Privacy policy

Last updated: 1 September 2026

MedAscend (“we”, “us”) respects your privacy. This policy explains what personal data we collect, why, and your rights.

What we collect

• Account data – name, email address and a hashed password.
• Learning data – questions answered, scores, flags, notes and session history, used to power your analytics.
• Payment data – processed by our payment provider (Stripe). We never see or store full card numbers.
• Technical data – IP address, browser type and pages visited, for security and to keep the service running.

How we use it

To provide the service, personalise your revision analytics, process payments, respond to support requests and improve our content. Aggregated, anonymised performance statistics (e.g. the percentage of users who answer a question correctly) are shown to other users; these never identify you.

Legal basis

Performance of our contract with you, our legitimate interest in improving the service, and your consent where required (e.g. marketing emails, which you can withdraw at any time).

Sharing

We share data only with processors necessary to run the service (hosting, database, payments, email delivery) under data-processing agreements. We do not sell personal data.

Retention

Account and learning data are kept while your account exists and for up to 24 months afterwards, unless you ask us to delete them sooner.

Your rights

You may access, correct, export or delete your personal data, and object to or restrict processing. Contact support@medascend.app. You may also complain to your local data-protection authority.

Cookies

We use a strictly necessary session cookie to keep you logged in and a preference cookie to remember your theme. We do not use third-party advertising cookies.