Privacy Policy for ZOZA

ZOZA is a medical education application published by Ironwood Operations LLC ("we", "us"). This policy explains what information the app collects, why, and what control you have over it.

1. Information you give us

When you create an account, we collect:

• Email address — used to sign in and to recover your account.
• Password — stored only as a cryptographic hash by our authentication provider. We never see or store your actual password.

You may optionally provide:

• First and last name
• Professional role (student, resident, or clinician)
• Degree program (MD/DO, PharmD, NP, PA, or other)
• School or institution
• Expected graduation year

These optional details are used to tailor which study material you are shown, to personalize the app, and to populate leaderboards. You can edit or clear them at any time in Settings.

2. Information created as you use ZOZA

• Questions you answer and whether each answer was correct
• Your mastery level for each question, and when it is next scheduled for review
• Points earned and your daily practice streak
• Your account tier (free or premium)
• Your subscription status: which plan you bought, when the current period ends, whether it is set to renew, and whether that period is a free trial or a normal paid one
• Access codes you redeem

3. Information collected automatically

• Basic technical data required to deliver the service, such as your device connecting to our servers.

ZOZA does not show advertisements, and does not read or collect your device's advertising identifier.

We do not collect your location, contacts, photos, browsing history, or any health information about you. ZOZA contains clinical study material; it does not collect patient data or protected health information.

4. What other users can see

ZOZA includes leaderboards visible to other signed-in users. These display:

• An abbreviated name — your first name and last initial only (for example, "Jordan M."), never your full name
• Your school and degree, if you provided them
• Your points and ranking

Your email address, full name, and graduation year are never shown to other users. If you prefer not to appear, clear your name in Settings.

5. How we use your information

• To provide the app: signing you in, saving progress, scheduling reviews
• To tailor which study sections you see. Degree and professional role are optional and self-declared. If you provide them, we use them to decide which profession-specific sections appear on your dashboard, so that your study time goes to material relevant to your own exams rather than another profession's. This affects only what is offered to you — never your account, your access level, your points, or anything you have already studied — and you can change or clear these details at any time in Settings
• To operate leaderboards and streaks
• To determine whether you have free or premium access, by keeping your subscription status current
• To diagnose problems and improve the app

6. Subscriptions and payments

The app is funded by subscriptions.

What is free. Question of the Day is free for everyone, every day, with no subscription.

Subscriptions. Everything else in the app requires a subscription. Plans are sold through the Apple App Store at $10.00 per month, $27.00 for three months, or $99.00 per year, and renew automatically at the price shown until you cancel.

The free trial. Each plan starts with Apple's three-day introductory free trial if you are eligible for it. It is a normal purchase: you choose a plan and confirm it with your Apple ID, a payment method is required, Apple charges nothing for the first three days, and the subscription bills automatically on the fourth day unless you cancel before then. Apple owns the trial end to end — eligibility (one per Apple ID per subscription group), the charge on day four, and cancellation. We store nothing about whether you are eligible for it.

What we store. For any subscription period, trial or paid, we keep the same few fields: which product you bought, when the current period ends, whether it is set to renew, and whether that period is a free trial or a normal paid one. That is enough to know whether to unlock the app for you, and no more.

We never see or handle your payment details. Apple processes every payment and tells our billing provider, RevenueCat, whether your subscription is active; RevenueCat tells our servers. RevenueCat receives an identifier for your account and your purchase status — not your name, email address or study data. Card numbers, billing addresses and Apple ID credentials never reach us.

Cancelling. Cancel at any time in your Apple ID subscription settings. Cancelling during the free trial means you are never charged, and either way your access runs to the end of the period you are in. Refunds are handled by Apple. We cannot cancel or refund an App Store subscription on your behalf.

We do not sell or share your personal information. Under Settings → Privacy you will find a Do Not Sell or Share My Personal Information control. Nothing is sold or shared with anyone today, and the control is there so that your choice is recorded, with the date it was made, and applies from that point onward across every device you sign in on. It also means that if this ever changed, your existing preference would already be on file rather than starting from scratch.

We do not share your quiz answers or performance in a way that identifies you personally.

7. Service providers

We rely on these providers, who process data on our behalf:

• Supabase — database hosting and authentication. Stores your account and study data.
• RevenueCat — subscription management. Receives an identifier for your account and your purchase status from the App Store. It does not receive your name, email address or study data.
• Apple — payment processing and subscription billing for in-app purchases, under Apple's own privacy policy.
• Expo (Expo Application Services) — application builds and delivery.

8. Storage and security

• Authentication tokens are stored in your device's secure storage — the iOS Keychain or the Android Keystore.
• Data in transit is encrypted using HTTPS.
• Access to stored data is restricted per-account by database security policies, so one account cannot read another's records.

No system is perfectly secure, and we cannot guarantee absolute security.

9. Offline data on your device

If you lose connectivity mid-session, answers are stored on your device and sent to our servers when you reconnect. This queue is removed once submitted, and when you delete your account.

10. Retention and deletion

We keep your information while your account exists.

You can delete your account at any time from Settings → Delete Account. Deletion is immediate and permanent. It removes your profile, study history, points, leaderboard standing, and login credentials. It cannot be undone and nothing can be restored.

If you cannot access the app, you may request deletion through the contact form. Please use the email address associated with your account so we can identify it.

11. Age requirements

ZOZA is intended for healthcare students and licensed professionals. The app is for adults aged 18 and over. It is listed for an adult audience on the app stores, and where a store offers controls that restrict downloads by minors, we use them.

We do not knowingly collect personal information from anyone under 18.

Separately, and consistent with the Children's Online Privacy Protection Act (COPPA), we do not knowingly collect personal information from children under 13. ZOZA is not directed to children, contains no child-directed content, and is not listed in any children's or family category.

If you believe someone under 18 — or a child under 13 — has provided us personal information, contact us using the details in section 15. We will delete the account and its associated data promptly.

12. Your rights

Depending on where you live, you may have the right to access, correct, or delete your personal information, or to object to certain processing. You can access and correct most information directly in Settings, and delete everything using the account deletion described above. For anything else, contact us.

13. Medical disclaimer

ZOZA is an educational study tool. Its content is for exam preparation and learning only, and is not medical advice. It must not be used to diagnose or treat any patient. Always rely on current clinical guidelines and your own professional judgment.

14. Changes to this policy

We may update this policy. When we do, we will revise the "Last updated" date above, and the current version will always be available in the app under Settings → Privacy Policy. Significant changes will be brought to your attention in the app.

15. Contact

Questions about this policy or your data:

Ironwood Operations LLC
Contact form: ironwoodoperationsllc.com