This Privacy Policy explains how Big Mountain Medical LLC ("we," "us")
handles information in the MountainMed PRO protocols platform — the web
app at mountainmed.pro and the MountainMed PRO iOS app (together, the "Service"). We built
the Service to deliver medical protocols to organized response teams, and we collect only
what the Service needs to work.
Information we collect
Information you provide
- Account information — your email address and a password. Passwords are
stored only as salted hashes by our authentication provider; we never see your plaintext password.
- Name — the display name you enter when creating an account.
- Professional certifications & licensure — the medical certifications you
select (and any free-text you add), used to scope protocol content to your training level.
- Access codes — the organization invite code you redeem, which links your
account to your team's protocol set.
- Agreement records — the version and timestamp of the End User License
Agreement you accept, kept for legal compliance.
- Support messages — if you tap "Send feedback," your device composes an
email to our support address. That email is created in your own mail app and is only sent if
you choose to send it; it may include recent in-app diagnostic/crash logs and your app build
and device model to help us debug.
Information collected automatically
- Diagnostic logs — the app keeps a small buffer of recent error/crash
information on your device. It is not transmitted to us unless you choose to send
feedback (above).
- Standard service logs — our infrastructure providers process routine
technical data (such as IP address and request metadata) to operate and secure the Service.
We do not use third-party analytics or advertising SDKs, and we do not track you
across other companies' apps or websites.
Device features
If you enable Face ID / Touch ID sign-in, your credentials are stored in the iOS Keychain and
unlocked locally by your device. Your biometric data never leaves your device and is never
sent to us.
How we use information
- To create and authenticate your account and keep you signed in.
- To deliver your team's protocols and scope content to your certification level.
- To operate, secure, maintain, and improve the Service and fix bugs.
- To communicate with you about your account (e.g., email confirmation) and respond to support requests.
- To comply with legal obligations and enforce our agreements.
How information is shared
We do not sell your personal information. We share it only with service providers that operate the Service on our behalf:
- Supabase — authentication and database hosting (our backend data processor).
- Email delivery — to send account/transactional email such as confirmation links.
- Cloud hosting / CDN — to serve the web app.
We may also disclose information if required by law or to protect the rights, safety, and security of our users or the Service.
Data retention & deletion
We retain your account information for as long as your account is active. You can delete your
account at any time in the app under Settings → Account management → Delete account,
which permanently removes your account and associated profile data. You may also email us to
request deletion.
Security
We use encryption in transit, hashed-password storage, and access controls to protect your
information. No method of transmission or storage is perfectly secure, but we work to protect
your data and limit collection to what the Service requires.
Children
The Service is intended for medical and response-team professionals and is not directed to children under 13.
Changes to this policy
We may update this policy from time to time. Material changes will be reflected by updating the effective date above.
Contact us
Questions or requests about your privacy: admin@mountainmed.pro.
Big Mountain Medical LLC · Bend, Oregon, USA.