Privacy Policy

Egor Pririez runs Anamnes (the “service”), a spaced repetition study tool for medical students at getanamnes.com. In this policy “we” means the people who run the service. To reach us, write to support@getanamnes.com.

This policy explains what personal data we collect, why, who helps us process it, how long we keep it and what you can do about it.

• Account data. Your e-mail address and a password (stored only as a one-way hash by our authentication provider). If you sign in with Google, we receive the e-mail address and basic profile information Google shares with us.
• Your study content. Topics, cards and dictionary words you create, import (for example from an Anki deck) or save, files and links you attach to topics, and the translations and explanations generated for your cards.
• Study activity. Which cards you rated and when, review intervals, daily progress and statistics.
• Your settings. Interface and AI language, daily goal, exam date, and whether and when you want e-mail reminders (including your time zone).
• Nickname and friends. If you choose a nickname, people who search for it (unless you switch this off in Friends) and your friends can see it. We store your friends, friend requests and shared streaks. Friends see only your nickname, how many cards you reviewed today and your streak (you can hide these with “My activity sharing”), and the length of a streak you share. They never see your e-mail address, your cards, topics or files. A declined request is kept so that it cannot be sent again. Your browser’s time zone is stored to decide what “today” means for your streak.
• Messages you send us. Feedback and support messages, and reports about a card or a question.
• Technical data. Your IP address is used briefly to limit abuse (rate limiting) and is kept only in short-lived counters. We read your approximate country from the request to suggest a language; we do not store it. If the service crashes, an error report with technical details (browser type, page address, error message) is sent to our error monitoring provider. We remove cookies, request headers, request bodies and account details from these reports before they leave the app.

We do not collect payment card details. We do not run advertising or behavioural analytics.

• To provide the service you asked for: your account, your cards, scheduling reviews, showing your progress, importing and exporting your data. Legal basis: performing our contract with you.
• To let you study with friends: nicknames, friend requests, and showing friends the numbers above. Legal basis: performing our contract with you, and your choice to share (you can turn sharing and search off at any time).
• To send reminders by e-mail, only if you turn them on. Legal basis: your consent. You can turn them off in Settings or with the unsubscribe link in every e-mail.
• To keep the service secure and working: bot protection, rate limits, error monitoring, responding to your messages and fixing problems. Legal basis: our legitimate interest in running a safe service.
• To meet legal obligations where they apply to us.

When you use Translate, Explain, the dictionary or the question generator, the text needed for that request (for example the text of a card or a selected word) is sent to an AI model provider, through OpenRouter. We do not send your name or e-mail address with it. The model returns the result, which we show to you.

To save time and cost we keep generated results (translations, explanations and generated practice questions) in a shared cache. Entries are looked up by the text itself and are not linked to your account, so the same result can be shown to another student who studies the same text. Please do not put information about real patients or other people into your cards.

AI output can be wrong. See the Terms of Service. The AI providers process requests under their own terms and privacy policies.

We use service providers that process data on our behalf, only to run the service:

• Supabase: database, sign-in and storage of your files.
• Vercel: hosting of the website and application.
• OpenRouter and the AI model providers it routes to: AI features (see section 4).
• Resend: sending e-mail (account e-mails and the reminders you turn on).
• Cloudflare: bot protection on the sign-in, sign-up and password reset forms (Turnstile) and DNS for our domain.
• Sentry: error reports (see section 2).
• Google: only if you choose to sign in with Google.

We do not sell your personal data and we do not share it for advertising. We may disclose data if the law requires it, or to protect the service and its users from abuse.

Our providers may process data in countries other than yours, including the United States and the European Union. Where the law requires it, we rely on safeguards such as the providers’ standard contractual clauses.

We use only what is needed for the service: a session cookie that keeps you signed in, a cookie or token from Cloudflare Turnstile when you use the sign-in forms, and your browser’s local and session storage for small preferences such as which topics are ticked or a hint you dismissed. We do not use advertising or analytics cookies.

• Your account data and study content are kept until you delete your account.
• Deleting your account (Settings, Delete Account) permanently removes your topics, cards, review history, dictionary words, uploaded files, reports, messages, settings, nickname, friendships and friend requests, and then your login.
• Rate-limit counters are deleted automatically within a few days.
• Our database provider may keep routine backups for a limited time; deleted data disappears from them when they expire.
• Shared AI cache entries are not linked to an account and may remain after you leave. They hold no account information.

Depending on where you live, you may have the right to:

• get a copy of your data. Settings, Your Data, “Download my data” gives you one file with your topics, cards, dictionary, history and settings;
• correct data that is wrong (you can edit most of it directly in the app);
• delete your data (Settings, Delete Account);
• object to or restrict some processing, and withdraw consent you gave (for example e-mail reminders);
• complain to your data protection authority. If you live in the European Union, that is the authority in your country.

For anything the app does not let you do yourself, write to support@getanamnes.com. We answer within one month.

Data is sent over encrypted connections. Access to each account’s data is restricted to that account by the database itself. No system is perfectly secure; if a breach affects you we will tell you as the law requires.

Anamnes is for adults and university students. It is not intended for anyone under 16, and we do not knowingly collect data from them. If you think a child has signed up, tell us and we will delete the account.

We may update this policy. The date at the top shows the latest version. For significant changes we will tell you in the app or by e-mail before they take effect.

Questions about privacy? write to support@getanamnes.com.