Privacy Policy

Last updated: 10 July 2026. This is a draft prepared with AI assistance and has not been reviewed by a lawyer — please have it reviewed before relying on it.

What we collect

• Account information: your email address and password (passwords are handled by our authentication provider, Supabase, and are never visible to us in plain text).
• Usage data: which questions you've answered, whether you got them right, which you've starred, and your quiz settings — stored so your progress follows you across devices.
• Login events: the time of each login and an approximate location derived from your IP address (city/country level only — not precise GPS location). This is used to help detect account sharing (MCQdog allows one active session per account) and for basic usage analytics.
• Payment information: handled entirely by Stripe. We never see or store your card details — we only receive confirmation that a payment succeeded.

Why we collect it

• To provide the Service (your account, your saved progress, access to paid content);
• To enforce one active session per account, which keeps the product fair and affordable;
• To understand how the app is used and improve it (which topics are hardest, which questions are most often flagged as wrong, etc.);
• To process payments and prevent fraud.

Who we share it with

We don't sell your data. We use the following third-party services, each of which processes data on our behalf:

• Supabase — hosts our database and handles authentication (stores your account, progress, and login records).
• Stripe — processes payments. Stripe has its own privacy policy governing the payment data it handles.
• Vercel — hosts the website and serverless functions that power the app.

How your data is protected

Your data is stored with row-level security so that, technically, your account can only ever read or write its own rows — not other users' data. Question and payment content are served only to authenticated, verified requests.

Data retention and deletion

We keep your account data for as long as your account exists. If you'd like your account and associated data deleted, contact us and we'll action it, subject to any records we're required to keep (e.g. payment records for tax/accounting purposes).

Cookies and local storage

MCQdog uses your browser's local storage (not third-party tracking cookies) to keep you signed in and to enforce the single-session-per-account rule. This is essential to how the Service works.

Children's privacy

MCQdog is intended for medical professionals studying for a postgraduate examination and is not directed at children. We don't knowingly collect data from anyone under 16.

Your rights

We handle personal information in accordance with the Information Privacy Principles under New Zealand's Privacy Act 2020. Depending on where you live, you may have rights to access, correct, or delete your personal data, or to object to certain processing. To exercise any of these rights, contact us.

Changes to this policy

We may update this policy from time to time; the "Last updated" date at the top will reflect the latest revision.

Contact

Questions about this policy or your data? Contact us.