Privacy Policy

At HyperYield ("we," "us," or "our"), operated by Sahil Pradhan T/A HyperYield, we are committed to protecting your privacy. This Privacy Policy explains how we handle information when you use the ClozeMD desktop application, its online generation service, and the ClozeMD website (together, the "Service").

1. Study Materials and Local Anki Data

When you request AI generation, your notes and other study material are sent to HyperYield's server-side generation service and then to Google Gemini to generate facts or flashcards. We process that content only to provide the requested generation.

We do not intentionally retain study materials, generated facts, or flashcards in our application databases, analytics systems, or routine operational logs. Anki synchronization occurs locally between ClozeMD and your installed Anki desktop app through AnkiConnect. We do not proxy that local sync.

Do not include patient-identifiable information or other sensitive personal information in study material submitted for AI generation. The Service is a study aid, not a clinical record system.

2. Information We Process

A. Licensing and Activation

When you purchase or activate a subscription, we and Lemon Squeezy may process license, subscription, activation-instance, product, and payment-status information. Lemon Squeezy may process your email address and payment information as merchant of record. We do not receive or store your payment card details.

B. Service and Usage Analytics

We process privacy-minimized service metadata to operate, secure, measure, and improve the Service. This can include:

• A pseudonymous service identifier derived with a secret key from a license or installation identifier
• Plan, platform, app version, build, request, and service-version metadata
• Counts, character lengths, token usage, provider/model, latency, and estimated AI cost
• Approximate country and continent derived from network data for analytics only

We do not intentionally include study content, raw license keys, raw installation identifiers, email addresses, or raw IP addresses in application analytics.

For network delivery and operations, Google Cloud infrastructure and Cloud Logging may transiently process raw IP addresses. We do not use IP addresses or IP-derived geography for authentication, entitlement decisions, quotas, or security enforcement. Country and continent analytics are approximate and may be affected by relays, VPNs, or forged forwarding headers.

C. Feedback

If you submit in-app feedback, we process the feedback message, category, and any contact or diagnostic information that you choose to include. Do not include study material, patient information, license keys, or other sensitive information in feedback.

D. Website Analytics

The ClozeMD website uses Vercel Analytics to measure site performance and aggregate visits. Website analytics may include technical browser, device, event, and approximate location information as provided by Vercel.

3. Why We Process Information

We process information to provide AI generation, maintain subscriptions and activation, prevent abuse, investigate reliability and cost issues, respond to feedback, meet legal obligations, and understand aggregate Service use.

4. Service Providers

We use the following service providers where applicable:

• Google Cloud and Firebase: server-side generation, Firestore, Cloud Logging, BigQuery, and related infrastructure
• Google Gemini: AI generation requested by you
• Lemon Squeezy: merchant-of-record, subscription, license, and payment processing
• Vercel: website hosting and website analytics

These providers process information under their own terms and privacy practices. Information may be processed in countries outside your own.

5. Retention

We retain information only for as long as needed for the purposes described above, subject to legal, tax, security, and backup requirements. Our service retention policy is:

• Application analytics metadata: up to 13 months
• Routine operational Cloud Logging: up to 30 days
• Feedback: up to 12 months
• License, payment-status, and required business records: for the subscription relationship and as required by law

Study content is processed transiently for generation and is not intentionally retained in the systems described above. If you include study content in voluntary feedback, it may be retained with that feedback until deleted under the feedback retention policy.

6. Data Security

We use HTTPS, access controls, secret management, and technical safeguards designed to protect the Service. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

7. Your Rights

Depending on your location, you may have rights to access, correct, delete, restrict, or object to certain processing of your personal information. You can also ask questions about this policy or request deletion of information we control by contacting us below. Local Anki data remains under your control.

8. Changes to This Policy

We may update this policy from time to time. We will notify you of any material changes via the Software or our website.

9. Contact Us

If you have any questions about this Privacy Policy, please contact:

Sahil Pradhan T/A HyperYield
Email: support@clozemd.com