Privacy Policy

The account holds the following, all of which you can review from your account settings:

• Account and study profile — email, name, institution, year of study, and quiz settings.
• Learning and practice data — cases, patient practice records, quiz attempts, checkpoints, progress and entitlement state.
• Support requests — what you send from the help centre, and any diagnostics you choose to include with it.

We do not ask for, and you should not enter, identifying information about real patients — see the data & privacy guidance in your account settings.

To provide the study features themselves — question practice, spaced-repetition review, progress tracking — and to respond when you contact support. [ Placeholder — a full purpose-by-category breakdown, and the corresponding lawful basis under any applicable data protection law, belongs here once confirmed by counsel. ]

[ Placeholder — retention periods per data category, and what happens to backups after deletion, need to be specified once the operational policy is finalised. ]

We do not sell your data. [ Placeholder — the specific processors this product actually uses (hosting, email delivery, analytics, error reporting) need to be listed here by name once that list is confirmed, rather than described generically. ]

You can, at any time, from your account settings:

• Review and update your profile.
• Change your notification preferences.
• Permanently delete your account from Data & privacy. This removes your profile and every case, quiz attempt, checkpoint and review record attached to it, and cannot be undone.

[ Placeholder — depending on which jurisdiction's law applies to you, you may have additional rights (access, correction, portability, objection) that need to be stated explicitly once that jurisdiction is confirmed. ]

Session credentials are stored in httpOnly cookies rather than in JavaScript-readable storage, so that a compromised page cannot read them directly. [ Placeholder — a fuller description of security practices belongs here once it can be reviewed against what is actually deployed. ]

DocBuddy is intended for students old enough, under the law that applies to them, to agree to the Terms of Service on their own behalf.

We may update this policy from time to time. Continued use of DocBuddy after a change takes effect is acceptance of the updated policy.

Questions about this policy, or a request about your own data, can be sent through the help centre. [ Placeholder — a registered company name, contact address and, where required, a data protection officer belong here once they exist and are confirmed. ]