Last updated: 17 July 2026

Privacy Policy

This policy explains how MedDex handles personal data used to operate the learning platform.

Information we collect

We collect account information such as your name, email, university, profile details, learning progress, deck ownership, subscription status, usage data, and AI interaction data. We may also collect technical and security data needed to maintain, protect, and improve MedDex.

MedDex Lens images

MedDex Lens processes an uploaded image to create an educational analysis. Do not upload an image that identifies a patient, contains visible names or identifiers, or that you are not authorised and consented to use. Images submitted for an ordinary Lens analysis are staged in encrypted storage only while the queued analysis runs and are then deleted. They are marked as ineligible for training. Short-lived structured results may be cached to resume the analysis and prevent duplicate processing.

Lens processing is performed by MedDex's dedicated MedGemma service and is kept separate from Gemini-powered chat and study features. Operational logs exclude image bytes, model-generated medical text, filenames, and direct patient identifiers.

Dataset contributions

An ordinary Lens upload never becomes training data. A separate dataset contribution requires an explicit submission, appropriate rights and consent, de-identification, annotation, quality control, and approval by authorised reviewers. Only an immutable approved dataset version may be used in model development. You may withdraw a contribution before it is included in a released dataset, subject to applicable legal and research-retention requirements.

Payments

Payments are handled by Stripe. MedDex does not store your card number or full card details. Stripe processes payment data under its own privacy policy.

How we use data

We use data to provide your account, sync learning progress, manage access and fair-usage limits, personalise learning features, prevent fraud, provide support, and improve reliability. We do not use Lens output to make automated patient-care, insurance, employment, admission, or other decisions about a person.

Security, retention, and rights

We use access controls, encryption, short retention periods, audit records, and separation between ordinary uploads and approved datasets. No online service is completely secure. You may request access, correction, or deletion of personal data subject to legal, safety, and operational requirements.

Contact

For privacy questions or requests, contact meddexedtech@gmail.com.