Privacy Policy for CNS-POP

Last updated: June 20, 2026

This Privacy Policy describes how CNS-POP ("CNS-POP," "we," "us," or "our") collects, uses, and shares information when you use the CNS-POP mobile application and related services (the "App"). CNS-POP is a scientific research tool for predicting blood–brain-barrier (BBB) penetration and related physicochemical properties of chemical structures.

CNS-POP is operated by Michael Tuffley. If you have questions, contact us at privacy@cnspop.com.

By creating an account or using the App, you agree to the practices described in this policy.

1. Information we collect

a. Information you provide

Account information. To use the App you create an account with an email address and password. Authentication is handled by Google Firebase Authentication. We receive your email address and a unique account identifier. We do not store or have access to your plaintext password — Firebase manages credentials securely on our behalf.
Content you submit. When you use the App you may submit chemical structures and related data, including molecule identifiers (SMILES or InChI strings), molecule names, optional user-defined pKa values, and the labels and metadata you assign (for example, a penetrant / non-penetrant determination, test species, and whether the source is experimental or a citation). This content is stored in your account and associated with your user identifier.
Structure images. If you choose to analyze a molecule from an image, the App accesses the specific photo you select so it can recognize the chemical structure. We only access images you explicitly choose; we do not browse or upload your photo library.

b. Information collected automatically

Usage and diagnostic data. Like most apps, we and our service providers may collect technical information such as device type, operating-system version, app version, crash logs, and basic usage events to keep the App running reliably.
Log data. Our backend services may record standard log information (such as IP address and request timestamps) when your device communicates with our servers, for security and operational purposes.

We do not collect precise location data, contacts, or microphone or camera audio, and the App contains no advertising and no third-party advertising trackers.

2. How we use information

We use the information described above to:

create and manage your account and authenticate you;
provide the App's core function — computing predictions and physicochemical scores for the structures you submit, and storing your analyses so you can return to them;
recognize chemical structures from images you choose to analyze;
maintain, secure, debug, and improve the App and our prediction services;
aggregate confirmed, non-identifying chemical data to improve the accuracy of our scientific models; and
comply with legal obligations and enforce our terms.

We do not sell your personal information, and we do not use your data for advertising.

3. How information is shared

We share information only as follows:

Service providers. We use Google Firebase and Google Cloud Platform to provide authentication, database storage, file storage, and hosting for our prediction, image, and pKa services. These providers process data on our behalf under their own security and privacy commitments.
Public chemical data sources. The App may retrieve publicly available chemical reference information (for example, from PubChem) based on the structures you submit. This involves chemical identifiers, not your personal information.
Legal and safety. We may disclose information if required by law, or to protect the rights, safety, and security of our users, the public, or CNS-POP.
Business transfers. If CNS-POP is involved in a merger, acquisition, or asset sale, information may be transferred as part of that transaction, subject to this policy.

We do not otherwise share your personal information with third parties.

4. Data retention

We retain your account information and the analyses you create for as long as your account is active or as needed to provide the App. Analyses you delete in the App are archived and may be retained in backups for a limited period before being purged. You may request deletion of your account and associated personal data at any time (see Section 6).

5. Data security

We use industry-standard safeguards provided by Google Firebase and Google Cloud, including encryption in transit (HTTPS/TLS) and access controls, to protect your information. No method of transmission or storage is completely secure, so we cannot guarantee absolute security, but we work to protect your data and limit access to it.

6. Your rights and choices

Depending on your location, you may have rights to access, correct, export, or delete your personal information, and to object to or restrict certain processing. You can:

Access or update your account information within the App;
Delete your analyses directly in the App;
Request account deletion — to delete your account and associated personal data, contact us at privacy@cnspop.com and we will process your request in accordance with applicable law.

If you are in the European Economic Area, the United Kingdom, or California (among other jurisdictions), you may have additional rights under laws such as the GDPR or CCPA/CPRA, including the right to lodge a complaint with your local data-protection authority. We do not sell or "share" personal information as those terms are defined under California law.

7. International data transfers

CNS-POP is operated using Google Cloud infrastructure, and your information may be processed and stored in the United States or other countries where our service providers operate. By using the App, you understand that your information may be transferred to and processed in countries that may have different data-protection laws than your country of residence.

8. Children's privacy

The App is intended for researchers and professionals and is not directed to children under 18. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, contact us and we will delete it.

9. Not medical advice

CNS-POP provides computational predictions for scientific and research purposes only. Its outputs are estimates and must not be relied upon as medical, diagnostic, clinical, or regulatory advice.

10. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date above and, where appropriate, provide additional notice within the App. Your continued use of the App after an update means you accept the revised policy.

11. Contact us

If you have any questions or requests regarding this Privacy Policy or your data, contact:

CNS-POP
Michael Tuffley
Email: privacy@cnspop.com