Privacy Policy

Overview

Celsus MedEd ("we", "our", "us") is committed to protecting your privacy. We handle personal information in line with the Australian Privacy Principles under the Privacy Act 1988 (Cth). This policy explains what we collect, why, and the choices you have.

Information we collect

You give us

• account details such as your name, email, and (optionally) your institution and year of study;
• content you create on the Platform, such as study notes and progress;
• messages you send us for support.

We collect automatically

• usage and learning-progress data that powers your stats and recommendations, such as the tutorials and pages you open, the features you use, your answers to questions and flashcards, how long you spend on each, and any errors you run into;
• while you are signed in, how often and how long you use the Platform: when each visit starts and ends, the pages you open, how long you are active on each page (time counts only while the page is open in front of you and you are using it), and the kind of device and screen size you use;
• device and browser information, and approximate location from your IP address;
• essential cookies and local storage that keep you signed in and remember your preferences.

De-identified clinical data and the Case Logger

The Case Logger is designed so that your clinical reflections are encrypted on your own device before they are stored. We hold only opaque ciphertext and never receive the key, so we cannot read these entries. You must record de-identified information only and follow your institution's and health service's protocols. We do not seek to collect patient-identifiable health information through the Platform.

How we use your information

• to provide, secure, and improve the Platform and its content;
• to detect and prevent misuse, such as automated or bulk copying of content, by monitoring how much content each account accesses, when, from which IP address, and with which browser or tool;
• to track your learning progress and offer personalised study suggestions;
• to review how beta testers use the Platform, solely to improve its features and functionality (see below);
• to communicate with you about your account and the beta;
• to meet our legal and professional obligations.

Reviewing how beta testers use the Platform

During the beta, members of the Celsus MedEd team may review how individual testers use the Platform, using the usage data described above. This review is linked to your account so that we can see where a feature is confusing, broken, or not working as intended, and follow up on feedback you give us.

• We do this solely to improve the Platform's features, functionality, and content.
• We do not use it to assess, rank, or report on you, and we never share it with your university, employer, or any other institution.
• We do not use it for advertising, and we do not use it to build a profile of you for any other purpose.
• Case Logger entries stay encrypted and are not part of this review; we cannot read them.
• Anything we record or discuss from this review outside the team is de-identified or combined with other testers' data so that it does not identify you.
• We may contact you to ask about your experience. Replying is optional.

Sharing and service providers

We will never sell, rent, trade, or give your personal information or your usage data to third parties.

The only organisations outside Celsus MedEd that handle your information are the service providers that run the Platform for us (for example hosting, database, error-reporting, and email providers). They act only on our instructions, are bound to protect your information, and may not use it for their own purposes. We will also disclose information where Australian law requires us to. They are listed below.

Our service providers

• Vercel: hosts the website you use.
• Render: runs our application server and its short-term cache.
• Neon: our database, which holds your account, progress, and the other information described above (stored in Sydney).
• Amazon Web Services (S3): stores Platform content and files such as images (stored in Sydney).
• Supabase: delivers live updates for messages, study groups, and other real-time features.
• Resend: sends account emails, such as password resets.
• OpenAI and Anthropic: power the AI tutor and voice dictation. What you type or dictate to these features is sent to them to generate a response; under their business terms it is not used to train their models.
• Sentry: records technical error reports so we can fix faults.

We will update this list before adding a new provider that handles your personal information.

International transfers

Our database and file storage are in Australia. Some of our other providers (including our hosting, email, AI, and error-reporting providers) operate in the United States and other countries. Where information is transferred overseas, we take reasonable steps to ensure it is handled consistently with the Australian Privacy Principles.

Data security and retention

We use appropriate technical and organisational measures to protect your information against unauthorised access, loss, or misuse. We keep personal information only for as long as needed for the purposes above or as required by law, and then delete or de-identify it.

Your rights

• access and correct your personal information;
• request deletion of your account and associated data;
• opt out of non-essential communications;
• ask questions or make a privacy complaint, which we will handle promptly.

Changes and contact

We may update this policy as the Platform develops and will note the date of the latest change above. To exercise any of your rights or ask a question, email privacy@celsusmeded.com (Melbourne, Australia).