Privacy policy
Last updated
MedQVault is operated by Master Medicine Pty Ltd (“we”, “us”). We handle your personal information in line with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). This policy explains what we collect, why, where it goes, and the choices you have.
What we collect
- Account details: your email address and password (we store only a hashed form of the password, never the password itself).
- Study activity: the questions you answer, your answers, timing, session history, and any flags or private notes you attach to questions.
- Billing: handled entirely by Stripe. Your card details never touch our servers; we store only your Stripe customer reference and subscription status.
- Basic technical data: we use privacy-friendly, cookieless analytics (Plausible) to count page views. It sets no cookies, does not track you across sites, and collects no personal information, so there is no tracking-consent banner to click through.
How we collect it
We collect this information directly from you: when you create an account, when you use the study app, and when you subscribe through Stripe. We do not buy personal information about you from anyone else.
Why we use it
- To run the product: your history powers your analytics, your review pools, and session resume.
- To manage your subscription and account.
- In aggregate and anonymous form, to power question quality control (how hard a question is, how well it discriminates).
We do not sell your personal information, and we do not use it for third-party advertising.
Who we share it with, and where it is stored
We store and process your data using two providers:
- Supabase: database and authentication.
- Stripe: payment processing.
Both are bound by their own security and privacy commitments, and we share only what each needs to do its job. These providers operate infrastructure outside Australia, including in the United States, so by using MedQVault you accept that your information may be stored and processed overseas. We take reasonable steps to ensure it is handled consistently with the APPs.
We do not otherwise disclose your personal information, except where required by law.
How we keep it secure
Access is authenticated and passwords are stored hashed. Data is protected in transit and at rest by our providers, and access to production data is limited to what is needed to operate the service.
Accessing and correcting your information
You can view and update your account details, and see your own study history, from within the app. To request access to, or correction of, any other personal information we hold about you, contact us (below) and we will respond within a reasonable period. There is no charge to ask; if a request requires significant effort we will tell you first.
If you delete your account
Your account, sessions, notes, flags, and subscription records are deleted. Your individual answer records are anonymised, not deleted. The link to you is permanently removed, and the anonymous record is retained so that aggregate question statistics remain accurate for other candidates.
How to contact us or complain
Questions or requests about your data: contact us via your account page, or write to Master Medicine Pty Ltd. If you believe we have breached the APPs, tell us first and we will investigate and respond. If you are not satisfied with our response, you may complain to the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.