Privacy Policy

Last updated: April 15, 2026

MedBlitz ("we", "our", or "us"), developed by ITRN Labs, is an educational flashcard application designed to help students prepare for medical licensing exams. We are committed to protecting your privacy. This Privacy Policy explains what information we collect, how we use it, and your rights regarding your data.

1. Information We Collect

MedBlitz stores the following data locally on your device only:

• Display name you enter during onboarding
• Exam focus selection
• Daily study goal preference
• Flashcard decks and cards you create
• Study session history and spaced repetition progress
• Subscription status

We do not create user accounts. We do not collect your name, email address, or any personally identifiable information.

2. Device Identifier for Free Tier Limits

To enforce the free-tier AI generation limit fairly, our server stores an anonymous device identifier (a random ID generated on your device) alongside a generation count. This data:

• Is not linked to your identity in any way
• Contains no personal information
• Is used solely to track the number of AI generations per device
• Is stored securely on our backend server (Railway)
• Is not shared with any third parties

This identifier resets if you factory-reset your device (Android) or uninstall the app (iOS).

3. AI Card Generation

When you use the Generate Cards feature, the text you submit is sent to our backend server solely for the purpose of generating flashcards. This text is:

• Processed by OpenAI's GPT-4o-mini model (primary) or Anthropic's Claude model (fallback)
• Not stored on our servers after processing
• Not used to train AI models
• Not shared with any other third parties

Please do not include sensitive personal or confidential information in text submitted for AI generation.

4. Data Storage and Security

All personal preferences, decks, cards, and study data are stored locally on your device using secure platform storage (Android DataStore / iOS secure storage). This data never leaves your device except for the AI generation feature described above.

On our backend server we store only the anonymous device identifier and your AI generation count. No personal data is stored server-side.

Uninstalling the app will permanently delete all locally stored data.

5. Third-Party Services

MedBlitz integrates with the following third-party services:

• OpenAI API – processes text for flashcard generation. Subject to OpenAI's Privacy Policy.
• Anthropic API – fallback AI processing. Subject to Anthropic's Privacy Policy.
• Railway – backend hosting for AI generation and device limit tracking.
• Firebase Analytics – anonymous usage analytics to understand how features are used. Subject to Google's Privacy Policy.
• Firebase Crashlytics – crash reporting to improve app stability. Subject to Google's Privacy Policy.
• Apple App Store / Google Play – handles subscription payments. We do not receive or store your payment information.

6. Subscriptions and Payments

MedBlitz Pro subscriptions are processed entirely by Apple (iOS) or Google (Android). We do not collect, store, or have access to your payment information such as credit card numbers. Subscription status is stored locally on your device.

7. Children's Privacy

MedBlitz is intended for users aged 17 and older. We do not knowingly collect personal data from children under the age of 13.

8. Your Rights

You have full control over your local data at all times. You may:

• Delete individual decks or cards within the app
• Clear all local data instantly via Settings → Clear All Data
• Request deletion of your server-side device record by contacting us

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by updating the "Last updated" date at the top of this page.

10. Contact Us

If you have any questions about this Privacy Policy or wish to request deletion of your data, please contact us at:
medblitz.support@gmail.com