Privacy Policy

Last Updated: June 19, 2026

Welcome to Edumedra ("we," "our," or "us"). We are committed to protecting your privacy while helping you prepare for your medical examinations. This Privacy Policy explains how we collect, use, and safeguard your information when you use our gamified micro-learning platform.

Because we believe in complete transparency, we have written this policy in plain language without unnecessary legal jargon.

1. Information We Collect

We only collect data that is strictly necessary to run the platform, track your learning progress, and maintain your account security.

A. Account & Profile Data

When you sign up using BetterAuth and Google, we collect:

  • Personal Identity: Your name, email address, and profile image (provided by your Google account).
  • Authentication Details: Provider IDs, access/refresh tokens, and account creation timestamps to keep your login secure.

B. Learning & Gamification Telemetry

To power our gamified micro-learning features, we track and store your application activity:

  • Progress Tracking: Completed lessons, quiz scores, total time spent, and hints utilized.
  • Gamification Data: Total Experience Points (XP), current and historical study streaks, assigned leagues (e.g., Silver league), and unlocked achievements.
  • Social Interactions: Friend requests and friendship connections if you choose to connect with other candidates on the platform.
  • Activity Logs: Real-time XP events and milestones to ensure leaderboard integrity.

C. Technical Data

Every time you log in, our system automatically notes:

  • Your IP address.
  • Your web browser/User Agent.
  • Active session tokens and expiration times.

2. How We Use Your Information

We use the data we collect solely to:

  • Provide, operate, and maintain the Edumedra platform.
  • Calculate your daily streaks, XP points, and rank you on active leagues.
  • Send critical transactional emails (such as login confirmations or account alerts).
  • Monitor platform security, prevent cheating, and debug technical errors.
We do not sell, rent, or trade your personal data to third-party advertisers or data brokers.

3. Third-Party Sub-processors

To keep Edumedra fast and secure, we partner with reliable cloud infrastructure providers. Your data is processed through the following services:

  • Hosting: Vercel (Application deployment and hosting).
  • Database: Neon (Secure, managed cloud database execution).
  • DNS & Security: Cloudflare (Domain routing, SSL encryption, and security mitigation).
  • Email Delivery: Resend (Transactional system and communication emails).
  • Authentication: Google OAuth (Secure third-party identity verification).

4. Visibility & Public Gamification Data

Edumedra is a community-driven, gamified platform. Please note that certain parts of your profile are visible to other registered users:

  • Your username (display name), profile image, total XP, streak records, and league rank may appear on public platform leaderboards.
  • If you accept or send a friend request, your learning milestones may be visible to your connected friends.

5. Data Retention & Your Rights

Account Deletion

You own your data. If you wish to delete your account and remove your personal information from our active databases, you can do so at any time. Upon deletion:

  • Your active profile, sessions, and social connections are permanently wiped.
  • Your core learning progress metrics are completely dissociated from your identity.

Your Rights

You have the right to request a copy of the personal data we hold about you, or to ask us to correct or update inaccurate information.

6. Security

We take industry-standard precautions to secure your data. All database traffic via Neon is encrypted, application routing is guarded by Cloudflare, and authentication is entirely managed through secure Google tokens and our custom secure authentication system. However, please remember that no system on the internet is 100% secure.

7. Changes to This Policy

We may update this Privacy Policy as Edumedra evolves (for instance, when we integrate payment processing gateways in the future). We will notify you of any material changes by posting the new policy on this page and updating the "Last Updated" date.

8. Contact Us

If you have any questions about this Privacy Policy, your data rights, or if you want to request manual account deletion, please email us directly at: