Privacy Policy

Calculator data in the browser

Calculator entries are encrypted for temporary browser storage. Signing in alone does not upload them. Recovery data expires 24 hours after the last actual content change and is cleared on logout, account change or deletion. Browser encryption cannot by itself protect against someone using the same browser or malicious code.

Visitor analytics

Only if you allow visitor analytics do we use Google Analytics cookies to measure visits to the About, Plans and Updates pages. The page address without its query string, visit time, device and browser information, approximate location and cookie identifiers may be sent to Google LLC in the United States and processed abroad. Calculator entries, AI conversations and cases, account identifiers and email addresses, and payment information are not sent for visitor analytics. We do not use ad personalization, Google Signals or additional interaction measurement. Analytics cookies are set to expire no later than 60 days after first use, and user- and event-level data is retained for two months. Your analytics choice is stored in this browser for up to 180 days. Open the settings menu with the gear button at the bottom of the left sidebar and turn off “Collect cookies” to withdraw consent at any time; this stops further measurement and removes analytics cookies from your browser. Existing aggregate reports remain subject to Google's retention rules.

How Google processes data

Sign-in and account information

We use Google-verified account identifiers, name, email and profile information for sign-in and account display. Secure cookies maintain local service sessions.

Server-side conversations and cases

Questions, answers, explicitly saved case data and age, summaries, usage and processing status are stored on the server to provide AI features and conversation continuity. Combinations of details may identify an examinee even without a name. Avoid unnecessary names, contact details and identifiers.

Data sent to the AI provider and no-training guarantee

When you use an AI assistant after completing the required sign-up agreement, the messages needed for an answer, the case data you selected, the conversation context and parts of the reference documents are sent to OpenAI. The relevant input is also used for embedding, which powers reference document search. What you send is not used to train AI models. The OpenAI API does not use inputs or outputs to train models (we do not opt in to data sharing), and we set the no-storage option (store: false) on every request; OpenAI abuse-monitoring logs may contain inputs and outputs and are normally retained for up to 30 days. They may be kept longer when required by law or reasonably necessary to protect the service or others. store: false disables response-object storage but does not remove abuse-monitoring logs. We do not use conversations or case data for model training, advertising or sale to third parties either; statistics for improving the service use only aggregate figures that cannot identify a person. Transfers are encrypted with TLS, and data stored on our servers is encrypted at rest by the providers. Deleting your account stops future AI transfers. The free calculator and reference search remain available without an account.

Servers, processors and transfers abroad

Transfers outside Korea: to provide the service we entrust storage and processing to the following providers, each processing in the United States (Virginia and other regions). Google Cloud (server operation: account details, AI conversations, usage records — transferred continuously while you use the service, kept until account deletion), Neon (database and reference search: same items and period, except the free-trial identity digest and usage records retained after account deletion while the trial program operates), OpenAI (AI answer generation and embeddings: messages and case data you enter or select for the AI assistant — transferred per request, retained briefly under the provider's policy), Amazon Web Services (mail delivery: opted-in email addresses — transferred when mail is sent). Transfers use encrypted connections. If you do not want a transfer abroad, use only the free calculator and reference search without signing up; data already transferred can be cleared by deleting your account.

Payment information

Lemon Squeezy receives the identifiers needed to link accounts and transactions and information necessary for payment processing. Assessment results, case data and conversation text are not sent as payment metadata. Payment methods are handled through its official checkout.

Optional update emails

Amazon SES sends a one-time welcome email after sign-up and release updates only to addresses with separate opt-in. Release updates are sent only for minor or major versions, not bugfixes or hotfixes. We process consent, withdrawal, bounce and complaint status without automatically attaching clinical conversations. Unsubscribe through the email link, or open the settings menu with the gear button at the bottom of the left sidebar and turn off “Receive emails”.

Retention and deletion

Conversations, summaries and saved cases remain until you delete them or request account deletion. A deletion request blocks service access and schedules removal of the account and related data seven days later. While it is pending, you can delete immediately or cancel the deletion request. Cancelling deletion does not undo subscription cancellation. Database recovery retention is a separate seven-day period; deletion records are reapplied after recovery. Payment records legally requiring retention are managed separately from clinical conversations. To carry over the remaining free trial after account deletion and re-registration, we retain a keyed digest of the Google sign-in identity's provider identifier together with the trial grant and usage records. On account deletion, we unlink the digest from the account and do not keep a name, email, conversation or case with these records. On re-registration, we use them to determine the remaining trial allowance for the same sign-in identity. We retain these records while offering the free trial and delete them when the trial program ends.

Offline caching and security records

Public screens and references may be cached for offline use. Authentication responses, AI conversations, payment information and export contents are excluded from offline caching. Application logs are restricted to avoid clinical text, email addresses, tokens and secrets. AI reports use only the excerpt you confirm and the handling record.

Access, deletion and contact

Request access, export, deletion or consent withdrawal through account functions or hello@exner.app. Use the same address for service, privacy and security inquiries. Privacy officer: the exner.app operations team (hello@exner.app).

Effective date

This Privacy Policy takes effect on September 26, 2026.