Privacy notice

This notice covers the AnatoQuest mobile app, version 1.0.0 and later, and takes effect on October 5, 2026. The data controller is Jorge Montero, developer of AnatoQuest, under Mexico’s Federal Law on the Protection of Personal Data Held by Private Parties (LFPDPPP).

Who is responsible for your personal data

AnatoQuest is a radiological anatomy study app aimed mainly at health care students and professionals. It is built and operated by Jorge Montero as an independent developer (“we”, “the controller”), who is responsible for the personal data collected through the app under the LFPDPPP and its regulations.

Data we collect

AnatoQuest is designed to collect as little data as possible. There are three ways in: Sign in with Apple, Sign in with Google, or an email and password account created inside the app. Sign in with Apple is offered only on iPhone; on Android you sign in with Google or with an email and password.

• Identity and contact: a unique user ID, your name and email address, or the private relay address Apple generates when you hide your real one. With Apple or Google we receive these from that provider; with an email and password account you supply the address yourself. We never see or store your password: it is held, encrypted, by the authentication service, Google’s Firebase Authentication.
• In-app activity: study progress (experience, streak and progress in each quiz), quiz answers and results, your favorite quizzes and the ones you save to your library, and the anatomy modules you open. These are generated as you use the app.
• Technical and diagnostic data: device model, operating system version, an app installation identifier, the IP address the app connects from and reports of errors the app did not handle, whether or not the app closes, including its technical state and short diagnostic notes. Those reports include no name, email address or password. These come from your device or reach our providers as they serve each request. The app also checks with Firebase App Check that it is a genuine copy of AnatoQuest; on Apple devices it uses App Attest and, when App Attest is unavailable, DeviceCheck, both Apple technologies. On Android devices it uses Google’s Play Integrity API instead. That check carries neither your name nor your email address.
• Purchases: your App Store purchase history and subscription status, including products, transactions, dates, and renewal or expiration; on Android, the same data comes from Google Play instead of the App Store. RevenueCat, a subscription-management service, receives this data through its SDK in the app, along with the app user ID (the same AnatoQuest account identifier described above) and technical device data such as the operating system version, locale, and currency.

Student subscription

A free sample of quizzes remains available. To open other quizzes, you can purchase the auto-renewable Student subscription for a monthly, quarterly, or annual period through the App Store.

Apple processes the payment and purchase data as part of the App Store under its own privacy terms and for its own purposes. AnatoQuest never receives your card or bank account details. Apple shows the price, period, and renewal before purchase. The subscription renews automatically unless you cancel it at least 24 hours before the period ends in your Apple ID subscription settings.

On Android, you purchase through Google Play Billing. Google processes the payment and purchase data as part of Google Play under its own terms and privacy policy, and for its own purposes. AnatoQuest never receives your card or bank account details. Google Play shows the price, period, and renewal before purchase. The subscription renews automatically until you cancel it in Google Play, under Payments and subscriptions, then Subscriptions, before the renewal date.

RevenueCat also receives your account’s display name, if it has one, and the Firebase Analytics installation identifier, linked to your AnatoQuest account identifier. RevenueCat uses the purchase and subscription data to validate purchases, detect fraud, and tell anatoquest-api whether your subscription is active. In addition to showing us figures in aggregated reports, RevenueCat lets us view each customer’s purchase and subscription history by their account identifier, which we use for support and troubleshooting. RevenueCat does not use them for advertising.

Where your data is kept

Your data is kept in different places depending on its kind:

• Your sign-in account (user ID, email address, the name the provider sends and, if you use an email and password, the encrypted password) is kept by Google’s Firebase Authentication.
• Your profile (email address and the name you choose in the app), your favorites and your library are kept in Cloud Firestore, Firebase’s database.
• Your study progress (experience, streak, progress in each quiz and the results the app sends when you finish a quiz) is kept by anatoquest-api, AnatoQuest’s own service. It runs on Google Cloud (Cloud Run) and stores this data in a PostgreSQL database.
• Your plan (whether you have a subscription and until when) is kept with your account in Firebase’s Cloud Firestore. anatoquest-api reads it to decide which quizzes you can open.
• Quiz images are downloaded from Cloudflare R2. Those downloads carry neither your account nor your progress.

Optional leaderboard in versions before 1.1

In versions before 1.1, you could choose to join the leaderboard. If you did, we kept the alias you chose and your position, experience points and level, which other leaderboard users could see. Joining was optional.

Depending on the version, that row was kept in Firebase’s Cloud Firestore (in the earliest versions) or in anatoquest-api, AnatoQuest’s own service.

Version 1.1 no longer shows the leaderboard or allows anyone to join or leave it. If you published a row earlier, it remains stored on our servers and its game data continues to be updated when you complete quizzes. You can remove it by deleting your account or by writing to the contact email address to exercise your ARCO cancellation right.

Usage analytics and crash reports

The app uses two Google services solely for AnatoQuest’s internal analysis: to understand how the app is used, improve its content and features, know whether the subscription works, and fix errors.

• Firebase Analytics records usage data with a random app installation identifier, not your account identifier. It records when you open, finish or abandon a quiz, its identifier and, when you finish it, the number of correct answers and questions; it also records whether each answer was right or wrong, but never its content, and when you open and finish the free quiz of the week. It records whether sign-in succeeded or failed and through which provider (Apple, Google or email); on failure, it receives a generic error code, never your email address. For subscriptions, it records when the subscription screen is shown and from where, which plan you choose, whether a purchase was completed, cancelled, left pending or failed —in that case, with a generic error category—, whether a restoration succeeded, and whether an offer was shown; it does not record the price, a paid product identifiable to a person, or your account identifier. It also records whether you start, finish or skip the introduction and tutorials, and which view you choose in the catalogue. The SDK automatically records the first open, sessions and their duration, screens, device model, operating system and app versions, language, and approximate country or region. No event includes your name, email address, password, answer content or price.
• Firebase Crashlytics collects reports of errors the app did not handle, whether or not the app closes, so they can be fixed. They include the technical state and short diagnostic notes, but no name, email address or password.

We do not use this data for advertising, we show no ads, and we do not track your activity in other companies’ apps or websites. The app does not ask for Apple’s tracking permission and, without it, iOS does not let it access your device’s advertising identifier. On Android, Firebase Analytics may read the Android advertising ID of your device. We use it only for the internal analysis described above, never to show or target ads, and you can reset or delete it in your device’s settings under Privacy and Ads. We do not sell your data or share it with advertisers or data brokers. Google processes this data to provide us with the analytics service and, under its own terms and our Google Analytics account settings, may also use it to maintain and improve its services.

How to withdraw analytics

At any time, you can ask us to stop using your usage data for internal analysis and to delete the data already recorded. Write to the contact email address from the email address on your account. We locate the data through the installation identifier linked to your account and delete it from Firebase Analytics; we will respond within the period stated under “ARCO rights and how to exercise them”. While the app remains installed, it may continue to record events; those events are also excluded from our internal analysis and deleted. Only uninstalling the app stops the data from being sent; deleting your account does not, because analytics does not depend on your session. You can decline or withdraw analytics without affecting your access to the service.

Why we process your data

We use your personal data for the following purposes, all of them necessary to run the service:

• Create and maintain your account, and let you sign in securely.
• Save your progress, quiz history and results across devices.
• Validate your purchases, detect fraud, determine whether your subscription is active, and decide which quizzes you can open based on your plan.
• Provide technical support and answer your questions when you contact us.
• Detect and fix errors or technical failures in the app.

As an additional purpose that is not necessary for the service, we use usage data to analyze internally how the app is used and improve its content and the app itself. You can decline or withdraw this purpose at any time as explained under “How to withdraw analytics”, without affecting your access to the service.

We do not use your data for marketing, advertising or sales prospecting, and we do not use it to make automated decisions that affect you legally.

Legal basis and consent

By creating your account or signing in, whether with Apple, with Google or with an email address and password, and by using AnatoQuest, you consent to the processing of your personal data for the purposes described in this notice. You can withdraw that consent at any time by deleting your account from within the app, as explained under “Deleting your account”, or by contacting us directly. You can specifically withdraw internal analytics as explained under “How to withdraw analytics”, without losing access to the service.

Who we share your information with

We do not sell or rent your personal data. We share information only in these cases:

• Authentication providers, Apple and Google: to verify your identity when you sign in. They process your data under their own privacy policies.
• Apple, through the App Store: processes the payment and purchase data as part of the App Store under its own privacy terms and for its own purposes. It shows you the price, period, and renewal before purchase, and manages billing for your subscription. AnatoQuest never receives your card or bank account details.
• Google, through Google Play: on Android, processes the payment and purchase data as part of Google Play under its own terms and privacy policy and for its own purposes. It shows you the price, period, and renewal before purchase, and manages billing for your subscription. AnatoQuest never receives your card or bank account details.
• RevenueCat: acts as a processor to manage the subscription. Through its SDK in the app, it receives your AnatoQuest account identifier, your account’s display name if it has one, and the Firebase Analytics installation identifier, both linked to your AnatoQuest account identifier, as well as your App Store purchase history, your subscription status, and technical device data such as the operating system version, locale, and currency. It uses this data to validate purchases, detect fraud, and tell anatoquest-api whether your subscription is active. In addition to showing us figures in aggregated reports, it lets us view each customer’s purchase and subscription history by their account identifier, which we use for support and troubleshooting. It does not use them for advertising.
• Google, through Firebase: authenticates your sign-ins and keeps your sign-in account (Firebase Authentication), keeps your profile, favorites and library (Cloud Firestore), checks that the app is genuine (Firebase App Check), tells the app the minimum version it must run (Firebase Remote Config), and provides the analytics and crash reporting described above.
• Google, through Google Cloud: runs anatoquest-api, the service that keeps your study progress.
• Cloudflare: delivers the quiz images (Cloudflare R2). It receives your device’s IP address when you download them, but not your account or your progress.
• Other AnatoQuest users: in versions before 1.1, only students who chose to join the leaderboard shared their alias, position, experience points and level with other users.

RevenueCat, Google through Firebase and Google Cloud, and Cloudflare act as processors on our behalf and have no commercial access to your data. None of them uses it for advertising; the exception to own purposes is Google Analytics, which, under Google’s terms and our account settings, may use usage data to maintain and improve its services, as explained in “Usage analytics and crash reports”.

• Competent authorities: where there is a valid legal request from a Mexican or foreign authority with applicable jurisdiction.

Security and retention

We apply reasonable technical and organizational measures to protect your information, including encryption in transit (HTTPS/TLS) between the app and our servers. We keep your data for as long as your account stays active. If you delete your account, your personal data and progress are removed from our systems as described under “Deleting your account”, except for information we are legally required to keep.

Deleting your account

You can delete your account straight from the app, on the Perfil (Profile) tab, with “Eliminar mi cuenta” (Delete my account), without contacting support. When you delete your account:

• Your progress, quiz results, favorites, library, profile data and, if you had one, your row in the leaderboard are erased from our servers.
• Your sign-in account is destroyed, so those credentials cease to exist. If you used an email and password, the password is deleted along with the account.
• If you signed in with Apple, we try to revoke the authorization token if we still hold an authorization code that allows it. Account deletion continues even if revocation cannot be attempted or fails. If AnatoQuest still appears among the apps using Sign in with Apple, you can remove it manually in your Apple ID settings under Sign in with Apple.
• If you signed in with Google, destroying the account ends the app’s access to your Google data. You can also withdraw the permission you granted from your Google account’s security settings.

Deleting your account does not cancel your App Store subscription. Cancel it first in your Apple ID subscription settings because Apple manages billing.

Deleting your account does not cancel your Google Play subscription either. If you subscribed on Android, cancel it first in Google Play, under Payments and subscriptions, then Subscriptions, because Google manages billing.

Completing this across internal backups can take up to 30 calendar days, although access to the account is disabled immediately.

ARCO rights and how to exercise them

As the owner of your personal data, you have the right to Access it, Rectify it if it is inaccurate, Cancel its use when you believe it is no longer needed for the purposes that justified processing it, and Oppose its processing for specific purposes. Mexican law calls these ARCO rights.

To exercise any of them, write to the email address in the contact section, stating which right you want to exercise and the information we need to identify your account. You oppose internal analytics in the same way, as explained under “How to withdraw analytics”. We will answer within 20 business days, as required by the LFPDPPP.

Children

AnatoQuest is meant for health care students and professionals, who are generally adults. We do not knowingly target the app at children under 13 or deliberately collect data from that age group. If you have reason to believe a child under 13 has given us personal data without the required consent, contact us so we can delete it.

Changes to this notice

We may update this privacy notice to reflect changes in the app or in applicable law. We will publish any relevant change on this page, along with the new effective date. We recommend checking back from time to time.

Contact

If you have questions about this privacy notice or about how we handle your data, or you want to exercise your ARCO rights, write to Jorge Montero, the person responsible for AnatoQuest, at A01172280@icloud.com.