Shen Study

Privacy Policy

Last updated: 24 September 2026

Shen Study is a Chinese medicine study app operated by Jack Logan, trading as Shen Study. This policy explains how information is handled when you visit shenstudy.com or use the app.

Information we collect and why

• Account information. Your email address, account identifier and available profile details help us sign you in, display your account and connect you with your saved study records. Email sign-in also uses your address to send a sign-in link.
• Study information. Case responses, generated feedback, saved cases, favourites, review cards, review history, progress and rewards support the app's learning features. Some information stays in your browser; supported account features also save information on our servers.
• Subscription information. We keep customer and subscription identifiers, plan and payment status to manage access. Stripe collects payment information directly during checkout. Shen Study does not receive or store your full payment-card number.
• Technical and usage information. Hosting logs and analytics can include network and browser information, pages visited, referral sources, feature use, study events and errors. We use these to operate and improve the app, understand usage and investigate problems. Guest-trial controls use a protected identifier derived from your IP address and browser information to enforce trial limits.
• Support messages. If you contact us, we use the information you provide to respond and resolve your request.

Signing in with Google

If you choose Google sign-in, Google provides your account identifier, email address and basic profile information, such as your name and profile image, through Supabase Auth. We use this information to create or authenticate your Shen Study account and display your profile. We do not receive your Google password or request access to your Gmail messages, contacts, calendar or Drive files.

Google account information is handled by our authentication and hosting providers as needed to operate your account. We do not sell Google user data or use it for advertising. You can remove Shen Study's access through your Google account connections. Removing access does not by itself delete an existing Shen Study account or its study records.

Service providers and AI processing

We use Supabase for authentication and data storage, Netlify for hosting and server functions, Stripe for payments, Google for Google sign-in and Google Analytics, and Anthropic for AI-generated cases and feedback. These providers process information needed for their respective services. AI requests include study prompts, case information and answers needed to produce the requested response. Google sign-in profile information is not required for these AI prompts.

Shen Study is designed for educational practice. Do not enter identifiable patient information or other confidential clinical records into study answers or AI requests.

Our Supabase project is hosted in Sydney, Australia. Other providers may process information in Australia or overseas, including the United States. Their own privacy policies also describe how they handle information: Supabase, Netlify, Stripe, Google and Anthropic. Information may also be disclosed where required by law or necessary to investigate misuse or protect the service.

Cookies and browser storage

The app uses cookies and browser storage for sign-in sessions, guest-trial status, preferences, study data and offline caching. Google Analytics uses cookies and similar identifiers to measure visits and interactions. You can manage cookies and site data in your browser, or use Google's Analytics opt-out browser add-on. Clearing site data can sign you out and remove study information saved only on that device; it does not delete server-side account records.

Storage, retention and security

We use HTTPS and account access controls to protect information. No online service can guarantee complete security. Account and study records are kept to provide your account and learning history. There is currently no automatic deletion schedule for inactive accounts. Security, transaction and support records may be retained where needed to resolve issues, prevent abuse or meet legal obligations.

Your choices and requests

You can contact us to request access to, correction of or deletion of your personal information and account. We may need to verify your identity before acting. Account deletion is handled by request rather than an in-app deletion button. Some records may need to be retained for legal or security reasons, and copies in provider backups may remain until their normal retention periods expire. Cancelling a subscription, signing out and disconnecting Google are separate from an account-deletion request.

Changes to this policy

We will update this page when our practices change and revise the date above. Where a change requires further notice or consent, we will provide it before using information in that new way.