Privacy Policy
Last updated: 18 October 2026
Code Status is a simulation. We store your case progress so it follows you between devices, and a record of how the app is used so we can improve it. There is no advertising, no tracking across other apps or websites, and nothing is sold or shared with anyone.
Who we are
Code Status is provided by Code Status Medical LLC. Questions about this policy or your data: support@playcodestatus.com.
What we collect
If you never sign in. The app creates an anonymous account so your progress can be saved. It holds a randomly generated identifier and nothing that identifies you. No name, no email.
If you sign in. Signing in with Apple, Google, or an email code adds an email address to your account. If you use Sign in with Apple and choose to hide your email, we receive Apple’s private relay address and never your real one.
What you choose to add. A display name and a clinician role (physician, PA, or NP), if you set them. Both are optional, neither is verified, and neither is shown to anyone else.
Your case work. For each case: whether you completed it, your best score, when you last worked it, and the breakdown of your best run. That is what makes your record follow you to a new device.
How you use the app. The app records what you do in it, tied to your account: when you open it, start a shift, and open, replay, or finish a case; when you see the Premium screen and which case you tapped to get there; which plan you subscribe to, never the price or your payment details; how you sign in; and whether you turn on new case alerts. It also records the app version. It does not record your scores or the choices you make inside a case (your best scores are kept with your case work, above), anything you type, or your device’s name. We use this to see which cases are played and finished and to improve the app. It is stored in our own database and not shared with any analytics company.
Subscriptions. If you subscribe in the app, Apple processes the payment on iPhone and Google Play on Android. If you subscribe on this website, RevenueCat and Stripe do. We never see your payment details either way. RevenueCat records that your account has an active subscription. If you installed Code Status from an ad on the App Store, Apple tells RevenueCat which ad it was, so we can see which ads work. This does not use your advertising identifier.
Feedback and support. If you send a message from Feedback & Support in the app, we store the message, the topic you chose, and the reply address shown in the form, if you leave one there, tied to your account so we can answer you. Report a Bug and Contact Support also attach technical details: app version and build, operating system version, which content update is running, the region, units, and medication-name settings that change what you see, whether you are on the day or night home screen, whether Premium is active, and how many cases you have downloaded. The app lists those values before you send. Your device name and your case history are never included. We use this to reply, to investigate bugs, and to improve the app.
Crash and error reports. If the app crashes, freezes, or hits an error, it sends a technical report to Sentry so we can fix it: the error itself, your device model and system version, the app version, which screen and case were open, and the screens that led there. It also records when a session starts and ends, so we can see how often the app crashes. Reports never include your name, your email address, or the decisions you make in a case.
Code Status updates
If you give us your email address on this website to hear about Code Status, we store that address, the date you gave it and which form you used, and nothing else. No name, no IP address, no analytics.
We use it to send new cases and major Code Status updates, occasionally, and for nothing else. Every email carries an unsubscribe link, and you can also ask us at support@playcodestatus.com to remove you. The list is separate from your app account: joining it does not create one, and deleting your account does not remove you from it.
Store links
When you tap one of our store links, such as playcodestatus.com/threads, we count the tap: which link it was, whether it came from an iPhone, an Android phone or a computer, and when. Nothing else. We store no IP address and nothing that identifies you or your device. It tells us where people find Code Status.
Visits to this website
This website counts its visits with Vercel Web Analytics: which page was viewed, the page that linked to it, your country, and your browser, operating system and type of device. It uses no cookies and stores no IP address. To count a returning visitor once, it uses a code made from the visit that is discarded after 24 hours. We see totals only, which cannot be traced back to you. The app does not use it.
What stays on your device
Your audio and display preferences, which cases you have downloaded, the downloaded media itself, and your sign-in session. None of this is uploaded.
What we do not collect
No third-party analytics in the app, and no tracking across other companies’ apps or websites. No advertising identifiers. No location. No contacts, photos, microphone, or camera. No health data of any kind, and nothing about real patients, because the app contains none. It does not connect to electronic health records, medical devices, or Apple Health.
We do not sell or rent your information, and no third party receives it for their own purposes. The companies listed below process data on our instructions and for no other reason.
Who processes data for us
Supabase hosts the database and the case media, and its servers log ordinary request information including IP addresses. Apple and Google handle sign-in only if you choose those methods. Expo serves app updates, which involves a request from your device on launch. RevenueCat, Stripe and Apple handle subscriptions and payments. Sentry receives crash, freeze, and error reports from the app. Resend delivers our email: it notifies us when someone joins the updates list, sends the updates themselves, and holds the address list they are sent to. Vercel hosts this website and counts its visits, and its servers log ordinary request information including IP addresses.
How long we keep it
Until you delete it. An anonymous account you never return to is retained while the device holds its session. An updates list address is kept until you unsubscribe or ask us to remove it. Crash reports are deleted automatically by Sentry after a set retention period, separately from your account, and deleting your account does not remove them sooner.
Deleting your data
You can delete your account and everything associated with it from within the app, under Profile. Deletion removes your account, your profile, your case progress, the record of how you used the app, and any feedback you have sent from our systems. It cannot be undone, and it does not cancel a subscription, which is managed in your Apple Account settings or in Google Play’s Subscriptions if you subscribed in the app, or from the Premium page if you subscribed on this website.
If you no longer have the app, email support@playcodestatus.com from the address you signed in with, or tell us how you signed in, and ask us to delete your Code Status account. We delete the same data as the in-app option and confirm by email within 30 days.
Signing out does not delete anything. Your progress stays on the device and returns when you sign back in.
Children
Code Status is intended for healthcare professionals and students and is not directed at children. We do not knowingly collect information from children.
Your rights
You can access, correct, or delete your information. Most of it is visible and editable in the app. For anything else, contact us at support@playcodestatus.com. Depending on where you live you may have additional rights over your data, and we will honour them.
Changes
If we make material changes to this Privacy Policy, we will update the date above. We will provide additional notice where required by applicable law.