Privacy Policy

• Account data — the email and password you sign up with, your display name, and an avatar you pick from a preset set.
• Study activity — the course and area you’ve selected, your answers, scores, streaks, mock-exam attempts, saved flashcards, and any personal notes you write inside the app.
• Files you upload — if you use My Reviewer, the file you upload. We read the text out of it and then delete the original file; the text, and the questions and flashcards written from it, stay private to your account and are never added to the shared question bank. Deleting the file in the app deletes them. We may compare the topic headings in your file with our course outlines to find topics we are missing; nothing from your file is copied into the app or shown to anyone else.
• Plan status — whether your account is on the free or a paid plan, and when a paid plan expires. Once payments are live, payment details (card or e-wallet information) are handled entirely by our payment processor, PayMongo — we do not receive or store your card number.
• Technical data — standard request logs kept by our hosting provider, and a one-time human-verification check (Cloudflare Turnstile) run at sign-up to block automated abuse.
• Website visits — we count visits to this website so we know how many people find it and which pages they read. No cookie is set and no advertising or third-party analytics service is involved. Your IP address is used only to work out a scrambled code that lets us count you once per day; it is not stored, and the code cannot be turned back into your IP address or linked to you across days. We also record the website that linked you here (the site, not the page or the search term).

We do not collect more than what’s needed to run the Service. We don’t buy data about you from third parties, and we don’t sell your data to anyone.

• To create and secure your account, and let you log back in;
• To save your progress and let you pick up where you left off;
• To decide what your account is entitled to (free vs. paid access);
• To generate new practice questions tailored to the area you’re studying;
• To turn a file you upload into questions and flashcards for you;
• To prevent abuse of free-tier limits and keep the Service reliable.

We use a small number of service providers to run Mondspace. Each only receives what it needs to do its job:

• Supabase — hosts our database and handles account authentication.
• Vercel — hosts the application itself.
• DeepSeek — the AI provider that generates new practice questions and explanations from the exam syllabus. The area and topic you’re studying is sent to generate a question; your account identity is not included in that request. If you use My Reviewer, the text of your uploaded file is sent to organise it into topics and write questions and flashcards from it.
• TypeSafe — an AI model that checks the answers you type in Identification practice against the correct answer. It receives the question and your answer; your account identity is not included.
• PayMongo — processes payments for paid plans directly; we never see or store your full card or e-wallet details.

We don’t share your data with anyone else, and we don’t use it for advertising.

What other reviewers can see. Rankings and username search show your display name, avatar, level, Study XP, how many questions you’ve answered, the course you’re reviewing for, your featured badges, and your Mastery Index once you qualify for a course board. Friends you accept also see the badges and Study League milestones you earn. Your email, your answers themselves, notes and uploaded files are never shown to anyone. You can turn off sharing your achievements with friends and hide yourself from search in the app’s Feed settings.

Messages. Friends you accept can send you private text messages. A message is visible to the person who sent it and the person it was sent to, and is stored until its sender deletes it or an account is deleted. We don’t read messages as part of normal operation; we may look at a message that someone reports. Blocking someone ends the chat and stops them from sending you friend requests.

We keep your account and study data for as long as your account exists. If you stop using Mondspace, your data simply stays as-is until you ask us to delete it (see below) — we don’t currently auto-delete inactive accounts.

Under the Data Privacy Act, you can ask to see what we hold about you, correct it, or have it deleted. Mondspace doesn’t yet have a self-service delete button in the app, so for now:

Email monds@mondspace.app from the address on your account and tell us what you’d like (a copy of your data, a correction, or full deletion). We’ll confirm your identity, then act on the request — deletions are completed within 30 days. Deleting your account removes your profile, saved notes, and progress history; it doesn’t retroactively remove practice questions you may have contributed to the shared pool, since those aren’t personal data once separated from your account.

Passwords are handled by Supabase Auth and are never stored in plain text. Access to the underlying database is restricted to the service itself. No system is perfectly secure, but we don’t take shortcuts with how account data is stored or transmitted.

Mondspace is built for people preparing for professional licensure exams and isn’t directed at children. If you believe a minor has created an account without appropriate consent, contact us and we’ll remove it.

If this policy changes in a way that matters, we’ll update the date at the top of this page. Significant changes affecting how your existing data is used will be flagged inside the app.

Questions, requests, or concerns about your data: monds@mondspace.app.