Privacy Policy

1. What we collect

Guest mode: nothing leaves your device. Quiz stats, streaks, theme preferences, and flashcard progress are stored only in your browser's local storage.

Signed-in accounts: if you create an account with an email and password, or via Google or Apple sign-in (processed by Supabase Auth), we store your email address, display name (if provided), study preferences (daily goal, exam date, theme), quiz attempt history, flashcard progress, and — for Pro subscribers — your AI Tutor chat history, so it can persist across devices and so the tutor can reference your quiz performance. Your password is hashed by Supabase Auth; we never see or store it in plain text.

2. How we use it

To operate the App: sync your progress across devices, calculate your streak and readiness stats, personalize the AI Tutor's responses with your topic accuracy, enforce daily AI usage limits, and manage your subscription tier.

3. Third parties we use

• Supabase — authentication (email/password and Google/Apple sign-in) and our Postgres database.
• Google Gemini (AI Studio) — powers the AI Tutor and AI question generator. Messages you send to these features (including any attached images) are sent to Google's API to generate a response. Don't include personal or sensitive information you wouldn't want processed by a third-party AI model.
• Groq — transcribes AI Tutor voice-mode recordings (speech-to-text) so your spoken question can be sent to the tutor as text. Audio you record is sent to Groq's API for transcription and is not retained by us after the transcript is generated.
• Fish Audio (and ElevenLabs, as a fallback) — converts the AI Tutor's text replies to spoken audio (text-to-speech) for voice mode and "Listen" playback. Only the text being read aloud is sent to these providers.
• Stripe — payment processing for Plus/Pro subscriptions on the web. We do not store your card details ourselves; Stripe handles that.
• Apple (App Store / StoreKit) — payment processing for Plus/Pro subscriptions purchased in the iOS app. Apple handles your payment details; we receive only subscription status and renewal information needed to grant access.
• Vercel — application hosting.
• Vercel Web Analytics and our own first-party analytics — help us understand aggregate product use and improve the App. We do not use advertising trackers in the App.

4. Cookies and device storage

We use essential cookies and similar browser storage to keep you signed in, protect authentication flows, remember your preferences, and maintain guest-mode study progress. We do not use advertising cookies in the App. If we introduce non-essential cookies or similar technologies, we will update this policy and provide any choices required by applicable law.

5. Data retention

We retain account data for as long as your account is active. You can request deletion of your account and associated data at any time; guest-mode data can be cleared by clearing your browser's local storage or uninstalling the App.

6. Your choices

You can use GCLEX entirely as a guest without creating an account. If you have an account, you can sign out at any time, delete your account from Profile, or request an export or other privacy help at gclexpartner@gmail.com.

7. Children's privacy

GCLEX is intended for nursing students and is not directed at children under 13. We do not knowingly collect data from children under 13.

8. Security

We use industry-standard practices (encrypted connections, hosted auth via Supabase) to protect your data, but no method of transmission or storage is 100% secure.

9. Changes to this policy

We may update this policy as the product evolves and will update the date above.

10. Contact

Questions or privacy requests can be sent to gclexpartner@gmail.com.