Privacy Policy – IOS APP

Last updated: February 17, 2026

Introduction

The Thoracic Surgery Residents Association (“TSRA,” “we,” “us,” or “our”) operates the TSRA App (the “App”), a mobile companion reader for the TSRA website (tsraweb.com). The App displays educational content hosted on tsraweb.com and provides additional mobile-specific study tools. This Privacy Policy explains how we collect, use, and safeguard your information when you use our App. By using the App, you agree to the practices described in this policy.

Information We Collect

Account registration takes place on the TSRA website (tsraweb.com), not in the App. When you log in to the App with your existing TSRA account, we access the following information:

  • Account Information: Your username, email address, display name, and institution as provided during registration on tsraweb.com.
  • Authentication Credentials: Your password is used to generate a secure application-specific token that is stored on your device via the iOS Keychain. We do not store your plain-text password in the App.
  • Study Progress Data: Quiz answers, scores, accuracy percentages, streak data, daily study goals, exam dates, and study session activity.
  • User-Created Content: Annotations, highlights, bookmarks, flashcards, question reviews, and sketches you create within the App.
  • App Usage Data: Chapters viewed, podcast episodes listened to, courses accessed, and reading history.
  • Device Identifier: We access your device’s vendor identifier solely for generating encryption keys to protect offline content. This identifier is not transmitted to our servers.

How We Use Your Information

We use the information we collect to:

  • Provide and maintain the App’s functionality, including textbook reading, quiz sessions, podcast playback, and course content.
  • Track and display your study progress, streaks, and accuracy.
  • Verify your TSRA membership status and provide access to Premium content.
  • Sync your study progress, annotations, highlights, bookmarks, flashcards, and question reviews to tsraweb.com so your data is available across devices and sessions.
  • Respond to your feedback and support requests.

Data Storage, Sync & Security

We take the security of your data seriously:

  • Credentials are stored in the iOS Keychain, Apple’s most secure on-device storage mechanism. They are never stored in plain text or in app preferences.
  • All network communications use HTTPS encryption (TLS 1.2+).
  • Offline content (downloaded chapters, podcasts, and course materials) is encrypted using AES-256-GCM with keys derived from your credentials and device identity. If you log out, the encryption key is destroyed and downloaded content becomes inaccessible.
  • Study progress and user-created content (annotations, bookmarks, flashcards, reviews) are stored locally on your device and synced to tsraweb.com over HTTPS to enable cross-device access.
  • On iPad, sketches and drawings may sync to your personal iCloud account via Apple’s CloudKit service for cross-device access. This data is stored in your private iCloud container and is subject to Apple’s privacy terms.
  • Cached content is stored temporarily on your device to enable offline reading and improve performance. iOS may purge cached data under storage pressure.

Biometric Authentication

The App offers optional Face ID / Touch ID sign-in for convenience. Biometric data is handled entirely by iOS and is never accessed, stored, or transmitted by the App. We only receive a success or failure result from the system.

Third-Party Services

The App connects to the following services:

  • TSRA Website (tsraweb.com): Provides textbook content, quiz questions, course materials, membership verification, and stores your synced study data.
  • SoundCloud: Podcast episodes are streamed from TSRA’s SoundCloud channel via their public RSS feed. SoundCloud’s privacy policy applies to audio streaming.
  • Apple iCloud (iPad only): Sketches and drawings may sync via Apple’s CloudKit. Apple’s privacy policy applies to iCloud storage.

The App does not integrate any third-party analytics, advertising, or tracking services. We do not use the Apple IDFA (Identifier for Advertisers). We do not sell, trade, or share your personal information with third parties for marketing purposes.

Data Retention & Deletion

Your account information is retained on tsraweb.com as long as you maintain an active TSRA account. Study progress and locally stored data remain on your device until you log out or delete the App. When you log out:

  • Cached content and encrypted offline downloads are cleared from your device.
  • Keychain credentials are deleted.
  • Locally stored preferences are removed.

To request deletion of your entire TSRA account and all associated data on our servers, email us at tsrawebapp@gmail.com. We will process deletion requests within 30 days.

Children’s Privacy

The App is designed for medical professionals and trainees aged 17 and older. It is not intended for use by children under the age of 17. We do not knowingly collect personal information from anyone under 17. If we learn that we have collected data from a user under 17, we will take steps to delete that information promptly.

Your Rights

You have the right to:

  • Access the personal data associated with your account by viewing your profile in the App or on tsraweb.com.
  • Delete your locally stored data at any time by logging out of the App.
  • Request deletion of your TSRA account and all server-side data by emailing tsrawebapp@gmail.com.
  • Opt out of biometric authentication at any time via the App’s login screen.
  • Disable iCloud sync for sketches in your device’s iOS Settings under iCloud.

Purchases & Subscriptions

The App does not offer in-app purchases, subscriptions, or any form of payment processing. All membership purchases, upgrades, and renewals are handled through the TSRA website (tsraweb.com). The App simply reflects your current membership status.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by updating the “Last updated” date at the top of this policy. Continued use of the App after changes constitutes acceptance of the revised policy.

Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact us:

Thoracic Surgery Residents Association
633 N. Saint Clair Street, Suite 2100
Chicago, IL 60611

Email: tsrawebapp@gmail.com
Phone: +1 312.202.5854
Website: tsraweb.com

error: Content is protected!