Privacy Policy

Last updated 10 June 2026

This Privacy Policy explains how Mobius ("we", "us"), operated by [Legal entity name], collects, uses, and shares information when you use our MCAT study application. We try to collect only what we need to run the service.

1. Information we collect

Account infoYour name and email address, provided through Google sign-in when you create an account.
Study dataYour drill attempts, the questions you answer, the gaps (misconceptions) we track for you, and the tutoring conversations you have in the app.
Content you submitQuestions, text, or images you choose to submit to be classified, drilled, or banked.
Usage dataBasic logs needed to operate the service, such as requests, timestamps, and limited technical metadata.
Payment dataIf you subscribe, your payment is processed by Stripe. We receive your subscription status and a customer identifier. We do not receive or store your full card number.

2. How we use information

We do not sell your personal information.

3. AI processing

To generate questions, explanations, and tutoring replies, we send relevant content (such as a question you submitted, your answer, or your tutoring messages) to third-party AI providers that process it on our behalf. These currently include Anthropic, OpenAI, and Cloudflare (Workers AI). We instruct these providers to process the data only to deliver the service. We do not use your private data to train our own public models, and we rely on the providers' commitments regarding their use of API data.

4. Service providers we share with

GoogleSign-in / authentication.
StripePayment processing and subscription management.
CloudflareHosting, storage (D1 database), and AI inference.
Anthropic, OpenAIAI question generation, grading, and tutoring.

Each provider handles your data under its own privacy policy. We share information with them only as needed to run Mobius. We may also disclose information if required by law or to protect rights and safety.

5. Where data is stored

Your study data is stored in a Cloudflare D1 database. Data may be processed in the United States and other countries where our providers operate. By using Mobius you understand your information may be transferred to and processed in those locations.

6. Your choices and rights

7. Cookies and sessions

We use a small number of strictly necessary cookies to keep you signed in and to operate the service. We do not use third-party advertising cookies.

8. Data retention

We keep your information for as long as your account is active or as needed to provide the service, comply with legal obligations, resolve disputes, and enforce agreements. When you delete your account, we delete or de-identify your personal data within a reasonable period, except where retention is required by law.

9. Security

We use reasonable technical and organizational measures to protect your information. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

10. Children

Mobius is not directed to children under 16, and we do not knowingly collect personal information from them. If you believe a child has provided us information, contact us and we will delete it.

11. Changes to this policy

We may update this policy from time to time. We will update the date above and, for material changes, provide additional notice where appropriate.

12. Contact

Questions or requests about your privacy? Email hello@mobiusmcat.com.

This document is a general template and not legal advice. Privacy law (GDPR, CCPA/CPRA, and others) is fact-specific. Have a qualified attorney review and adapt it before relying on it.