Pilot data handling · September 2026

Your study data.

What the app stores

Your account identifier, name, email, hashed password, sessions, preview dates, course checklists, optional practical date, answers, review schedule, session history and feedback. Billing identifiers and subscription status are stored only if billing is connected and you use it. Card details are handled by the payment provider, not stored by this app.

Why it is stored

To save progress across devices, schedule reviews, apply plan limits, support billing and understand whether the study workflow is useful. The product owner can review aggregate pilot activity and feedback. Do not submit patient information, private examination questions or other people’s personal data.

Where it is processed

The app is hosted on AWS in Singapore. Accounts and study records are stored in a persistent SQLite database on that server. Passwords are hashed by Better Auth; plain-text passwords are not stored. Resend processes your email address and account messages to send verification and password reset links. Anatomy files are delivered through Amazon CloudFront. Stripe is the implemented billing provider; billing remains disabled until launch configuration is completed. The app does not include advertising trackers or an AI chat service.

Guest quizzes and analytics

A browser cookie remembers when you start your free quiz. An account is needed to start another. Browsing the atlas remains open.

PostHog event tracking is prepared but is inactive until a project is connected. When enabled, it measures page visits, account-form outcomes, quiz activity and study actions using a browser identifier. It does not record passwords, email addresses, reset tokens, free-text entries or session replay.

External 3D models

Disease and veterinary models use an embedded Sketchfab viewer. Disease and regional cases load after you choose Load 3D model or open a disease case in the atlas. The dog and cat atlas loads the full dog when you open it, and loads the cat when selected. The viewer and its control script connect your browser to Sketchfab. That service receives connection information and may use cookies under its own privacy policy. The whole-animal viewer requests Sketchfab’s do-not-track setting. Switching species or leaving the page unloads that model.

Your controls

My study → Account provides a JSON export and an Erase study data action. Erasure removes checklists, answers, sessions, scheduling data and feedback from the application database. It keeps sign-in identifiers, email, preview dates and billing records to maintain account access and prevent trial resets. It does not cancel a subscription or erase records held by the sign-in, hosting or payment providers.

Retention and requests

Study data remains until you erase it or the service owner removes the account. Database backups are kept for 14 days on the server and 30 days in private Amazon S3 storage. Erased study data may remain in those backups until they expire. Service-provider log retention follows their policies. During this private pilot, contact the person who invited you to request full account removal or ask a data question. A public operator identity and support contact must be published before paid public launch.