This is a plain-language description of what Pzishky actually stores and does with it. There is no hidden tracking, no advertising, and nothing is sold.
What we store
Account. Your email address and a hashed password (handled by Supabase Auth, our login provider — we never see the password). Your chosen stage/year of study, display name if you set one, the invite code you signed up with, and the date you accepted these terms and the medical-content disclaimer. If you answer them during onboarding, also your university, current curriculum block, main study goal, next exam date and daily study target, plus any not-yet-open university you asked to be notified about.
Devices. A random identifier for each browser you log in from, the platform (web/iOS/Android), and when it was last active. This is how the two-device limit works. No device fingerprinting beyond that identifier.
Study data. Which lectures you marked as read, every question you answered (which option, whether it was right, how long it took), every flashcard you reviewed (how you rated it and when), your spaced-repetition schedule, and any issue reports you send about content. For OSCE practice: each station attempt (what you entered, the timer, the automatic marks and the marks you gave yourself against the checklist), the circuits you ran, and any exam sighting you report (that a station came up in your exam, the exam date, and an optional short note). This is the point of the product: it is what powers your review queue and progress.
Technical logs. Standard web server logs (IP address, browser type, pages requested) kept briefly by our hosting provider, plus error reports (a stack trace and the page you were on when something broke) sent to our error-tracking service so we can fix bugs. Error reports do not include your study answers or password.
Usage analytics. We count page views and basic product events (for example "started a quiz session") so we can see which features are used. Analytics does not record what you type, does not replay your screen, and does not follow you to other websites. If you tell us your university, year, block and study goal, we attach those to your analytics identifier so we can see which features help which students. We never attach your name or email.
What we do not do
- We do not sell or rent your data to anyone.
- We do not show ads or share data with advertisers.
- We do not read your study answers to judge you; they feed your own review queue and anonymous, aggregated statistics about how hard each question is.
- Other students never see your OSCE attempts or sightings. A station only shows "Seen in exam" once several students have reported it, and then only as a count — never who.
Where the data lives
On servers in the European Union (Frankfurt, Germany) run by Supabase, with the website served by Vercel and files by Cloudflare. Emails (verification, password reset) are sent through Resend. Each of these providers only processes data on our behalf.
Who can see it
You, through your account and the data export. The founder and editors can see issue reports you file (with your account attached, so we can follow up) and aggregated question statistics. Admin access to individual accounts is limited to support and abuse handling.
Your rights, and how to use them
- Export: on your account page, "Download my data" gives you a JSON file of everything above that belongs to you.
- Delete: on your account page, "Delete my account" removes your account and all study data permanently and immediately. Issue reports you filed stay in the editorial queue with your name removed, and our security audit log keeps a record that an account was deleted (not who). Backups that already contain your data expire within 90 days.
- Correct: change your stage/year or display name on the account page; for anything else, contact us.
Cookies
Only the ones needed to keep you logged in and to remember which device this is, plus an analytics cookie that holds a random identifier. No third-party advertising cookies.
Children
Pzishky is for medical students and is not intended for anyone under 16.
Changes
If this policy changes materially we will tell you in the app. The date at the top is the version that applies.
Contact
Use the support channel linked in the footer. We answer privacy requests within 30 days.