Privacy Policy

This Privacy Policy explains how MedPorium Education (“MedPorium”, “Med-Porium” “we”, “us” or “our”) collects, uses, stores and discloses personal information when you access or use the MedPorium website, diagnostic assessments, practice question banks, artificial intelligence tutor, subscription services and related features available through medporium.co, collectively referred to as the “Service”.

MedPorium does not sell or rent your personal information. We use personal information only as reasonably necessary to provide, operate, secure and improve the Service, process subscriptions and respond to customer support requests.

We collect only information that is reasonably necessary to operate the Service.

This may include:

• Account information: your email address, account identifier, authentication details and account status.
• Subscription information: your Stripe customer identifier, subscription status, payment status, billing country and limited transaction details.
• Study information: examinations selected, quiz answers, scores, attempts, diagnostic results, domain performance, predicted scores and study progress.
• AI tutor information: questions, prompts and other content that you submit to the AI tutor, together with generated responses.
• Technical information: IP address, browser type, device type, operating system, pages accessed, timestamps, error logs and security-related events.
• Support information: information that you provide when contacting us about your account, subscription or use of the Service.

Subscription payments are processed by Stripe. MedPorium does not ordinarily receive or store your complete payment-card number, card security code or full banking details.

Stripe may provide MedPorium with limited information needed to manage your subscription, such as your Stripe customer identifier, subscription status, payment status, billing country and limited payment-method details.

We may use personal information to:

• Create, authenticate and manage your account.
• Provide access to purchased examinations and subscriptions.
• Deliver quizzes, diagnostics, tutoring and study analytics.
• Save quiz attempts, scores, progress and previous activity.
• Process, manage and reconcile subscription payments.
• Provide billing and account-management functions.
• Respond to customer-support enquiries.
• Diagnose technical issues and improve Service reliability.
• Detect fraud, misuse, account sharing and security threats.
• Comply with legal, accounting and regulatory obligations.
• Improve the functionality, usability and educational quality of the Service.

We do not use personal information for unrelated data brokerage, resale or targeted advertising.

When you use the AI tutor, the content that you submit may be transmitted to OpenAI so that a response can be generated.

Tutor content may also be processed or stored by MedPorium to provide the Service, maintain conversation context, investigate technical problems, prevent misuse and improve Service quality.

You should not submit:

• Patient names or identifying medical information.
• Medical records or confidential health information.
• Confidential workplace or employer information.
• Passwords, payment-card details or other financial credentials.
• Live examination questions or information subject to examination confidentiality obligations.
• Information that you are not authorised to disclose.

MedPorium uses trusted third-party service providers to operate the Service. These providers may process limited personal information on our behalf or as necessary to provide their services.

Our primary service providers include:

• Supabase: account authentication, databases, subscription-access records and study data.
• Stripe: payments, recurring subscriptions, customer billing and subscription management.
• Vercel: website hosting, application delivery and technical infrastructure.
• OpenAI: generation of AI tutor responses and related artificial intelligence functionality.

We do not provide personal information to these providers for them to market unrelated products to you on MedPorium’s behalf.

MedPorium does not sell, rent or trade your personal information.

Personal information may be disclosed only as reasonably necessary to operate the Service, process payments, provide customer support, maintain security, comply with law or complete a legitimate business transaction subject to appropriate safeguards.

Some of MedPorium’s service providers operate internationally. Accordingly, personal information may be processed or stored outside Australia, including in the United States and other countries in which those providers maintain infrastructure. Privacy protections in those countries may differ from those that apply in Australia or in your place of residence.

MedPorium may use cookies, local storage and similar technologies to:

• Maintain login sessions.
• Remember account and navigation state.
• Provide secure access to subscription features.
• Protect the Service from misuse.
• Diagnose errors and improve performance.

Disabling essential cookies or browser storage may prevent login, subscription access or other parts of the Service from functioning correctly.

MedPorium may send essential account, payment, security and service-related communications.

We will not send unrelated promotional communications unless permitted by applicable law. Where marketing messages are sent, you may unsubscribe using the link provided in the message or by contacting us.

Unsubscribing from marketing communications does not prevent us from sending essential account, billing, security or subscription messages.

We may disclose personal information where reasonably necessary to:

• Provide the Service through our service providers.
• Process subscriptions and payments.
• Investigate fraud, abuse or security incidents.
• Enforce our Terms of Use.
• Comply with a legal obligation, court order or lawful government request.
• Protect the rights, safety or property of users or MedPorium.
• Obtain professional legal, accounting, security or technical advice.

MedPorium takes reasonable technical and organisational measures to protect personal information against loss, misuse, unauthorised access, alteration and disclosure.

These measures may include access controls, authentication, restricted service credentials, encrypted connections and the use of reputable infrastructure providers.

No internet transmission or electronic storage system can be guaranteed to be completely secure. You are responsible for keeping your password and account credentials confidential.

We retain personal information for as long as reasonably necessary to:

• Provide and maintain your account.
• Supply subscription access and study functionality.
• Preserve quiz history and study progress.
• Resolve disputes and customer-support issues.
• Prevent fraud and enforce our agreements.
• Satisfy legal, taxation and accounting obligations.

Information may be deleted, anonymised or aggregated when it is no longer reasonably required, subject to legal and operational retention requirements.

You may request access to personal information that MedPorium holds about you or ask us to correct information that is inaccurate, incomplete or out of date.

We may need to verify your identity before completing a request. Certain information may be withheld where permitted or required by law.

You may request deletion of your MedPorium account by contacting us at support@medporium.co.

Some information may be retained where reasonably necessary for legal, taxation, accounting, fraud-prevention, transaction-record or dispute-resolution purposes.

Deleting your MedPorium account does not necessarily cancel an active Stripe subscription. You should first cancel your subscription using the Manage Subscription link on the MedPorium website.

MedPorium is intended for professional examination candidates and is not directed to children under 13.

We do not knowingly collect personal information from children under 13. If you believe that a child under 13 has provided personal information to MedPorium, please contact us so that we can investigate and take appropriate action.

Users under 18 should use the Service only with the involvement and consent of a parent or legal guardian.

If MedPorium is involved in a merger, acquisition, restructuring, financing or sale of all or part of the business, personal information may be transferred as part of that transaction. Any such transfer would remain subject to applicable privacy obligations and appropriate safeguards.

Questions, requests or complaints about privacy may be sent to support@medporium.co.

Please provide enough information for us to understand and investigate your concern. We will respond within a reasonable period.

Where Australian privacy law applies and you are not satisfied with our response, you may be entitled to contact the Office of the Australian Information Commissioner.

MedPorium may update this Privacy Policy to reflect changes to the Service, our providers, our information practices or applicable law.

The current version will be published on this page with a revised effective date. Where appropriate, we may also provide additional notice of material changes.

Privacy questions or requests may be sent to support@medporium.co.