Memorize Medicine

For students and staff of academies that run on Memorize Medicine

Privacy Policy for Academy Portals

Last updated: 21 October 2026

This policy explains what information an academy portal on Memorize Medicine collects, why, and who can see it.

The Academy decides how your information is used for its courses. Memorize Medicine stores and processes it on the Academy's behalf, only to run the portal. This policy covers the portal on the web and in the Memorize Medicine apps for Android and iOS.

  1. 01What we collect

    • Account details: your name, your email or phone number (depending on how your academy signs students up), and a profile photo if you add one. Your password is stored encrypted, and nobody can read it.
    • Learning activity: lessons watched, quiz answers, flashcards, notes and study plans.
    • Payments and enrollment: the receipt or enrollment proof pictures you upload, what they show (amount, transfer number, date), and the invitation codes you use. When you pay the academy directly, its staff record the amount and date, and may add a photo of the receipt.
    • Devices: an identifier for each device, and the device and browser type, to apply the device limit.
    • Messages you send to the academy's support or tutors, and feedback you choose to send.
    • Technical data: your IP address and approximate country, and the logs we need to keep the service safe.
    • We don't collect your precise location, your contacts or data from other apps on your phone. We don't use advertising IDs or tracking cookies.

  2. 02How it is used

    To run your account and your courses, check payments and enrollment proofs, give support, protect course content, prevent account sharing, and send the notifications you choose (study reminders and announcements).

  3. 03Who can see it

    • The Academy's staff (admins, tutors and support), as far as their role needs.
    • Memorize Medicine, only to run, secure and support the platform.
    • The service providers that run the platform for us. Each one uses the data only to provide its service to us:
      • Supabase: the database and sign-in.
      • Cloudflare: hosting, file storage, automatic receipt reading and encrypted backups.
      • GitHub: runs the backup job, which copies the database, encrypts it and stores it on Cloudflare. No copy is kept on GitHub.
      • Bunny.net (Bunny Stream): plays the academy's lecture videos. It receives your IP address and device type when you watch.
      • Resend: account emails, such as confirming your email or resetting your password.
      • OTPIQ: sign-up and sign-in codes sent to your phone by Telegram or SMS. When a code goes by Telegram, Telegram receives your phone number.
      • Google Gemini: reads lecture files that staff upload, to draft questions. It never receives student data.
      • The push service of your browser or phone (Google, Apple or Mozilla), only if you turn notifications on.
    • We never sell your information or use it for advertising. We share it with the authorities only when the law requires it.

  4. 04Where it is stored

    On secure cloud servers run by the providers above, which may be outside your country.

  5. 05How long it is kept

    • Your account and learning activity: until you delete your account, or until your academy stops using Memorize Medicine. When an academy's contract ends, it has 30 days to export its data, and then we delete it.
    • Approved payment records: 5 years from the payment date, as financial records, even after your account is deleted. They are then unlinked from your account and keep only your name and the payment details.
    • Receipts still waiting for review, or denied: deleted with your account.
    • Encrypted backups: kept for up to 12 months, then deleted. Anything you delete leaves the backups within that time.

  6. 06Deleting your account

    • You can delete your account at any time, in the app or on the website: sign in, open the menu and choose "Delete my account". Students also find it at the bottom of Settings. Type DELETE (or حذف) to confirm.
    • Your account, sign-in, course access (paid access included), progress, notes, flashcards, messages and devices are deleted straight away. This can't be undone. Approved payment records are kept as section 05 says.
    • Deleting your account does not give a refund by itself. Refunds follow your academy's own policy, so ask your academy first.
    • Course content made by a staff member stays with the academy. The academy's only admin has to make someone else an admin first.
    • If you can't sign in, ask your academy, or write to [email protected] from the email address on the account, or tell us the phone number on it. We delete it within 7 days.

  7. 07Your choices

    • Ask your academy to show or correct your information, or for a copy of it.
    • Turn notifications off at any time in your settings.
    • If your academy cannot help, write to [email protected].

  8. 08How we protect it

    Encrypted connections, encrypted passwords, files served through short-lived signed links, and strict separation between academies: one academy can never see another academy's data.

  9. 09Age

    Academy portals and the Memorize Medicine apps are for people aged 18 and over. We don't knowingly collect data from anyone under 18. If you think someone under 18 has an account, tell us and we'll delete it.

  10. 10Changes to this policy

    We may update this policy. The date at the top shows the current version.

  11. 11Contact

    For questions about your information, contact your academy first, or write to [email protected].

Read the Terms of Use for Academy Portals