Privacy policy
The short version
- We collect only what JMedGuide needs to work: your account details and what you save in the app.
- We never sell your data, show you ads or build an advertising profile of you.
- A few companies help us run the service: Google Cloud hosts it, Anthropic drafts Frame-your-own answers, Loops sends our emails and Google handles "Sign in with Google" if you choose it.
- Your data is stored on Google Cloud servers in the United States for now. We plan to move it to India.
- You can see and change your details in the app, and delete your account and everything in it at any time.
- JMedGuide is for people aged 18 or older.
1. Who we are
JMedGuide is a study app for MBBS students, at jmedguide.com and app.jmedguide.com. It is run by [legal name of the company], India ("JMedGuide", "we", "us"). We decide what personal data the service collects and why, so under India's Digital Personal Data Protection Act, 2023 we are the data fiduciary for it.
This policy covers students using the app and visitors to this website. Questions about it go to admin@jmedguide.com.
2. What we collect
When you create an account
- Your name and email address. Your name is shown when you share a bank.
- Your password, stored only as a one-way hash. Nobody at JMedGuide can read it.
- Your college and year, only if you choose to add them in your account settings.
- When you agreed to these terms, and which version you agreed to.
If you sign in with Google
Google tells us your name, your email address (which Google has confirmed) and an ID for your Google account. We do not receive your Google password, and we cannot see your contacts, files, email or anything else in your Google account.
What you do in the app
- Your question banks, what is in them, the questions you star and mark as read, your highlights and your reading progress.
- The links you create to share a bank, how many times each one is opened and added, and the ratings you give to shared banks.
- The questions you type into Frame your own and the drafts written for you.
- Reports you send us about an answer, and emails you send us.
Collected automatically
- A random ID for your browser, made by the app, which ties what you save to your account.
- For each device you are signed in on: when you signed in, when you last used it and your browser's identification string (for example "Chrome on Android"), so you can see and sign out your other devices.
- Security records: one-time codes (stored only as hashes), failed sign-in attempts and the time of each.
- Server logs: your IP address, the pages and requests your browser makes, the time and your browser type.
We do not collect your location, contacts, payment details or anything about your health. We do not use analytics or advertising trackers.
3. Why we use it
- To run your account: sign you in, keep your banks, highlights and progress in step on every device, and let you share banks.
- To send you emails the service needs: codes to confirm your email, password reset links, notices when your password or email changes, and a welcome email. We do not send marketing email without asking you first.
- To write Frame-your-own drafts for the questions you ask.
- To keep JMedGuide safe: limit repeated sign-in attempts, stop misuse and investigate problems.
- To fix and improve the service: find errors, and see which answers are reported or used so we know what to review next.
We use your data on the basis of the consent you give when you create your account, and, where the law allows, to keep the service secure and to meet legal duties. You can withdraw your consent at any time by deleting your account.
4. Who helps us run JMedGuide
These companies process data for us, only for the purposes below and under contracts that require them to protect it. We never sell your data or share it for advertising.
| Company | What they do | What they receive |
|---|---|---|
| Google Cloud | Hosts the app, its database, backups and logs | Everything stored in JMedGuide, kept on our servers |
| Anthropic | Its AI model, Claude, drafts answers, including your Frame-your-own drafts | The text of the question you frame and textbook passages. Not your name, email or account details. Under Anthropic's commercial terms it does not train its models on this text, and it deletes it within 30 days unless it must keep it longer to investigate misuse. |
| Loops | Sends our emails | Your name and email address, and the content of each email |
| "Sign in with Google" | The app's sign-in screens load Google's sign-in button, so Google sees your IP address and browser details there. If you use it, Google sends us the details listed in section 2. | |
| Google Fonts | Serves the typefaces the app uses | Your IP address and browser details when the app loads its fonts |
We may also disclose data if the law requires it, for example to answer a valid order from a court or a government authority, or to protect the safety of our users.
When you share a bank, anyone with the link can see the bank's name, its questions and the name you share it under. You can turn a share link off at any time.
5. Where your data is stored
JMedGuide runs on Google Cloud servers in Iowa, in the United States. We plan to move it to Google Cloud in Mumbai, India, and will update this policy when we do. Anthropic and Loops process data in the United States. Indian law allows this transfer, and we will follow any restrictions the Government of India places on transfers to particular countries.
6. How long we keep it
- Your account and everything saved in it: until you delete your account. Deleting it removes them from the app at once.
- Backups: nightly copies of the database are kept for 30 days and then deleted, so deleted data disappears from backups within 30 days.
- Server logs: 30 days.
- One-time codes and reset links: they stop working after 10 minutes or one hour; the hashed records are removed when your account is deleted.
- Emails we sent you: Loops keeps a record of each email for a limited time to show whether it was delivered.
We keep data longer only where the law requires it, for example records needed to resolve a dispute.
7. What we keep on your device
The app stores a few things in your browser's storage: your sign-in token, the random browser ID, your light or dark setting and, if you download chapters, their questions, answers and diagrams for offline reading. These are needed for the app to work, so there is no cookie banner. We do not use advertising or tracking cookies. Signing out removes your sign-in token; clearing your browser's data for the site removes everything.
This website (jmedguide.com) uses no cookies and loads nothing from other companies.
8. Your rights and choices
- See and correct your details: in the app, open Me and tap your name to change your name, email, password, college and year.
- Delete your account: on the same screen, tap Delete my account. Your banks, highlights, progress, Frame-your-own drafts, share links and ratings are deleted with it.
- Get a summary of your data, or ask us anything about how we use it: email us.
- Nominate someone to exercise these rights for you if you die or become unable to: email us.
- Withdraw consent: delete your account. This does not affect what we did before you withdrew it.
We answer requests within 30 days, and may ask you to confirm the request from the email address on your account.
9. Sign in with Google
If you choose "Sign in with Google", JMedGuide asks Google only for your basic profile (name), your email address and your Google account ID. We use them only to create your account and sign you in. We do not use them for advertising, we do not sell them, and we do not share them with anyone except the companies in section 4 that help us run the service.
JMedGuide's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
You can remove JMedGuide's access at any time in your Google account under Security, then Third-party apps and services. Your JMedGuide account stays until you delete it.
10. Age
JMedGuide is for people aged 18 or older, and you confirm your age when you create an account. If we learn that an account belongs to someone under 18, we will delete it.
11. How we protect your data
Everything travels over HTTPS. Passwords, codes and sign-in tokens are stored only as hashes. Our servers accept only web traffic, and only a few named people can reach them, through Google's Identity-Aware Proxy. Keys are kept in Google Cloud's Secret Manager, data is encrypted at rest, and backups are kept in a private bucket. No system is perfectly secure; if a breach affects your data, we will tell you and the Data Protection Board of India as the law requires.
12. Changes to this policy
If we change this policy, we will update the date at the top. If a change affects how we use your data, we will tell you in the app or by email before it takes effect.
13. Contact and complaints
Email admin@jmedguide.com with any question or complaint about your data. Our grievance officer, [name], reads every message at that address and will reply within 30 days.
If you are not satisfied with our reply, you can complain to the Data Protection Board of India.