Respiratory Edge Privacy Policy

Last updated: November 5, 2026

Medical Education Dynamics LLC operates Respiratory Edge and its supporting services. This policy covers the Respiratory Edge Android app. Our separate website privacy policy covers the company website and its forms.

Account and saved study information

When account features are enabled, Firebase Authentication receives the email address and password you enter for account creation, sign-in and reauthentication. Respiratory Edge does not save your password. Short-lived account tokens remain in memory. A refresh credential used to keep you signed in is stored as an operating-system-protected encrypted envelope. The current Android package excludes its account-session storage file from cloud backup and device transfer. This exclusion does not apply automatically to all study data or external backups.

The app saves your selected name, language, voice preferences, progress, bookmarks, study positions, practice results, unfinished exams and selected study collections on your device. My Guide may include text, formatting, highlights, pictures, captions and study excerpts. Generated quizzes and flashcards may retain selected source excerpts with their saved history.

Practice achievements and certificates

Respiratory Edge University stores practice-achievement records on this device. Records can include the assessment title, an optional saved recipient name, the original completion date, score and question counts, source-attempt and content identifiers, and whether the result used generated answer keys. A signed-in account's records are separated locally using an account-derived identifier; guest records use a separate device-local partition. Account separation does not mean the records have been uploaded, synchronized, independently verified or anonymized.

A qualifying certificate requires a fresh eligible assessment, every administered question answered, at least 80% on scored questions, and known evidence that no hints or answers were revealed before completion. Unscored pretest items do not contribute to the score. Early-feedback study modes and old saved scores are not converted into certificates. A qualifying retake is a separate attempt. These are Respiratory Edge practice achievements, not academic credentials, licensure, NBRC certification, professional certification or continuing-education credit. Certificates based on generated answer keys identify that the key has not been independently reviewed.

The certificate preview initially omits the saved recipient name from the public copy. Choosing to include a name adds the original name saved with that certificate, rather than silently replacing it with a later profile name. The assessment title, date and score can still identify information you may not want to disclose. Review the actual copy before choosing a destination.

Opening sync settings or signing in does not itself upload your notes or unlock paid tests. When you separately choose a manual study upload, the selected collection's saved text, references, formatting and included pictures are sent to the configured protected study service. Local removal and cloud removal are separate actions. Files you export or share are outside the app's deletion controls.

Crystal questions, microphone audio and narration

Crystal's selected generated voice is Marin from OpenAI. Text questions, your selected language and response preferences pass through the protected Respiratory Edge service to OpenAI. When the app finds one matching passage in the guide you are using, it may include that passage and its chapter/section context to answer your question. An ambiguous match asks you to clarify. Attachments and quiz or flashcard sources are included only through the corresponding explicit send or preview/consent controls.

When authenticated hands-free voice is enabled in the normal Android configuration, English microphone audio streams through the protected Respiratory Edge service to Deepgram for recognition. Spanish microphone audio goes to OpenAI for recognition. This includes audio for playback controls such as Stop and Pause, even when the recognized control is carried out locally. Incomplete speech can be processed remotely without becoming a submitted tutor question. This is not on-device-only recognition. Network access and microphone permission are required.

Foreground conversation does not require a wake phrase. Hiding or locking the app stops its foreground listening. Returning may resume foreground listening when the saved voice choice remains enabled. To end microphone capture, turn off Microphone using its Home control or Customize Respiratory Edge. Turning off the speaker alone can leave microphone listening enabled. Stop or Pause can silence narration without ending listening. Sound off mutes output; supported foreground command listening can remain enabled, so muting does not establish that microphone capture has ended. Crystal assistance is disabled during the restricted 50-question and Serious Test Mode exams.

A separate, explicitly started on-device study-command session uses the device's recognition provider under that provider's terms. It has its own consent and microphone controls and ends when you leave, background or lock the study screen, stop it, or its session ends. Do not assume its processing is identical to the shared OpenAI conversation.

Where available, read-aloud has a separate permission from microphone conversation. It sends the text you choose to hear and its language through Respiratory Edge to OpenAI to generate speech using Marin. Sign-in and request details are also used to verify access and account for usage against your available verified voice allowance. It requires sign-in and a network connection. Read-aloud does not turn on the microphone or send microphone audio. Turning Microphone off does not withdraw this separate read-aloud permission. Turn Speaker off or leave the reading screen to stop playback.

Some narration configurations request word timing by sending generated speech to Deepgram or OpenAI according to the selected service configuration. This is generated audio, not another microphone recording. Narration without verified word timing can follow passages without claiming measured per-word highlighting.

Generated audio is for temporary playback rather than a permanent recording added to your notes or chat history. Active reads can retain audio in memory for pause/resume. File-based playback paths use private temporary files and require confirmed cleanup after Stop/release, sign-out or deletion, with recovery/retry if cleanup fails. Other platforms can play bytes without app-created voice files. The app's cleanup does not establish removal of provider-held records.

Purchases

Where purchases are enabled, the storefront handles pricing, payment and billing details. Respiratory Edge does not receive your full payment-card number. Store purchase records and the authenticated account binding are sent to the configured protected verification service to establish access, restore it and respond to refunds or revocations. Signing in alone does not grant paid access. Storefront purchases, refunds and cancellations remain subject to the storefront's controls and retention rules.

Providers and technical records

The selected features use Firebase Authentication; configured Google Cloud services for protected app processing, study storage and receipt verification; Deepgram for normal Android English recognition and generated-speech timing when selected; OpenAI for Crystal answers, Spanish recognition, Marin synthesis and generated-speech timing when selected; the selected storefront for purchases; and the device recognition provider for separately started device speech commands. Providers process the relevant data under their applicable terms and account-specific controls.

Recognition services also maintain usage-accounting records, including account-derived identifiers, reservation identifiers, deadlines, reserved usage and release status. The recognition ledger does not contain microphone samples or recognized transcripts. Hashed account linkage is pseudonymous, not anonymous.

Hosting and security services may process timestamps, network addresses, route/response information and security events for operation, troubleshooting and abuse prevention. Packaged SDK components alone do not prove that particular data is collected. Respiratory Edge does not sell personal information. Website, merchandise checkout and sharing destinations have their own privacy terms.

Copies you choose to print, export or share

Aggregate result sharing contains a result summary and practice disclaimer. A detailed test-report PDF is different: it can contain the assessment title, score, graphs, question text, your answers, correct answers and explanations. Review the contents and the selected app, recipient, printer or storage destination before confirming a handoff.

Opening operating-system print or sharing options is not confirmation that a document was printed, delivered, posted or saved successfully. A storage destination selected through Android may be another app or a cloud-backed document provider. The destination and any later recipient handle their copies under their own terms.

Local-data deletion and account deletion cannot recall copies already handed to a printer, document provider, another app or another person. A cancelled or unconfirmed external write may still require checking the selected destination. Delete unwanted external copies through the destination's own controls.

Retention and deletion

Local information remains until you edit or delete it or remove app storage. Synchronized collections remain associated with your account while that account and the feature are in use. The app's account-deletion process requires reauthentication and required private voice cleanup, then removes synchronized study records before removing Firebase sign-in access. Enabled cloud-account deletion now requires receipt-service cleanup acknowledgment before removing the Firebase identity, even if checkout is disabled in the current build. This prevents skipping records from earlier builds; operational deletion still requires confirmed completion. Minimal keyed deletion markers can remain to prevent stale requests from restoring erased records; they are separate from study content.

Delete all local data removes guest and account-associated certificates stored on this device. Confirmed online account deletion is followed by cleanup of only that original account's local certificates; other accounts' certificates, guest certificates and local notes are preserved. If cleanup is incomplete, Data & Privacy offers recovery. An unconfirmed online result is not treated as deletion success: any separate local-only cleanup requires explicit confirmation and does not retry or confirm online account deletion.

Account deletion does not automatically erase device-local notes, external exports, backups, records kept by providers or storefront transaction history, and it does not cancel or refund purchases. Use the separate local-data controls for this device. If deletion is interrupted or its outcome is uncertain, retry and wait for confirmed completion rather than assuming all copies are gone.

Operational, security and legal records may remain as reasonably needed for service protection, legal obligations and dispute resolution. Provider retention and deletion are governed by the applicable provider terms and configured account controls. We do not promise zero provider retention or removal from every third party.

Optional study preferences

The app offers two separate optional choices: interest in email study updates, offers and My TMC reminders, and interest in voluntarily sharing practice and My TMC outcomes to help evaluate the app. Both choices start off and can be changed independently in Your Profile without affecting app access or optional cloud sync.

The current implementation saves these choices on this device for the signed-in account. Saving a choice does not itself send promotional messages, upload outcomes, start analytics or authorize reuse of older device-wide study records. Account deletion withdraws that account's locally stored choices. Any future messaging or outcome-sharing service needs its own reviewed notice, operating consent and deletion process before activation; the saved preference is not proof that such a service is active.

Your choices and contact

You can decline microphone access and use text or touch controls, change microphone, speaker, Crystal visuals, language and screen order in Customize Respiratory Edge, keep local study use separate from optional sync, manage store purchases, and use the app's separate account and local-data deletion controls. Home also retains quick microphone, speaker and visual controls that share those settings. For account deletion, open Menu → Your Profile → Delete account, reauthenticate and confirm. The account deletion page also explains the support-email path for users unable to access the app.

Respiratory Edge is intended for respiratory-care students, educators and professionals and is not directed to children under 13. A child under 13 should not create an account or submit personal information.

Privacy and deletion contact:

Never email passwords, API keys, complete purchase tokens or patient records.

We will update this policy when relevant features, providers or requirements change.