leave the date blank for a reminder 3 days after confirmation. Reminders are scheduled for 11 a.m. Eastern Time; delivery can be delayed by the email provider.

You can withdraw consent using the unsubscribe link in either email, without signing in, paying or giving a reason. This stops pending reminders and deletes your reminder record within 24 hours. Withdrawal does not affect processing already carried out with consent. Unsubscribe links remain usable for at least 30 days after a message. A new request requires fresh consent and confirmation.

Unconfirmed records expire after 24 hours and are deleted within the following 24 hours. Confirmed records, including the address, optional exam date and consent evidence, are deleted within 24 hours after the reminder is sent or you unsubscribe, and no later than 7 days after the scheduled reminder if delivery fails. We delete consent evidence with the reminder record. Nonidentifying total counts may remain.

Reminder records are held separately in private Vercel storage. Resend, our existing email delivery provider, processes the recipient address and message to deliver these two emails; we do not send it your optional exam date. Resend stores email content and delivery logs in the United States for 30 days on its standard plans, and backups persist for 7 days. These provider records are separate from our shorter-lived reminder records. We do not use email open or click tracking for this service.

Vercel and Resend may process information in the United States. Their data processing agreements incorporate EU Standard Contractual Clauses and the UK Addendum for applicable international transfers. You can read the Vercel and Resend agreements using the links below. Reminder consent is not consent to unrelated marketing or advertising.

The reminder page runs no advertising or analytics scripts. We do not sell or share reminder information for cross-context behavioral advertising, or attach names, trial or customer identifiers, referral data or browsing activity to reminder records. For abuse prevention, we briefly retain keyed codes derived from the email address and request IP address, and request counts; these are separate from reminder records and deleted within 48 hours. The raw IP address is not stored in these records. Standard hosting security logs may include IP addresses and browser information, as described elsewhere in this policy.

Use the Contact details below to request access, correction or deletion, or to exercise applicable privacy rights, without losing access to free practice. Email requests follow our existing response timeline, typically within 30 days. Where applicable you may request restriction of processing, object, request a portable copy, or complain to your data protection authority. The operator and contact details in this policy apply to this service.

Provider details: Vercel DPA, Resend DPA, Resend retention.

Study data and access

Your lessons, answers, practice results, settings and progress stay in local storage on this device. Clearing site data removes them. There is no account, password or sign-in email.

If you enter an optional email in the app, it is sent to us and stored privately on our server, in private Vercel storage, so we can contact you about your trial. We store the address itself, not a scrambled version, in its own record separate from your trial record (the optional discount-offer box below adds a separate, linked copy), with the date, where you entered it, any campaign source and the consent wording you saw. We use it only to contact you about your trial, never for marketing lists. If you opt in to optional trial emails, we use your trial email address only for an eligible day-2 nudge if you have not returned and a heads-up before your free trial ends, which may include paid-plan options; you can unsubscribe using the link in either email. We keep it until you ask us to remove it or use the unsubscribe link in the discount email below. Nothing else deletes it automatically, including when your trial ends, and clearing site data does not remove it. To remove it, email support@outermilelabs.com and tell us the address.

One discount email (optional). The email forms shown during a free trial have a separate box that starts unticked: "Email me once with a discount offer if I haven't been back 7+ days after my trial ends". Ticking it is not needed for anything else. If you leave it unticked, nothing extra is stored. If you tick it, we keep, in a private record linked to your trial's random device identifier and trial end time: your email address, that you ticked the box (with its wording and version) and the date and time you ticked it, and the date you last used BiochemDrill in the browser where you had your trial (when you open BiochemDrill there after your trial has ended, at most once a day, or open a cheat sheet). For that last visit we keep the calendar day (in UTC) only: no time of day, pages, IP address or browser details. We send at most one email, between 7 and 30 days after your trial ends, and only if you have not been back for at least 7 days. It offers 30% off the first month of the $10 monthly plan. Before sending, we ask Stripe whether that address has ever made a purchase, and we do not send it if it has, after you buy, or after you unsubscribe. Resend, our email delivery provider, delivers it. Our daily cleanup deletes this record, including the address, once 30 days have passed since your trial ended (normally within a day after that). The unsubscribe link in the email deletes it at once, together with any other discount-offer record and the saved trial email above for the same address. So the email goes out only once, we also keep two short codes that contain no readable address: your trial's device identifier and a one-way code made from your address with a secret key. We delete them once no discount-offer record needs them, normally within 40 days. The offer link carries campaign tags so we can count visits from it; we do not track whether you open the email.

A random device identifier and an HttpOnly device cookie, which lasts up to one year, let our server remember the start and end of your free trial. Private server storage holds that identifier and trial times, with no name or email address. Signed access tokens stay on your device. A short-lived cookie opens the cheat sheets you have access to. Paid access is checked with Stripe, including refunds and cancellations.

To help us spot possible duplicate trials, when a new trial starts we make one-way codes from your IP address and browser, using a secret key and the date. We do not store your IP address or browser details, and the codes are not saved in your trial record. A match only adds a "possible duplicate" note to our own alert; it never blocks a trial. We stop using each code after 15 minutes and clear old codes when later trials start.

Payments

Stripe hosts checkout and handles payment details. We do not receive or store full card numbers. Stripe processes the email and billing details you enter, and purchase, subscription and refund records needed to provide access and manage billing. We do not copy your email address from Stripe into our own records. Stripe keeps its records under its own policy; see Stripe’s privacy policy. If you buy a course bundle, your checkout reference is used to open the courses you chose on our other course sites.

Ad measurement and your choice

We use a Meta pixel (which may set cookies) to improve the site and measure our ads. It records visits, first chapter starts, views of our plans, trial starts, checkout starts and completed purchases (including value and currency) and sends this usage information to Meta. We turn off automatic form collection and never send names, email addresses or card details to the pixel.

Visitors in the United States: the pixel runs when the page loads. You can opt out at any time with "Your privacy choices" at the bottom of the home page and app. Your choice is saved on this device. If your browser sends a Global Privacy Control (GPC) signal, we treat it as an opt-out and the pixel does not load. Opting out does not affect study access.

Visitors outside the United States, including Canada, and visitors whose location we can't determine: the pixel stays off unless you choose Allow on the banner. You can change your choice at any time with "Your privacy choices".

To decide which choice applies, we use the country that our hosting provider (Vercel) estimates from your connection. We keep only a US or non-US result in this browser tab, not your IP address or country. The pixel is also turned off for automated visits, QA visits and preview pages.

Campaign tags, the referring host and the page you landed on may be stored on this device for up to 30 days to measure which links brought visitors. They are attached to checkout in Stripe. Campaign tags or the referring host also appear in our trial alerts, and the campaign source is saved with an optional email. We do not store ad click identifiers. Global Privacy Control disables this attribution storage.

Operational notifications and hosting

Vercel hosts the site, processes technical request information to operate and secure it, and may process information in the United States. We also use Vercel Web Analytics, our hosting provider's privacy-friendly analytics, to count page views; it does not use cookies and does not identify you. To limit abuse, our server counts requests by IP address in temporary memory, and these counts are not written to storage. Vercel may also run a basic automated bot check when you start a trial, save an email or open checkout.

Private Vercel storage holds trial records, saved optional emails, optional discount-offer records and their send codes, exam-reminder records, duplicate-check codes and notification-deduplication records.

Owner chat alerts and alert emails report trial starts, purchases, refunds, cancellations and payment disputes, with the plan, semester, time, where a trial was started, campaign source and the number of trials started that day in America/New_York. A trial alert may be marked as a possible duplicate. These alerts contain no customer names, email addresses, IP addresses or card data.

Resend delivers owner alert emails, the exam-reminder emails you request (see Exam reminders) and, if you ticked that box, the one discount email (see One discount email), which means Resend processes your address to deliver it. Apart from that discount email, we do not currently send saved optional emails to Resend or any other email provider. If we use Resend to contact you about your trial, it will process your address to deliver that message.

Retention and choices

• Browser data stays until you clear it. Campaign attribution expires after 30 days, and the device cookie after one year.
• Saved optional emails stay until you ask us to remove them or use the discount email's unsubscribe link. Nothing else deletes them automatically.
• Discount-offer records (only if you ticked that box: address, consent and last-visit date) are deleted by our daily cleanup once 30 days have passed since your trial ended, or at once when you unsubscribe. Their send codes, which contain no readable address, are deleted normally within 40 days.
• Exam-reminder records are deleted on the schedule in Exam reminders.
• Trial records have no automatic deletion date, because they prevent repeated trials. They hold no name or email address, so we may not be able to find yours from an email request.
• Notification-deduplication records hold only a coded reference and a time, and have no automatic deletion date.
• Payment records stay with Stripe to support access and accounting. Technical logs are kept as needed for security and operations.

Clearing browser data may remove access tokens; contact support for purchase help. To request access to or removal of information we hold, including a saved email, write to support@outermilelabs.com and tell us the address, subject to records we must retain.

Children and security

BiochemDrill is for people age 13 and over. We do not knowingly collect information from children under 13. Contact us if you believe we have. We use HTTPS and restrict access to server records; no system can guarantee perfect security. The optional exam-reminder service is only for people aged 16 and over (see Exam reminders).

Changes and contact

The effective date above identifies this policy. Questions: support@outermilelabs.com. Swift Mart LLC (Outermile Labs), 804 NE 191st St, Miami, FL 33179.