Privacy

You can study with an email and password. The account stores your email, a hashed password, whether the email was verified, the trial start and end, and later a subscription status. Mahazanaka does not ask for a date of birth, a government identifier, or any patient record. This is not a clinical chart.

When you are signed in, finished question attempts are also saved on the server: the question identifier, the exam, the topic, whether the answer was correct, confidence, and whether the miss was safety-critical. The vignette text is not copied into that record. Saved questions and mistakes on a signed-out browser remain in local storage on that device.

On this device, the browser stores your current question block, answers, confidence, timer progress, saved questions, mistakes, the identifier of the last Medicine Library chapter opened, which chapter identifiers were marked read, feedback, problem reports, and Mahazanaka AI conversation. That stays in local storage in this browser until you sign in and finish a block, which also writes the attempt summary described above.

When you send a message to Mahazanaka AI, the server receives the exam, topic, a shortened stem, your message, and — only after you submit — your answer and the explanation already on screen. The server uses a key that stays on the server to ask the model provider, xAI, for a reply. Mahazanaka does not keep a server copy of that chat. The conversation remains in this browser until you choose New chat.

Feedback and “report a problem” notes are saved in this browser. They are not sent to a Mahazanaka inbox.

Google Analytics may set a cookie to count visits. Mahazanaka does not build its own IP profile and does not send study content to Google. A short-lived rate limit may remember a request address in server memory so one visitor cannot open question sets in a tight loop. The company that hosts the site may keep ordinary request logs. You can delete the account from the account page. That removes the user, the trial, and the saved attempts.

The pages load typefaces from Google Fonts. Your browser sends that request to Google, which can include your IP address. Mahazanaka does not receive a copy of it.

If you later pay, Stripe processes the card. Mahazanaka stores the subscription status, the Stripe customer and subscription identifiers, the fact and date of a paid invoice, and any refund request. It does not store the card number. Payment emails, when mail delivery is configured, go to the account email. This text can be revised after legal review.

© 2026 Mahazanaka. All rights reserved.