EMS Flashcards App

Privacy Policy

Privacy Policy

Porter Street LLC — EMS Flashcards apps
Effective date: October 1, 2026

This policy explains what information Porter Street LLC ("we", "us") collects through our study apps and our website, how we use it, who we share it with, and the choices you have. We have written it to match how the apps actually work today. If something here is unclear, email us at PorterStreet504@gmail.com.

Apps covered

This policy applies to these apps on the Apple App Store and Google Play:

  • Paramedic Drug List Flashcards

  • Anatomy and Physiology Vocab (App Store) / A & P Flashcards (Google Play)

  • Medical Vocabulary Flashcards

  • Medical Signs and Symptoms

  • Nursing Flashcards

  • Biology 101 Flashcards

The apps are educational study aids. They do not provide medical advice, diagnosis, or treatment, and they are not a substitute for your training, medical direction, or local protocols.

The short version

  • You don't need an account. The apps don't ask for your name, email address, phone number, or contacts.

  • Your built-in study progress, quiz history, and saved decks stay on your device.

  • If you use the AI Study Builder, the text you provide is sent to our AI service and to OpenAI to create flashcards. We don't keep that text on our servers.

  • We use Google Analytics for Firebase to understand how the apps are used. Some analytics, security, and subscription-related data is associated with a device identifier or a random app user identifier for app functionality, diagnostics, fraud prevention, and subscription verification. It is not associated with your name, email address, or other contact details, and Porter Street does not use it for advertising or cross-app tracking.

  • Purchases are handled by Apple or Google. We use RevenueCat to confirm purchases and subscriptions.

  • The apps show no advertising. We do not sell your information, and we do not track you across other companies' apps or websites.

Information we collect and how we use it

1. Text you give the AI Study Builder

When you use the optional AI Study Builder, you can paste text or choose a PDF or TXT file. The app reads the file on your device and sends only the extracted text, not the file itself. The text goes over an encrypted (HTTPS) connection to our AI service, hosted on Google Cloud, together with the number of cards you asked for.

Our service sends the text to OpenAI to generate flashcards and returns the generated cards to your device. We do not store the text you submit on our servers, and we do not log the contents of your requests. The generated cards are held by our service for up to 15 minutes, so that a repeated request can be answered without generating them again; after that they are no longer used and are deleted automatically.

OpenAI processes the text on our behalf under its API data policies. Under those policies, API data is not used to train OpenAI's models by default, and OpenAI may keep it for up to 30 days to monitor for abuse before deleting it.

Please do not enter patient information or other sensitive personal information into the AI Study Builder.

Saved AI decks stay on your device.

2. App usage and diagnostics (Google Analytics for Firebase)

We use Google Analytics for Firebase, a Google service, to understand which features are used and to find and fix problems. It collects:

  • A random app-instance identifier created when the app is installed. On iPhone and iPad, Firebase also reads the app's vendor identifier (IDFV), which is the same for all of our apps on that device. On Android, it may read the Android ID that the system assigns to the app on that device. Neither is the advertising identifier.

  • Events about how the app is used. Examples: screens viewed, study sessions and quizzes started or completed, which built-in terms or cards you open, use of search (the length of a search and which built-in result you chose, not what you typed), AI Study Builder steps and outcomes, paywall views, and purchase or subscription events.

  • Diagnostic events, such as errors and file-import outcomes.

  • Device and app information such as device model, operating system version, app version, language, and country.

  • Approximate location (country, region, or city), which Google derives from your IP address. The apps do not request or use your device's precise location.

This analytics data is associated with the device identifiers described above. It is not linked to your name, email address, or any account, and we do not use it to identify you personally. The apps do not ask for permission to track you and do not collect your device's advertising identifier.

In Google Analytics, event-level data is kept for 2 months and user-level data for 14 months. Aggregated, non-identifying reports may be kept longer.

3. Purchases and subscriptions

Most of the apps are paid downloads; Biology 101 Flashcards is free on Google Play. The optional AI Pro subscriptions (monthly or yearly, where available) unlock continued AI flashcard generation after the free AI generations.

Payments are processed by Apple (App Store) or Google (Google Play). We never receive your payment card details.

We use RevenueCat to confirm purchases and manage subscription status. RevenueCat receives:

  • an anonymous app user ID created by the app;

  • your purchase and subscription history for our apps, with store transaction identifiers;

  • technical information needed to validate purchases.

We use this to unlock features you paid for, restore purchases, and measure how subscriptions perform. Apple's and Google's own privacy policies govern the data they collect when you buy.

4. Fraud prevention and security (Android)

Our Android apps use Google's Play Integrity API. It checks that a request comes from a genuine copy of our app, installed from Google Play, on a genuine Android device. This protects our AI service and our paid content from misuse.

Google processes information about the app (such as its package name, version, and signing certificate) and signals about the device's integrity to produce this check. Our apps may also use Google Play's license check to confirm that the app was obtained from Google Play.

5. Technical logs on our AI service

When the app contacts our AI service, our hosting provider, Google Cloud, automatically records a technical log of the request: your IP address, a device/app user-agent string, the time, and the result. We use these logs for security, abuse prevention (including limiting how many requests one connection can make), and troubleshooting. They are kept for 30 days.

6. When you contact us

If you email us, we receive your email address and whatever you include in your message. We use it only to respond to you and keep it only as long as needed for that purpose.

7. Our website

Our website, emsflashcards.com, is hosted by Squarespace. When you visit it, Squarespace may collect standard technical information (such as your IP address and browser type) and use cookies as described in Squarespace's privacy policy. The website does not collect the app data described above.

8. Security identity for the AI service

When you use the AI Study Builder, the app also sends our AI service a random app user ID (the same pseudonymous ID the app already created for RevenueCat) and a random installation identifier (on iPhone and iPad, a random value kept in the Keychain; on Android, a one-way hash of the app-scoped Android ID). On iPhone and iPad the request is signed using Apple’s App Attest, and on Android it carries a Google Play Integrity check, so that our service can tell the request comes from a genuine copy of our app. On Android, newer versions of the app also include the app’s version number in the request. We use these identifiers only to apply the free AI generation allowance, to limit abuse and fraud, and to confirm with RevenueCat whether a subscription is active before unlocking paid AI features. Because they connect an installation with its subscription status and usage allowance, we treat them as linked to you, even though they do not contain your name, email address, or other contact details. Our service stores them only as keyed one-way hashes, together with usage counters, the app’s attestation key, and the last verified subscription status; the raw identifiers are not written to our logs. These records are deleted automatically: installation records and free-allowance counters 13 months after the installation last used the AI service; the record connecting a subscription to the installations that use it 90 days after the subscription was last verified; rate-limit counters after 2 days; and single-use security tokens within 1 hour. Once a period has ended our service no longer uses the record, and the deletion itself is normally completed within 24 hours. They are not used for advertising or to track you across other companies’ apps or websites, they are not sold, and they are not shared for advertising. RevenueCat receives the app user ID in order to report subscription status, and Apple and Google process the attestation checks.

Information we do not collect

The apps do not collect:

  • your name, email address, or phone number (unless you email us);

  • your contacts, photos, camera or microphone input, or health data;

  • your precise location;

  • your device's advertising identifier;

  • payment card numbers.

The apps do not include advertising.

How we share information

We do not sell your personal information, and we do not share it for targeted advertising. We share information only:

  • With service providers that operate the apps for us:

    • Google: Firebase/Google Analytics, Google Cloud hosting, Play Integrity

    • OpenAI: AI flashcard generation

    • RevenueCat: purchase validation and subscription status

    • Apple and Google: app distribution and payments

    They process information on our behalf or as described in their own privacy policies.

  • If required by law, or to protect the rights, safety, and security of our users, the public, or Porter Street LLC.

  • As part of a business transfer, such as a sale or merger. The information would remain subject to this policy.

Our service providers may process information in the United States and other countries.

How long we keep information

  • Study progress, history, and saved decks: stored on your device until you delete them or the app.

  • AI Study Builder text: our AI service does not keep it after your request completes. Generated cards are held for up to 15 minutes so that a repeated request can be answered, and are then deleted automatically.

  • AI service security identifiers (stored only as keyed one-way hashes): installation records and free-allowance counters, 13 months after the installation last used the AI service; subscription-to-installation records, 90 days after the subscription was last verified; rate-limit counters, 2 days; single-use security tokens, up to 1 hour. Deleted automatically.

  • AI Study Builder text at OpenAI: up to 30 days for abuse monitoring, under OpenAI's policies.

  • Technical request logs (IP address, user-agent): Google Cloud, 30 days.

  • Analytics events: Google Analytics keeps event-level data for 2 months and user-level data for 14 months.

  • Purchase and subscription records: RevenueCat, Apple, and Google keep them as long as needed to provide your purchases and to meet legal and accounting obligations.

  • Emails you send us: kept as long as needed to respond.

Your choices and rights

  • On your device: deleting an app removes its on-device data, including study history and saved AI decks, except copies in device backups you control.

  • Analytics: we don't link analytics data to your name or contact details; it is associated with the device identifiers described in section 2. If you'd like us to delete analytics or subscription records associated with you, email us with the app name and platform (for subscription records, include your store order or transaction ID). We will delete what we can locate. Because the apps don't use accounts, we may not always be able to identify which records are yours.

  • Purchases: manage or cancel subscriptions in your Apple ID settings or the Google Play Store. For payment data held by Apple or Google, contact them directly.

  • Privacy rights: depending on where you live (for example the European Economic Area, the United Kingdom, or California), you may have the right to access, correct, delete, or receive a copy of your personal information, and to object to or restrict certain processing. To make a request, email us; we will respond as required by applicable law. You may also contact your local data protection authority.

  • Why we process your information:

    • to provide the features you request and the purchases you make;

    • for our legitimate interests in keeping the apps secure, preventing fraud, and improving the apps;

    • where the law requires it, with your consent.

Children

The apps are designed for students and professionals learning healthcare and science subjects. They are not directed to children under 13, and we do not knowingly collect personal information from children under 13 (or the minimum age in your country). If you believe a child has provided personal information to us, contact us and we will delete it.

Security

We use encrypted connections (HTTPS) between the apps and our AI service. We limit what we collect and keep, and we rely on established providers to host and process data. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

Changes to this policy

We will post any changes on this page and update the effective date above. If we make a material change to how the apps handle your information, we will also highlight the change on this page before it takes effect.

Contact us

Porter Street LLC
Email: PorterStreet504@gmail.com