Privacy Policy

Last updated: July 28, 2026

This Privacy Policy explains how Noah Howard ("we," "us," or "our"), operating EMS Brain at emsbrain.com, collects, uses, and protects your information. By using EMS Brain, you agree to this policy.

1. Information We Collect

Information you provide:

• First and last name
• Email address
• Password (stored as a secure hash — we never see it in plain text)
• Payment information (handled entirely by Stripe — we never store card details)
• Personalization requests you submit

Information generated by your use of the Service:

• Quiz answers, accuracy rates, and category performance
• Flashcard review history and missed items
• Scenario attempt records
• AI Tutor conversation messages
• Daily study activity dates

2. How We Use Your Information

• To operate and provide the Service
• To process payments and manage your subscription
• To personalize your study experience (e.g., tracking weak categories)
• To send transactional emails (account confirmation, password reset)
• To respond to support requests
• To monitor for abuse and maintain platform security

We do not sell your personal information. We do not send marketing emails without your consent.

3. Third-Party Services

We use the following third-party services to operate EMS Brain:

• Supabase — database and authentication hosting. Your account data and study statistics are stored on Supabase servers.
• Stripe — payment processing. Stripe handles all payment data and is PCI-DSS compliant.
• Anthropic — powers the AI Tutor. Messages you send to the AI Tutor are processed by Anthropic's API.
• Resend — transactional email delivery (account confirmation, password reset).
• Vercel — application hosting.

Each of these services has its own privacy policy governing how they handle data.

4. Data Retention

We retain your account and study data for as long as your account is active. If you delete your account, your data will be removed within 30 days, except where retention is required by law or for legitimate business purposes (e.g., billing records).

5. Your Rights

You have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate data
• Request deletion of your account and data
• Export your data

To exercise any of these rights, email us at support@emsbrain.com.

6. Cookies

EMS Brain uses cookies and local storage to maintain your login session and remember your preferences (such as dark/light mode). We do not use advertising or tracking cookies.

7. Children's Privacy

EMS Brain is not directed at children under 13. We do not knowingly collect personal information from anyone under 13. If you believe a child has provided us with their information, please contact us and we will delete it promptly.

8. Security

We use industry-standard security practices including encrypted connections (HTTPS), hashed passwords, and access controls. No system is completely secure, and we cannot guarantee absolute security of your data.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We'll notify you of material changes by email or through the Service. Continued use after changes take effect constitutes acceptance of the updated policy.

10. Contact

Questions about this Privacy Policy? Email us at support@emsbrain.com.