Privacy Policy

Cortexa Social, Inc. publishes DocMinds Class at https://class.docminds.ai and in the iOS and Android apps that load that site. Contact i@cortexa.social. A postal address is available upon request by email.

DocMinds Class is a study tool for medical education. It does not provide medical advice, diagnosis, or treatment, and it is not a medical device.

When you create or use an account we store the following, in Supabase (authentication and database):

• Email address and a password hash held by Supabase Auth. We do not keep the password in plaintext.
• Session cookies that keep you signed in.
• Profile and study setup you enter: name, target exam, institution, campus, graduation timing, weekly availability, self-assessed strengths and gaps, and study preferences.
• Invite and waitlist details: invite code, institution, state, target year, and the email you submitted.
• Your Class access record (approved, waitlist, or paused) and plan label.
• Your optional choice about anonymized data for improving the study assistant. The Class app does not currently use student data to train models. That choice is stored and can be changed or deleted.

• Questions you answer, the option you chose, whether it matched the key, confidence, and time spent.
• Quiz sessions, study sessions, daily plans, and the spaced-repetition review queue.
• Flashcards created from your study, including the front and back text.
• Scripted clinical-case practice you start inside the app. These are study cases, not records of a real patient.
• Messages you send to the study assistant, and the assistant’s replies.
• Lessons or decks you save.
• Streaks, experience points, and leaderboard totals. The leaderboard shows a display name taken from the part of your email before @, plus scores. It does not show your full email address.
• Usage counts used to apply daily study limits on the website.

• If you turn on reminders in the browser app, we store the Web Push endpoint, its encryption keys, a user-agent string, and the hour you picked.
• The iOS and Android apps schedule that reminder on the device with local notifications. They do not register Web Push. The schedule stays on the device.
• The native apps also store a small cache of questions and flashcards you recently studied so you can review them without a connection. That cache stays on the device.
• The website service worker delivers push notifications only. It does not cache the app for offline use.

• IP address, in short-lived rate-limit counters, to slow abuse of signup, invites, and study actions.
• Product events such as signup and quiz completion, plus campaign parameters (utm source, medium, campaign, content) when a link includes them.
• Error monitoring, product analytics, and AI quality tracing may be used to keep the service working.

Some study features send text, and in one case audio, to model providers so they can draft an explanation, a flashcard, a lesson, a practice case, or a transcription. We send the content needed for that feature, not a separate advertising profile.

• OpenAI: text generation, and embeddings used to search study material.
• Groq: speech-to-text when you record audio for a lesson, and a consistency check that compares model outputs.
• Cohere: ranking of the passages retrieved for an explanation.
• Cortexa study assistant: answers in the study assistant. It receives your message and account id.

Generated text can be wrong. It is study support, not a clinical conclusion.

• To create and secure your account and to apply the invite or waitlist rule.
• To run the study loop: questions, flashcards, plans, reminders, and progress.
• To answer you inside the study assistant.
• To measure whether the product is working, fix failures, and limit abuse.
• To honor a deletion request.

We do not sell personal data. The apps do not show third-party ads. At launch the iOS and Android apps do not sell subscriptions or consumable content.

We share data with the processors that host or run the product: Supabase (account and database), Vercel (hosting), and the AI providers listed above when a feature is used. Sentry, PostHog, and Langfuse may be used for error monitoring, product analytics, and AI quality tracing. App stores receive the usual install and crash data under their own terms when you download the app.

Some of these providers process data outside Brazil, including in the United States. Where Brazilian law requires a transfer mechanism, we rely on the contracts and safeguards those providers offer.

We keep account and personal data while your account is open. After you ask us to delete the account, we delete the account and the personal data tied to it within 30 days. Backups that still contain that data are purged within 90 days.

The shared question bank is not your personal data and is not deleted with your account. Device caches (offline questions, local reminders) are removed when you delete the app or clear the WebView data; a server deletion cannot reach them.

• Delete the account in the app under Settings, or follow https://class.docminds.ai/account-deletion, or email i@cortexa.social from the account address.
• Turn reminders off in the app. On the website that removes the push subscription. In the native apps that cancels the local notification.
• Change or withdraw the optional training choice in your profile. Withdrawing it stops future use. It does not, by itself, delete the rest of the account.
• Email us to access or correct account data.

DocMinds Class is intended for adults 18 and older (medical students and graduates). We do not knowingly create accounts for anyone under 18.

If we change this policy, we will update the effective date on this page. Continued use after the new date means the updated policy applies to new processing.