Your learning information.
Accounts and study progress
Your name and email support account access. Passwords are sent to Supabase over HTTPS; the learner OS does not save passwords. In this learner OS build, authentication tokens are held in memory and a refresh requires explicit sign-in. Recall progress and notes may be saved to your account and in per-account browser storage. A website exam plan can be stored in this browser for up to seven days and transferred in a URL fragment; it contains no credentials and never grants access. Shared-device users should sign out.
Study insights and Spence AI
The OS records your track, visual, active study time, recall ratings and session events. Progress uses these records to show study patterns and recommended visuals. Where an AI interpretation is requested, selected aggregate learning statistics and public topic labels may be sent through our backend to a configured AI provider. Account email, saved notes and authentication credentials are not intentionally included in that interpretation request.
Services used
Supabase supports account authentication, learning data, protected media and selected backend services. Netlify hosts the website and processes site forms. Purchases are handled by Payhip under the information shown at checkout. AI features can route requests to configured providers such as OpenAI, Groq, Google Gemini or OpenRouter depending on availability and configured permissions. Do not submit patient-identifiable information, passwords, payment-card details or confidential exam content.
External study resources
Study help offers links to ChatGPT. ChatGPT opens separately; your prepared question is sent there only when you paste and submit it. These services operate under their own terms and privacy policies. Account identifiers, private slide images and saved notes are not added to the prepared question.
Enquiries
Names, email addresses, organisation details and messages submitted through the enquiry form are used to respond and discuss the requested pilot. Routine service logs may be collected by hosting providers.
Contact and requests
Contact medwithspence@gmail.com about your information, corrections, access or deletion. Do not send account passwords or patient records.
Your learning journey and feedback
The learner OS stores XP awards, optional feedback, self-reported exam outcomes and proposed study plans with your account. Feedback is private unless you separately permit a public quote. Permission to contact you is separate. You can update these permissions in Review the OS. Results are self-reported and are not verified pass-rate evidence. No patient information or confidential exam content should be submitted.
Demo evaluation
The interactive demo stores sample study activity and reviewer observations in tab-local browser storage. You can reset the demo to clear it or download an evaluation record. No account is required, and these demo records are not sent to a learner account.
Optional journey analytics
Optional analytics are off until you allow them. They count page views, plans, sample recall and checkout clicks, with a random browser identifier, coarse traffic source, device class and exam track. They do not collect names, emails, exam dates, written answers, notes or authentication tokens. The analytics choice and random identifier may be stored for 30 days and carried between our website and learner OS only after consent. You can change your choice using Analytics preferences; Do Not Track and Global Privacy Control are respected.
Server collection requires the analytics service to be enabled. It retains accepted pseudonymous events for approximately 30 days using the supplied daily cleanup function. Aggregate reports count client activity separately from authenticated payment records. A checkout click is not a purchase. Hosting providers may process ordinary security logs separately.
Learner feedback
The review form is processed by Netlify Forms. Email is optional and is not published. Feedback remains private unless publication permission is checked; all publication requires review. Publication consent can be withdrawn by contacting medwithspence@gmail.com. We periodically review and remove feedback no longer needed. Do not submit patient information, confidential exam questions or sensitive personal data.
Ask Spence AI website adviser
When you send a message, your question and up to six recent conversation messages are sent through our Supabase backend to a configured AI provider. The route can use OpenAI, Groq, Google Gemini or OpenRouter, subject to availability and the configured provider permissions. The answer identifies the responding provider. Do not submit personal, patient, payment, password or confidential exam information.
The application does not store a chat transcript in its database or persistent browser storage. Conversation history is held in the current page; Clear chat or leaving the page removes it from this interface. Providers may process or retain requests under their own policies. This is not a promise of zero retention by external providers. OpenAI requests use store:false.
Operational protection stores a daily keyed hash derived from the network address, short-lived request identifiers, counts, and provider outcome/latency metadata. Raw network addresses and message text are not written to these application tables. Rate-limit data expires through daily cleanup after roughly two days; provider outcome metadata is retained for approximately 30 days. Hosting providers may separately process normal security logs.
Optional journey analytics, only after your analytics choice allows them, count chat openings, answered/unanswered states, helpfulness and demo/membership/support link clicks. They do not include the question, answer, conversation history or account details. The same event retention period applies. These signals do not prove a purchase or that the chatbot caused one.
The portrait is an illustrative virtual adviser, not a photograph of the founder or a live clinician. The adviser cannot access orders, passwords, payment details, grant entitlements, process refunds or cancel billing. It can request a standard Supabase password-reset email or resend a signup confirmation email after you explicitly enter the account email. These requests do not confirm whether an account exists; the application does not store the submitted email in its chatbot database. Identity-sensitive account changes still require secure account or support flows. The support-email action only opens your email application; you decide whether to send. AI output can be wrong; current membership and checkout terms remain authoritative.
Optional journey measurement
If you allow analytics, we keep a pseudonymous visitor ID and coarse source (such as social or email) in your browser for up to 30 days. Only our named campaign codes are recorded; full referral URLs and query strings are not.
When you sign in with analytics enabled, we privately link this ID to your verified account to measure account activation, paid orders and first learning sessions. Purchase status comes from payment records; clicking checkout does not count as a sale. Analytics events do not contain your email, name, study notes or clinical answers. You can turn future optional collection off in Analytics preferences. Earlier records are not erased automatically; contact us to request deletion.