Privacy Policy

This is an English translation of the Spanish original. If the two ever diverge, the Spanish version prevails.

Contents

1. Data controller

The controller for Epistemis (“the app”, “we”) is its independent developer, reachable at soporte@somatryx.com. Epistemis is an educational project intended for the study and revision of Medicine by students and health professionals.

2. Two modes of use

a) Local mode (default) no account · offline

On installing the app you can use it without registering. Everything you generate — topics read, favourites, notes, highlights, revision cards, quiz results, streaks, settings — is stored solely in your device's local storage (localStorage / IndexedDB). That information is not transmitted when Atlas resources are requested and is not accessible to us or to third parties. Connections you initiate to download content or use online features are expressly described in this policy.

b) Account mode (optional) cloud sync

If you want your progress synced across several devices, you can voluntarily create an account. Only then is any data processed off the device, as detailed below. This feature is entirely optional: you can ignore it and go on using Epistemis without limit.

3. Data processed

We do not collect: location, contacts, advertising identifiers or browsing data outside the app. We perform no remote usage analytics and no profiling (no Crashlytics, no Sentry, and no trackers). The app may keep local learning counters —for example, numbers of searches, searches with no results, and correct answers— to show your progress. They never store your search text, remain on your device, can be disabled in Settings, and are included when you export your data. The only aggregate information that can be sent is the score histogram described above, and only if you turn it on. The microphone and photos/camera are used only if you activate them inside Clio (voice dictation and image interpretation); in that case, that content is sent in order to generate your answer according to the Clio mode you use (see point 5) and we do not store it.

Smart search (including the natural-language kind) runs entirely on your device: what you type into the search box is not transmitted to any server.

4. Purposes and legal basis

• Providing the study service (saving your progress on the device): legitimate interest / performance of the requested functionality.
• Delivering the Atlas resources you request and protecting, operating and diagnosing their hosting: performance of the requested functionality and legitimate interests in service security and reliability.
• Cloud syncing and accounts: your consent, given when voluntarily creating the account. You can withdraw it by signing out or deleting the account.
• Syncing Clio conversations: your separate, explicit consent, given in Settings. It is off by default and can be withdrawn at any time without disabling sync for the rest of your progress.
• Security and abuse prevention for the authentication service: legitimate interest.
• Managing your subscription (validating the store receipt and giving you the access you paid for): performance of the contract you enter into on purchasing it. With no purchase there is no processing.
• Comparing your score with the cohort: your consent, given by turning the switch on in Settings and withdrawable by turning it off. It is off by default and, while it is, nothing is sent.

We do not use your data for advertising and do not subject it to automated decisions with legal effects.

5. Providers and third parties

For the optional account and syncing feature we use Google Firebase (Google Ireland Ltd. / Google LLC) as a processor:

• Firebase Authentication — handles registration and sign-in (email/password and Google).
• Cloud Firestore — stores your personal progress document and, only if you enable the dedicated switch, your Clio conversation history. If you use Clio included, it also stores a monthly usage counter (number of queries, without their content); all accessible only by your account (see “Security”).
• Cloud Functions — only if you use Clio included: a relay that forwards your query to the AI provider using the key Epistemis pays for (see “Clio · AI tutor”).
• Firebase Hosting — serves the public site, legal pages and immutable image and 3D anatomy packs for the Atlas. Its technical request logs may include the requested URL, IP address, user agent, date, status, latency and transfer size.
• Firebase Cloud Messaging — only if you enable app notices: handles sending notifications and uses a device identifier (token) in order to deliver them.

History and relay are separate processing activities. The server that generates an answer does not log the content of the query or response. Separately, the app keeps history on your device and only adds it to your private Firestore document if you enable “Sync Clio conversations”, which is off by default. You can disable it to remove the cloud copy without deleting the local copy.

Processing by Google is governed by its Firebase Privacy and Security Policy and the Google Privacy Policy.

Clio · AI tutor

Clio is the artificial-intelligence tutoring feature. It is dormant until you use it and works in two modes; in both, your content is processed only when you send a query:

• Clio included (when signed in, paid for by Epistemis): your question — together with the relevant fragment of the app's content and, if you provide it, dictated text or the image you select — is sent to a Epistemis-owned server (a Firebase Cloud Functions function) that acts as a relay: it forwards the query to a language-model provider to generate the answer and returns it to you. Depending on the task, the provider may be Google (Gemini), DeepSeek, Anthropic (Claude) or OpenAI (ChatGPT). We do not store the content of your queries or the answers: the server keeps only a monthly usage counter tied to your account (number of queries, without their content) in order to apply the free quota. Processing by each provider is governed by its own privacy policy.
• Clio with your own key (optional): if you prefer not to go through the Epistemis server, you can enter your own key for Anthropic (Claude), OpenAI (ChatGPT) or Google (Gemini). In that case the query is sent straight from your device to the provider you choose, without passing through our servers, and your key is stored on your device only and is not shared with us.

PDFs and the Evidence space. If you open an article or PDF inside the Evidence space, text extraction happens entirely on your device: the file is not uploaded to any Epistemis server or third party, and the sources you record are stored like the rest of your data. Only what you decide to send to Clio in a question leaves your device, and in that case the above applies. Reproducible PubMed queries open in your browser against the NLM service, using the search terms you composed.

If you do not use Clio, none of these connections is made.

Purchases and subscriptions

Epistemis charges nothing today, so none of this is happening yet; it is described in advance because the mechanism already ships inside the app.

A subscription can only be bought on mobile, and payment is processed entirely by the store (Google Play or the App Store). Your payment details, billing name and address never reach Epistemis: the store only tells us whether the subscription is active.

To validate the receipt for purchases made in the mobile stores we use RevenueCat, Inc. (United States) as a processor. What is sent to it is:

• Your account identifier (UID) if you are signed in — so that your subscription follows you across devices — or an anonymous identifier generated on the device if you use the app without an account.
• The purchase receipt issued by the store, plus technical data about the device and the app version.

Nothing about your study activity is sent: no topics, no notes, no cards, no quiz results, no Clio queries. See RevenueCat's privacy policy.

In addition, an in-house Cloud Functions function checks that status and returns a signed access grant to the device; it stores only the subscription status associated with your account, not the receipt and no payment data.

If you never buy anything, this section does not affect you: with no purchase there is no receipt to validate.

Presentation resources: the typefaces are bundled inside the app (they are not requested from external servers). When online, some guides containing formulas may load the MathJax mathematical typesetting library from a public content delivery network, solely to display the equations; offline, the app renders them itself.

On-demand Atlas. Clinical images and 3D anatomy models do not have to ship inside the application binary. When you open an item or install its module, the app requests it from an immutable content origin hosted on Firebase Hosting and stores it in Cache Storage. It can then open offline while it remains cached. You can remove a module from the app; the operating system or browser may also evict the cache, and uninstalling the app or clearing site data removes it. Every item retains its provenance and licence in “Sources and trust”.

Epistemis adds no account identifier to that request and sends none of your notes, searches, progress or history with it. As with any web request, the hosting provider processes technical metadata and the file URL; that path may indicate the module or topic you opened. We do not use these requests for advertising, profiling or personal recommendations.

6. International transfers

If you use the account, your data is stored on Google Cloud infrastructure, which may be located on servers in the United States or other regions. Google implements recognised transfer mechanisms (such as the EU Standard Contractual Clauses). By creating the account, you consent to this transfer. Without an account your study data is not transferred; Atlas downloads still create the technical hosting request described in point 5.

If you buy a subscription, receipt validation is carried out by RevenueCat, Inc. from the United States, covered by the EU Standard Contractual Clauses. This transfer is necessary to perform the subscription contract and is limited to the data described in point 5; with no purchase they do not occur.

7. Retention and deletion

• Local data: stays on your device until you erase it. You can remove it completely from Settings → Erase everything, or by uninstalling the app.
• Downloaded Atlas content: remains in the local cache until you remove its module, clear the app or site data, uninstall, or the browser or operating system evicts it to manage storage. It is not part of your personal-data export.
• Technical hosting logs: Google retains these according to Firebase/Google Cloud settings and policies. Epistemis does not use them to create an account-linked study history.
• Cloud data: kept for as long as your account exists. From Account and syncing you can delete your account and all its cloud data permanently (this erases your Firestore document and your authentication record).
• Portability: from Settings → Export data you can download all your information in a JSON file, and re-import it whenever you want.

8. Your rights

You have the right to access, rectify, erase and port your data, as well as to withdraw your consent and object to processing. Most of these rights you exercise directly from the app (export, edit, delete account). For any other request or complaint, write to us at soporte@somatryx.com. If you live in the EEA/United Kingdom, you may also complain to your data protection authority.

9. Security

• All communication with the cloud uses encryption in transit (HTTPS/TLS).
• Your Firestore document is protected by security rules that only allow access from your own authenticated account: no other user can read or modify your data, or enumerate the user list.
• We do not store your password: it is managed by Firebase Authentication using industry standards.
• We do not sell, rent or transfer your data to third parties for commercial purposes.

No system is infallible; in the event of a security incident affecting you, we will take reasonable measures and inform you where appropriate.

10. Minors

Epistemis is aimed at students and health professionals. It is not directed at children under 13 and we do not knowingly collect their data. If you believe a minor has provided us with data, contact us so we can delete it.

11. Cookies and tracking

The app uses no advertising cookies and no trackers. It uses local technical storage (localStorage/IndexedDB) to save your progress and preferences, and Cache Storage to retain downloaded Atlas modules. There is no third-party analytics and there are no tracking pixels. Requests needed to download those resources may appear in technical hosting logs as explained in points 3, 5 and 7.

12. Medical notice

Epistemis is educational and revision material. Its content — including guides, calculators, doses, algorithms and image atlases — is for training purposes and does not constitute medical advice, nor does it replace formal training, current clinical guidelines or the judgement of a health professional. Always verify clinical decisions against up-to-date sources and with professional judgement. Use of the information is the user's responsibility.

13. Changes to this policy

We may update this policy to reflect changes in the app or in regulations. We will publish the version in force on this same page and update the date at the top. Substantial changes will be communicated inside the app where reasonable.

14. Contact

For any privacy question or to exercise your rights: soporte@somatryx.com