PhysDeckPro Privacy Policy

Version 2026.10.0, 4 October 2026.

PhysDeckPro is a flashcard app for MCAT physics on Android, published on Google Play (package com.physdeckpro.app) by Conner Strategic Systems LLC ("we", "us"). This policy explains what the app collects, why, who receives it, how long it is kept, and the choices you have. It covers the app and this website.

In short

What we collect, why, and how long we keep it

WhatWhyKept
Your email address. With Sign in with Google or Facebook Login, also the display name from that account (we do not use it) To create and run your account, to sign you in, and to send purchase notices and renewal reminders For the life of your account; Google removes the sign-in record within 180 days of deletion
Account identifiers: your user ID and the pseudonymous IDs derived from it To link your progress, purchases and settings to your account, and to count each device's free 24 hours once For the life of your account
Profile you choose to give: GPA, college, target medical schools, your history of these, and your design choice To show your own progress and, only if you join peer comparison, to place you in student groups For the life of your account; group statistics rows 24 months
Purchase history: your plan, its state and the store's transaction IDs (never your card or bank details, which Google Play holds) To give you the access you paid for, to restore it, and for tax and fraud checks Purchase records 7 years, without your name or email after deletion
Your answers, hidden cards, favorites and scores To save your progress across devices and to compute your statistics Answer batches 100 days; the rest for the life of your account
App analytics events through Google Analytics (which screens and features are used; never your name, email, school, GPA, answers or anything you type) To understand how the app is used and to fix problems 2 months
Card reports you write, and school names you type when your school is not in the list To correct cards and add schools Card reports 2 years; school requests 180 days
Crash and performance data (Firebase Crashlytics and Performance Monitoring) To find and fix crashes and slow screens Crash reports 90 days; performance data 30 to 60 days
Ad requests on the free cards after your first 24 hours: your IP address, ad interactions (app launch, taps, video views), diagnostics and other app performance data, the app set ID, and your ad consent choice Collected by Google's ads software to show and measure ads and to prevent fraud (see Advertising below); never sent to our servers Under Google's own retention
Device data: the Firebase installation ID, the notification token, the app's installation ID, and a one-way hash of the device's Android ID To deliver notifications and downloads, to secure the service, and to allow one free 24-hour period per device 180 days after the app last checks in; the record that a device has had its free 24 hours, 24 months
Your time zone name To send a daily reminder at the hour you choose As long as the installation record
Consent records: which text you agreed to, its version, your choice and the time To show what you agreed to, as the law requires 3 years; for a purchase, until 1 year after the plan ends if later
On your phone only: the app's database, section downloads, their keys, and a marker for a purchase in progress To let you study offline Until you sign out, when the app wipes them
On your phone only: answers not yet uploaded when you sign out, kept in a private file of the app So that answers given offline are not lost Until the same account signs in again and they are sent, or until you delete your account

Your year of birth is asked once to confirm you are 16 or older; it is checked on your phone and never stored or sent. The app has no AI tutor in this version, so no question you write is sent to an AI service.

The data types as Google Play names them

Name; Email address; User IDs; Purchase history; Approximate location; App interactions; Other actions; Other user-generated content; Other info; Crash logs; Diagnostics; Other app performance data; Device or other IDs. The app does not collect your precise location, contacts, photos or other files, health data, messages, calendar, web history or advertising ID.

Advertising

If you use PhysDeckPro without a plan, after your first 24 hours we show ads from Google AdMob, a service of Google LLC: banners on the study screen and, at natural breaks such as the end of a study session, full-screen ads that may include video. We never show ads to users with a plan, and no ad appears during an answer. The ads are not personalized: we ask Google not to use your activity to choose ads, we do not let the app read your device's advertising ID, and every ad request asks Google to apply its protections for teens and to limit ads to content suitable for a general audience (rated PG). To show and measure ads and to prevent fraud, the Google Mobile Ads SDK in the app collects your IP address (which can indicate your general location), your interactions with ads, technical data about the app's performance, and a device identifier that Google uses only for apps from the same developer (the app set ID). Google uses this information as described at policies.google.com/technologies/partner-sites. Where the law requires it, we ask for your consent before any ad is requested, and you can change your choice at any time under You > Ad privacy choices.

Signing in with Google or Facebook

If you choose Sign in with Google or Facebook Login, that company confirms who you are and Firebase Authentication keeps your account's user ID there, your name, email address and profile photo address. We use only the email address. Meta's Facebook SDK is part of the app: when the app starts it may contact Meta with technical data (the app's ID, your device model, system version and language, your IP address and an installation ID of Meta's software). We have turned off Meta's app-event logging and its collection of the advertising ID, and the sign-in token Meta returns is exchanged on your phone and not stored.

Purchases

Plans are sold through Google Play billing. Google Play holds your payment details; we never see them. RevenueCat, our purchase service, receives your user ID and your purchase history from Google Play to confirm what you bought; it receives no name, email or device ID from us.

Peer comparison

Peer comparison is off until you turn it on. When on, your multiple-choice results, GPA range, your college's admission-rate group and your target medical schools (with their MD or DO type) are combined with other students' into group statistics. No one sees your name, email, college, schools, GPA or answers: only figures for groups of at least 20 students. You can turn it off at any time in the app's settings.

Who receives your data

We do not sell your personal information and do not share it for cross-context behavioral advertising. We may disclose information when the law requires it, or to protect the safety and rights of users and of the service.

Where your data is stored, and how it is protected

Firestore, Cloud Functions and our analytics tables are in the United States (us-central1); Firebase Authentication stores data in the United States. Google Analytics, Crashlytics, Performance Monitoring and Cloud Messaging are global Google services. All data is encrypted in transit, and Google encrypts it at rest. Section downloads on your phone are encrypted with keys kept in your phone's secure storage.

Deleting your account, and what is kept

Delete your account in the app's settings or on the web at /delete-account/. Deleting removes your profile, scores, favorites, hidden cards, reports, school requests and sign-in at once, and turns off renewal of a Google Play subscription. We keep a few records without your name or email: purchase records for 7 years for tax and fraud checks; consent records for 3 years (for a purchase, until 1 year after the plan ends if later); for 24 months, a record that a device has had its free 24 hours; a deletion record for 42 days. Backups expire within 4 weeks, server logs within 30 days, database recovery copies within 7 days, and crash reports and payment event records within 90 days. If you cannot use the app or the page, email us from your account's address and we delete the account within 30 days.

Your rights and choices

Wherever you live, you can ask us to let you see the personal information we hold about you, to correct it, to delete it, and to give you a copy in a portable format. You can withdraw a consent at any time: peer comparison and reminders have switches in the app, and ad choices are under You > Ad privacy choices. Email us from your account's address; we confirm the request comes from you, answer within 30 days, and never treat you differently for using these rights. If we refuse a request, you can ask us to reconsider and, where your law gives you one, complain to your data protection authority.

Age

PhysDeckPro is for people 16 and older; the app asks your year of birth before you can create an account. It is not directed to children. If we learn that an account belongs to someone under 16, we delete it.

Changes to this policy

When this policy changes, we update its version and date here, and when a change matters, the app asks you to agree to the new version before you continue.

Contact

Conner Strategic Systems LLC, the developer of PhysDeckPro. Email greg.conner@connerstrategicsystems.com.