Pilot data handling · September 2026

Your study data.

What the app stores

Your account identifier, name, email, hashed password, sessions, preview dates, course checklists, optional practical date, answers, review schedule, session history and feedback. Billing identifiers and subscription status are stored only if billing is connected and you use it. Card details are handled by the payment provider, not stored by this app.

Why it is stored

To save progress across devices, schedule reviews, apply plan limits, support billing and understand whether the study workflow is useful. The product owner can review aggregate pilot activity and feedback. Do not submit patient information, private examination questions or other people’s personal data.

Where it is processed

The app is hosted on a Hostinger VPS. Accounts and study records are stored in a persistent SQLite database on that server. Passwords are hashed by Better Auth; plain-text passwords are not stored. Resend processes your email address and account messages to send verification and password reset links. Anatomy files are delivered by the same VPS. Stripe is the implemented billing provider; billing remains disabled until launch configuration is completed. The app does not include advertising trackers or an AI chat service.

Your controls

My study → Account provides a JSON export and an Erase study data action. Erasure removes checklists, answers, sessions, scheduling data and feedback from the application database. It keeps sign-in identifiers, email, preview dates and billing records to maintain account access and prevent trial resets. It does not cancel a subscription or erase records held by the sign-in, hosting or payment providers.

Retention and requests

Study data remains until you erase it or the service owner removes the account. Database backups are kept for 14 days on the server. Erased study data may remain in those backups until they expire. Service-provider log retention follows their policies. During this private pilot, contact the person who invited you to request full account removal or ask a data question. A public operator identity and support contact must be published before paid public launch.