Privacy policy

Last updated 14 November 2026

This policy explains what personal information EasyBPT collects, why, who it is shared with and the choices you have. EasyBPT is run by an Australian sole trader (ABN 18 818 624 996). We handle personal information in line with the Australian Privacy Principles. Contact us about privacy at angusdevapps@gmail.com.

What we collect

• Account details: your email address. If you sign in with Google, we also receive your name, your Google account identifier and your profile picture link.
• Study data: the questions you answer and your answers, your flashcard reviews and schedule, the notes you mark as read, your highlights, personal notes and note groups, and any pictures you add to your personal notes.
• Feedback: what you write when you send feedback or report an error, the page you sent it from, your browser and device type, and an email address if you give one.
• Sign-in sessions: when you sign in, we record the session's IP address and browser type, to keep your account secure.
• Payments: when you buy a pass, our payment processor Stripe collects your card details. We receive your email address, what you bought, the amount, and a payment reference. We never see or store your card number.

We don't collect information about your health, and we don't ask for information about patients. Please don't include patient details in feedback, personal notes or pictures.

Why we collect it

• To sign you in and keep your account secure.
• To save your progress, schedule your flashcards and show your study statistics.
• To check whether you have a pass and give access to what it includes.
• To reply to feedback, fix errors in the content and improve EasyBPT.
• To keep the payment and tax records the law requires.

We don't sell your information, use it for advertising or share it with advertisers. We only send emails you need, such as sign-in links, receipts and notice of important changes to our terms. We won't send you marketing emails unless you agree to them, and every marketing email would have a way to unsubscribe.

Cookies and browser storage

We use one cookie, which keeps you signed in. Your light or dark mode choice is saved in your browser's local storage. If you save notes for offline reading, copies are kept in your browser's storage on that device, and signing out removes them. We don't use advertising or tracking cookies, and we don't currently use analytics tools. If we add analytics, we will update this policy first.

Services we use

We use these providers to run EasyBPT. Each one handles your information only to provide its service to us.

• Cloudflare hosts the website, stores account and study data (including pictures you add to personal notes), and sends our emails, such as sign-in links. Our database is located in Cloudflare's Oceania region; to deliver an email, Cloudflare may process your email address outside Australia.
• Google handles sign-in if you choose “Continue with Google”.
• Stripe processes payments for passes.

Some of these companies are based overseas, mainly in the United States, and may process information there or in other countries where they operate. We choose established providers with published security and privacy commitments.

We may also disclose information where the law requires it, for example to comply with a court order.

How long we keep it

• We keep your account and study data while your account is open.
• If you ask us to delete your account, we delete your account and study data within 30 days.
• We keep records of payments for 5 years, because Australian tax law requires it. These records contain your email address and purchase details, not your study data.
• Feedback is kept while it is useful for fixing problems, and deleted with your account if you ask.

Accessing, correcting and deleting your information

You can ask for a copy of the personal information we hold about you, ask us to correct it, or ask us to delete your account by emailing angusdevapps@gmail.com from the email address on your account. We will respond within 30 days. There is no charge.

Security

Information is sent over encrypted connections and stored with access limited to what is needed to run EasyBPT. No system is perfectly secure. If a data breach is likely to cause you serious harm, we will tell you and do what the law requires.

Questions and complaints

If you have a question or complaint about privacy, email angusdevapps@gmail.com. We will reply within 30 days. If you're not happy with our response, you can contact the Office of the Australian Information Commissioner at oaic.gov.au.

Changes to this policy

We will update this policy if what we collect or how we use it changes, and show the date of the latest version at the top. If a change is significant, we will email signed-in users before it takes effect. See also our terms of use.