Privacy Policy
Last updated: 09/11/2026
1. Who is responsible
The controller of your personal data is AFFORDIT PTY LTD (ABN 92 677 612 618, ACN 677 612 618), New South Wales, Australia, contact anatomyquest.support@gmail.com.
2. What we collect and why
| Data | Why | Basis |
|---|---|---|
| Email address, display name, password (stored only as a salted hash), Google account ID if you use Google sign-in | Create and secure your account, sign you in, contact you about your account | Contract |
| Your progress: levels cleared, scores, XP, rank, streak, settings | Run the Service and sync across your devices | Contract |
| Your personal ID and friend connections | Show you and your friends on each other's leaderboard | Contract |
| Subscription status, plan dates and a customer/subscription ID from Paddle | Unlock voice mode and manage your subscription. Paddle, as merchant of record, collects your payment details and billing address; we do not receive your card number. | Contract, legal obligation |
| Text of how you pronounced anatomical terms (never audio) | Improve recognition for you and, anonymously, for other users | Legitimate interest / your consent when you use voice mode |
| Technical data such as IP address, used briefly for abuse protection (limits on failed sign-in attempts) | Security | Legitimate interest |
We do not sell your data, show ads, or use advertising trackers.
3. Voice and your microphone
Voice mode uses the speech recognition built into your browser. Depending on the browser, your audio may be sent to the browser maker's speech service (for example Google for Chrome) under their privacy policy. Our server never receives audio. It only receives the recognised text of terms you pronounced, and only when you calibrate or the game accepts a variant of a word.
4. Who we share data with
- Cloudflare hosts the website and database.
- Paddle processes payments and acts as merchant of record.
- Google if you choose "Continue with Google".
- Your friends see your display name, rank, XP and completion percentage on the leaderboard once you are connected by personal ID.
- Authorities, where we are legally required to.
Some of these providers may process data outside the EU/EEA under appropriate safeguards (such as standard contractual clauses).
5. Storage on your device
We store a sign-in token and preferences in your browser (session storage and local storage) and cache the app so it loads quickly. We do not use advertising or tracking cookies.
6. How long we keep it
We keep your account data while your account exists. When you ask us to delete your account we remove your profile, progress and friend links. Billing records are kept by Paddle and by us as long as tax law requires. Shared pronunciation text is not linked to you and may remain.
7. Your rights
Under the GDPR you can ask to access, correct, delete, export or restrict the use of your data, object to processing, and withdraw consent. Write to anatomyquest.support@gmail.com. You can complain to your local data protection authority, for example the Bulgarian Commission for Personal Data Protection (cpdp.bg), or to the Office of the Australian Information Commissioner (oaic.gov.au).
8. Children
The Service is for people aged 16 and over.
9. Security
Passwords are hashed, traffic is encrypted, and sign-in attempts are rate limited. No system is perfectly secure, so please use a strong, unique password.
10. Changes
If we change this policy in a meaningful way we will tell you in the app or by email.