Datenschutz

Scope - types of personal data we collect

• Account & profile data: name (if supplied), email address, hashed password (if set), sign-in tokens (OAuth) when you sign in with Apple or Google.
• Learning data: personal progress, question answers and associated information.
• Friends: your username, time zone, friends, friend requests and nudges, and where you study if you tell us.
• Payment & billing: purchase and subscription status as reported by Apple In-App Purchases and Google Play Billing. Payment details stay with Apple or Google; we never see them.
• Usage analytics (Mixpanel, data stored in the EU): which features you use and when, linked to your account id, together with device type, app version and approximate location derived from your IP address (the IP address itself is not stored). We use it to understand and improve the Service, on the basis of our legitimate interest. You can switch it off at any time in Settings → Data & communication → Usage analytics.
• Communications: transactional email metadata (Resend), support correspondence, reports and optional feedback.
• Device & technical data: device model, OS version, IP address, crash logs, etc.
• Error reports: when the app crashes or hits an error, a report with the technical details, device model, OS and app version, and your account id.
• Notifications: a token for each of your devices, so we can send push notifications, and your notification settings.
• Install source: which of our links or ads the app was installed from - on Android from Google Play's install referrer, on iOS for Apple Search Ads from Apple. Used to measure our campaigns. No personal data about you is shared with advertisers or partners.

Aggregated & Anonymized Data

We may process your learning data to create anonymized and aggregated statistical datasets. This data cannot be used to identify you. We use this anonymous data to improve our algorithms, enhance the Service, and for marketing purposes (e.g., publishing blog posts about common mistakes, most popular schools, etc.). The lawful basis for anonymizing this data is our Legitimate Interest in improving and promoting our Service.

Emails

We send three kinds of email:

• Account emails (confirming your email address, password reset) - needed to provide the Service.
• Study emails (progress reports, weak spots, exam information) - part of the Service; you can turn them off in Settings → Data & communication or with the link in each email.
• Offers and promotions, and alumni benefits after your exam (such as work opportunities and our community) - only if you agree. You can withdraw at any time in Settings → Data & communication or with the link in each email.

To be able to prove your choices, we keep a record of each consent you give or withdraw: the wording you saw, the time, and the IP address and device. When you delete your account, this record is kept for 5 years with your email address replaced by an irreversible hash, then deleted.

Push Notifications

With your permission, the app sends notifications in four categories: study reminders, friends, news, and offers. You can switch off each category in Settings → Data & communication, or all of them in your device settings.

Friends

You can add other users as friends by their username; a friendship needs both of you to agree, and either of you can end it at any time. Friends see your name, username, profile picture, streak, recent practice, and whether you are preparing for the exams, studying (with your faculty and programme, if you tell us in the post-exam survey or in Settings) or teaching at Premedis. They do not see your answers or scores. Friend requests and nudges reach you as notifications.

Post-exam Survey

After your exam we may ask how it went: where you applied, your results, and how you prepared. Answering is voluntary. We use the answers to improve the Service and, in anonymised and aggregated form, in our materials (for example, how our users did at each faculty). When you delete your account, your written comments are erased and the remaining answers are kept only in anonymous form.

Lawful basis for processing