This policy covers the website ana3d.app, the 3D viewer on it and the Ana3D app for Android and iOS. Contact for anything in it: [email protected].
The short version
- There are no accounts and no passwords. You can use every free part of Ana3D without giving us anything.
- There is no advertising and no analytics or tracking script on the site, in the viewer or in the app.
- If you buy Ana3D Pro on the website, we keep a record of the purchase and, only if you give it, your email address, so you can restore the purchase on another device.
- If you buy Ana3D Pro in the app, Google Play or the App Store handles the purchase: the app sends us nothing about it.
- We never see or store your card number, your PayPal password or your bank login.
- You can erase your licence data yourself at any time.
What we store when you only browse
Nothing that identifies you. In detail:
- In your own browser or app (never sent to us): your language, which hints you have seen, your quiz and spaced-repetition progress, and, if you have Pro, a licence token (website) or a note that the store confirmed your purchase (app). Clearing the site data of your browser removes all of it.
- On our server: the web server does not keep an access log for this site. It keeps a short error log (requests it refused, with the IP address they came from) for security. The API counts requests per IP address in memory for a few minutes to stop abuse; this is not written to disk.
- Search: what you type in the search box is sent to our API to find structures. It is not stored and not linked to you.
- Cookies: the public site sets no advertising or tracking cookies. Our network provider, Cloudflare, may set a strictly necessary security cookie.
What we store when you buy Ana3D Pro on the website
| Data | Why | How long |
|---|---|---|
| Purchase record: payment provider, the provider's transaction ID, amount, currency, date, status | to grant Pro, handle refunds, and keep the accounts the law requires | as long as the licence exists, and afterwards for as long as tax and accounting rules require |
| Licence: status, dates, and a one-way hash (SHA-256) of each device token | to recognise your devices; the tokens themselves are not stored | until you erase it or it is refunded |
| Email address, optional | only to restore your purchase on another device, and to answer you | until you erase it |
| An unpaid order (a pending bank transfer or PayPal checkout) | to match your payment when it arrives | deleted automatically after 7 days |
| Email confirmation code (stored as a hash) | to check the 6-digit code we emailed you | minutes; deleted after use or expiry |
We do not use your email for marketing, and we do not sell or share it.
If you buy without giving an email, Pro lives only in that browser: we have no way to identify you, and clearing the browser data loses it. You can attach an email later by writing to us.
Who else processes data for us
Each of these receives only what it needs for its job, under its own privacy terms:
- PayPal: payments outside Vietnam. PayPal collects your payment details; we receive the transaction ID, the amount and the status.
- Your bank and SePay (Vietnam, VietQR bank transfers): SePay notifies us when a transfer reaches our account, with the amount and the transfer content. We store the transaction ID and the amount, not your name or account number.
- Google Play and the App Store: purchases in the app. They bill you and tell the app what your account owns; we receive nothing from them about you.
- Resend: delivers the confirmation-code email. It receives your email address and that message.
- Cloudflare: carries all traffic to ana3d.app and serves the 3D model files (cdn.ana3d.app). It processes IP addresses to deliver and protect the site.
- MongoDB Atlas: the hosted database where the purchase and licence records are kept.
- Our hosting provider: the server that runs the website and the API.
Some of these companies are outside your country. We do not transfer your data to anyone else, except when a law or a court order obliges us to.
The app (Android and iOS)
The app asks for one permission: internet access. It contains no advertising or analytics SDK and no crash reporter, has no account and asks for no email. It stores on the device only your language and whether the store confirmed your Pro purchase (so Pro works offline). Pro bought in the app comes back through the same Google or Apple account on any device; a refund made by the store ends it. The 3D scene is the same viewer as on the website, loaded from ana3d.app.
Your choices and rights
- Erase: for a purchase on the website, write to us. We hold no data about purchases made in the app. This deletes your email and every device token from the licence. The bare purchase record (transaction ID, amount, date) is kept as long as accounting rules require.
- Access, correction, objection: write to [email protected] and we answer within 30 days. To protect you, we may ask you to confirm the email address by code.
- Depending on where you live (for example the EU, the UK or Vietnam), you may also have the right to complain to your data-protection authority.
The legal grounds we rely on are the contract with you (granting what you bought), our legal obligations (accounts), and our legitimate interest in keeping the service secure.
Children
Ana3D is an educational anatomy atlas and can be used without giving any personal data. We do not knowingly collect personal data from children. Purchases must be made by an adult or with an adult's permission.
Changes
When this policy changes we update this page and its date. If a change affects data we already hold about you in a significant way, we email the addresses attached to licences before it takes effect.
See also the Terms of use and the Refund policy.