Privacy Policy
Effective date: September 10, 2026
This Privacy Policy describes how Zyg, LLC (“Zyg,” “we,” “us,” or “our”) collects, uses, discloses, and protects information when you use our website at zyglearning.org and the services we provide through it (collectively, the “Service”). By creating an account or using the Service, you agree to this Privacy Policy.
The Service is designed for adult learners, particularly medical students and educators. It is not intended for children, and you must be at least 18 years old to create an account or use the Service.
1. Information We Collect
We collect the following categories of information:
| Category | What it includes | Source |
|---|---|---|
| Account identifiers | Name, email address, profile image, unique account ID, OAuth-provided identifiers | Google or Microsoft OAuth when you sign in |
| Subscription information | Subscription plan, status, billing history, last four digits of card (if provided to Stripe) | Stripe (our payment processor); we do not collect or store full card numbers |
| User content | Study schedules, playlists, notes, tags, understanding ratings, peer reviews, comments, collaboration activity, external resource links you save | You, while using the Service |
| Usage and device data | Pages visited, features used, session duration, clicks, referring URL, IP address, browser type, device type, operating system, approximate geolocation (from IP) | Automatic collection via cookies and similar technologies |
| Communications | Support requests, feedback, survey responses, email correspondence | You, when you contact us |
| Cookies and similar technologies | Session cookies, authentication tokens, analytics identifiers, preference cookies | Your browser |
1.1 Information We Do Not Collect
We do not knowingly collect information from anyone under 18 years of age. We do not collect protected health information (PHI) as defined by the Health Insurance Portability and Accountability Act (“HIPAA”), and you must not submit, upload, or share PHI through the Service. We do not collect full payment-card numbers or bank-account numbers; all payment information is handled directly by our payment processor, Stripe, Inc.
2. How We Use Information
We use the information we collect to:
- Provide, maintain, and improve the Service, including creating and authenticating your account, displaying your study materials, and enabling collaboration with peers;
- Process subscription payments and manage billing through Stripe;
- Communicate with you about your account, subscription, updates, and support requests;
- Analyze how the Service is used in order to diagnose issues, improve functionality, and develop new features;
- Enforce our Terms of Use, prevent fraud, and protect the security of the Service and our users;
- Comply with applicable legal obligations.
3. Artificial Intelligence and Machine Learning
Certain features of the Service may be powered by artificial intelligence or machine-learning models. We want to be clear about how we use AI in connection with your data:
- We do not use your personal information, user content, or study materials to train AI models.
- We do not sell your personal information or user content to any AI provider, data broker, or other third party.
- Where AI features require processing of your inputs, we process inputs on a per-request basis and retain them only as needed to deliver the requested output and to operate the Service.
- The machine-learning models that process your inputs today — including the model that matches pasted course objectives to learning resources — run on infrastructure we operate. We do not send your user content or study materials to third-party AI providers.
- If we materially change how AI interacts with your data in the future, we will update this Policy and provide notice in accordance with Section 12.
4. How We Share Information
We share information only in the limited circumstances described below. We do not sell your personal information for money.
4.1 Service Providers
We share information with third-party service providers that perform functions on our behalf, subject to contractual confidentiality and data-protection obligations. Categories of service providers include:
- Authentication providers (Google and Microsoft) when you sign in via OAuth;
- Payment processing (Stripe, Inc.), which handles all card data subject to its own privacy policy;
- Cloud hosting and infrastructure providers that operate the servers, storage, and networks underlying the Service;
- Analytics and error-monitoring providers that help us understand how the Service performs and identify bugs;
- Email and customer-support platforms that deliver transactional messages and handle support tickets.
4.2 Other Users of the Service
Certain features of the Service — including peer review, collaboration, shared playlists, and shared study schedules — allow you to make content visible to other users you choose to interact with. Information you choose to share through these features is visible to the users you share with. You control what you share and with whom.
4.3 Legal Requirements and Safety
We may disclose information where we believe in good faith that disclosure is necessary to (a) comply with applicable law, legal process, or governmental request; (b) enforce our Terms of Use or other agreements; (c) protect the rights, property, or safety of Zyg, our users, or others; or (d) detect, prevent, or address fraud, security, or technical issues.
4.4 Business Transfers
If Zyg, LLC is involved in a merger, acquisition, financing, reorganization, bankruptcy, or sale of all or a portion of our assets, information held by us may be transferred as part of that transaction. We will provide notice of any such transaction and any change in applicable privacy terms.
5. Third-Party Content and External Links
The Service allows you to save, organize, and share links to educational resources hosted by third parties, including resources that may be behind paywalls or subject to separate terms. Zyg does not host these third-party resources. When you click an external link, you leave the Service and interact with the third party directly, subject to their own privacy practices. We are not responsible for the content, privacy practices, or data handling of any third party.
6. Cookies and Tracking Technologies
We use cookies, local storage, and similar technologies to operate and improve the Service. We use:
- Strictly necessary cookies — required for authentication, session management, and security;
- Preference cookies — to remember your choices and settings;
- Analytics cookies — to measure usage and improve the Service.
Most browsers allow you to refuse or delete cookies through browser settings. Disabling strictly necessary cookies will impair your ability to use core features of the Service. We do not currently respond to “Do Not Track” browser signals, but we honor opt-out signals required by applicable state laws (such as the Global Privacy Control) to the extent required.
7. Data Retention
We retain personal information for as long as your account is active and for a reasonable period thereafter to comply with legal obligations, resolve disputes, enforce agreements, and maintain business records. When you delete your account, we will delete or de-identify your personal information within a reasonable period, except where retention is required for tax, accounting, legal, security, or fraud-prevention purposes.
User content that you have shared with other users (for example, in peer reviews or collaborative playlists) may remain visible to those users after your account is deleted, to the extent technologically necessary to preserve their use of the Service.
8. Data Security
We implement reasonable technical, administrative, and physical safeguards designed to protect personal information, including encryption in transit, encryption at rest, access controls, and regular security reviews. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. If we become aware of a security incident that materially affects your personal information, we will notify you as required by applicable law.
9. Your Privacy Rights
Depending on where you live, you may have the following rights regarding your personal information:
- Access — to obtain a copy of the personal information we hold about you;
- Correction — to request correction of inaccurate information;
- Deletion — to request deletion of your personal information, subject to certain exceptions;
- Portability — to receive certain information in a structured, commonly used, machine-readable format;
- Opt-out of certain processing — including opt-out of “sales” or “sharing” as those terms are defined under applicable law (we do not sell or share for cross-context behavioral advertising purposes);
- Non-discrimination — you will not receive discriminatory treatment for exercising your rights.
To exercise these rights, email us at support@zyglearning.org. We may need to verify your identity before fulfilling certain requests, and we will respond within the timeframes required by applicable law. You may designate an authorized agent to make a request on your behalf, subject to verification. If we deny your request, you may appeal by replying to our response with the word “Appeal” and the reason for your appeal.
9.1 California Residents (CCPA/CPRA)
California residents have the rights described above under the California Consumer Privacy Act, as amended by the California Privacy Rights Act (“CCPA/CPRA”). In the preceding twelve (12) months, we have collected the categories of personal information described in Section 1 for the business purposes described in Section 2. We have disclosed personal information to the categories of service providers described in Section 4.1. We do not sell personal information and have not sold personal information in the preceding twelve (12) months. We do not knowingly sell or share the personal information of consumers under 16 years of age. You have the right not to receive discriminatory treatment for exercising your CCPA/CPRA rights.
9.2 Utah Residents (UCPA)
Utah residents have rights under the Utah Consumer Privacy Act, including the rights of access, deletion, and portability, and the right to opt out of targeted advertising and sales (although Zyg does not engage in either).
9.3 Other U.S. States
Residents of states with comprehensive consumer privacy laws — including Virginia, Colorado, Connecticut, Texas, Oregon, Montana, Delaware, Iowa, Tennessee, Indiana, Florida, New Jersey, New Hampshire, Kentucky, Maryland, Minnesota, Rhode Island, and other states as their laws become effective — generally have rights similar to those described above. You may exercise those rights by contacting support@zyglearning.org, and we will respond as required by the law applicable to you.
10. Data Export
The Service provides self-service export for certain data you have created, currently your playlists, your schedules, and your resource tracking. For other data you have created, you may request an export by contacting support@zyglearning.org. We will provide the export in a commonly used, portable format where technically feasible. The categories available through self-service export may change as the Service develops.
11. Children
The Service is intended only for adults aged 18 or older. We do not knowingly collect information from children under 13 (within the meaning of the Children's Online Privacy Protection Act) or from minors under 18. If we learn that we have inadvertently collected information from a person under 18, we will delete that information. If you believe a minor has provided us with information, please contact us at support@zyglearning.org.
12. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. When we do, we will update the effective date at the top of this page. If changes are material, we will provide additional notice by email or through the Service. Your continued use of the Service after the changes take effect constitutes your acceptance of the revised Policy.
13. Contact Us
If you have questions or concerns about this Privacy Policy or our data practices, please contact us:
Zyg, LLC
4664 West 5925 South, Hooper, Utah 84315, United States
Email: support@zyglearning.org