Privacy Policy
Effective date: October 19, 2026
Who we are and what this covers
ProtoQuiz LLC (formerly Teach Me to Live LLC) ("we", "us") runs the EMS ProtoQuiz app for iOS and Android (the "App"), protoquiz.com and its blog, and the research pages on this site, including the EMS Protocol Census and the 911 coverage atlas. This Policy covers all of them.
The agency platform served on agency subdomains (youragency.protoquiz.com) has its own agency privacy policy, and the agency's signed agreement with us controls where it applies.
We do not sell personal information. We do not collect patient information or protected health information (PHI). Please never upload or type patient information anywhere in our products.
What we collect
In the App
- Anonymous account. The App signs you in anonymously and assigns a random ID. There is no sign-up, and we do not ask for your name, email or a password.
- Protocol documents you upload, and the text, medications and questions we extract from them.
- Study data: quiz answers, scores, progress, streaks and settings.
- Optional survey answers. Some surveys have an optional email field for follow-up. If you recommend ProtoQuiz to your training officer, we collect the email you give for them (and your own email or phone only if you add it), and we email them once about ProtoQuiz.
- Purchases. Apple or Google processes payment. We receive subscription status and transaction IDs through RevenueCat, never your card details.
- Diagnostics and usage: crash reports, app version, device model, OS version and in-app events such as screens opened and features used (Firebase Analytics and Crashlytics).
- Notifications: a push token and the notification categories you allow.
- Install attribution. To learn which of our ads led to an install, we use Apple's AdServices token and SKAdNetwork on iOS and the Play Install Referrer on Android. If you tap one of our ad links, our link records a salted hash of your IP address and browser type, kept for up to one hour, to match that tap to the App's first launch. On iOS the Meta (Facebook) SDK reports app installs, launches and purchases to Meta so we can measure our Meta ads; advertising-ID collection in that SDK is turned off. We do not read your advertising identifier and do not build advertising profiles.
- Support emails you send us.
On the website
- Google Analytics 4 sets cookies and records pages viewed, device and browser type and approximate location. We also keep our own page-view and click counts, which do not identify you.
- Forms. The agency contact form collects your name, email, agency, department size and message. The census correction form collects a document link, agency name and an optional email.
- Blog comments use giscus: you sign in with GitHub, and your comment and GitHub username are public and stored by GitHub. Email subscriptions are handled by follow.it, which holds your email address.
On the agency platform
For agency customers we hold each member's name, email, optional phone number (for sign-in codes by text), role, certification level, quiz scores, training assignments and CE records, plus the agency's protocol documents and billing contacts. Details are in the agency privacy policy.
Protocol uploads and the EMS Protocol Census
When you upload a protocol in the App, we process it to build your quizzes. The same document is also read for the EMS Protocol Census, our research comparing EMS protocols across the United States:
- If the document is a public agency's protocol, factual details from it (medications, indications, doses, routes, and the document's date and public source) may appear in the census under that agency's name.
- Documents from private services, hospitals and training programs, or ones we cannot identify, count only toward anonymous totals. They never appear under a name.
- Uploaded files are never published, sold or given to anyone other than the service providers listed below. Census records do not store who uploaded a document, and uploaders are never named.
- An agency can have its listing corrected or removed the same day. Use the takedown form or email support@protoquiz.com. If you uploaded a document you do not want listed in the census, tell us and it will not be.
The 911 coverage atlas is built from public records about agencies and counties, not from personal information.
How we use information
- To run the App and agency platform: extract protocols, build quizzes, save progress and check subscriptions.
- To run the census and related research, as described above.
- To fix bugs, prevent abuse and keep things secure.
- To measure which of our own ads and pages work.
- To reply to you and send notices you asked for or that concern your account.
- To meet legal obligations.
Protocol documents are processed by AI models (Google Gemini, with Anthropic Claude as a backup) under commercial terms that do not allow the provider to train its models on our data. AI output can contain errors; see the Terms.
Who processes it for us
We share personal information only with service providers that process it for us, when the law requires it, or as part of a merger or sale of the business. Our providers:
- Google: Firebase (anonymous sign-in, database, file storage, analytics, crash reporting, push), Google Cloud (servers, backups, BigQuery), Gemini (document processing) and Analytics (website).
- Anthropic: backup AI document processing.
- Apple and Google Play: app distribution, payments and install attribution.
- RevenueCat: subscription status.
- Meta: iOS app-event measurement for our Meta ads.
- Cloudflare: DNS, network security and email routing.
- GitHub: website hosting and blog comments (giscus). follow.it: blog email subscriptions.
- Brevo: email delivery. Twilio: text-message sign-in codes (agency platform only).
- Stripe: agency invoicing and payments.
- Upstash: rate limiting. Discord: internal alerts to our team, with personal details kept to a minimum.
Our use of Google Analytics and the Meta SDK to measure our own ads may count as "sharing" for targeted advertising under some US state laws. You can opt out by emailing support@protoquiz.com, by blocking cookies in your browser, or by limiting ad tracking in your device settings.
How long we keep it
- Data linked to your anonymous account, such as quiz progress and any display name or leaderboard entry from the retired Compete mode, is retained while the account is in use and removed after you delete your account from the Profile screen.
- Protocol documents work differently. A protocol is an agency document, not personal information, so we keep one de-identified copy of each unique protocol, with no link to your account, to avoid re-processing it for the next person who uploads the same document. Deleting your account removes any link between that document and you.
- Database backups: up to 30 days. Crash reports: up to 90 days.
- Ad-link matching hashes: up to one hour.
- Census facts drawn from documents are kept after an account is deleted, because they are not linked to any person.
- Contact-form and support messages: as long as needed to handle them. Purchase records: as long as tax law requires.
- Agency platform data: per the agency's agreement and the agency privacy policy.
Your choices and rights
- Delete your App account from the Profile screen. It signs you out, clears the App's data on your device and sends us a deletion request. We then erase your personal data and quiz history from our servers and remove the anonymous account. A protocol document you uploaded is agency content, not personal data, so we keep a de-identified copy with no link to you. See Delete your account.
- Request access, correction or deletion by emailing support@protoquiz.com. Because App accounts are anonymous, we may need details to find yours. You can use an authorized agent, and we will not treat you differently for using your rights.
- Residents of California and other US states with privacy laws may have rights to know, delete, correct and opt out of sale or sharing. We respond within the time the law requires. If we deny a request, you can appeal by replying to our answer.
- You can turn off notifications in your device settings and unsubscribe from any email with the link it contains.
- If you are in the EEA or UK, we rely on contract, legitimate interests and consent as legal bases. You may also request restriction or portability and complain to your data protection authority.
Children
Our products are made for EMS providers and students. They are not directed to children under 16, and we do not knowingly collect personal information from children under 16. If you believe a child has given us information, email support@protoquiz.com and we will delete it.
Security and location
We use encryption in transit, access controls and cloud providers that encrypt stored data. No system is perfectly secure. Data is processed in the United States.
Changes
If we change this Policy, we will post the new version here with a new effective date. For material changes we will also give notice in the App or on this site.
Contact
ProtoQuiz LLC
1500 N Grant St #10764, Denver, CO 80203
Email: support@protoquiz.com