MEDWORLD Privacy Policy

Effective date: 1 November 2026

Last updated: 2 November 2026

1. Who we are and what MEDWORLD does

MEDWORLD is an academic learning and examination-preparation platform for university medical students aged 18 and above. Current coverage is pre-clinical Anatomy, Biochemistry, Physiology, Embryology and Histology. MEDWORLD is operated by Jolaoso Emmanuel Toluwanimi, based in Nigeria. Contact medworld.tutorial@gmail.com for privacy, support and rights requests.

MEDWORLD provides academic practice, flashcards, curated learning materials, bookmarks, performance analysis and structured tutorials. Hypothetical Clinical Scenarios are examination questions. We do not provide healthcare, diagnose or treat patients, assess symptoms, prescribe medication, maintain patient records or support real-patient clinical decisions. Do not enter real patient information into the app or teaching materials.

This policy explains how MEDWORLD handles personal information when you use the app. We update it when our data practices change.

2. Information processed and why

Account and profile: Supabase Authentication handles your registration email, password authentication and session credentials. The app lets you provide your name, university or institution, course and training stage to maintain your student profile. It does not currently request your telephone number, patient history, health measurements or identity documents. Do not send your password or verification codes to support.

Study activity: we store your account-linked practice scores, subject/topic/subtopic breakdowns, earned and available marks, time spent and attempt identifiers to show academic progress. Completed attempt history also contains question snapshots, selected MCQ responses and written theory answers, session settings, timestamps and results so you can review your work. These are academic records, not assessments of health or clinical competence.

Revision and progress: we store saved bookmark content and identifiers; flashcard review ratings, recall outcomes, due dates, intervals, scheduling history, study-session selections and daily new-card preferences; and topics you mark Finished. Library and Virtual Lab completion records are separate.

Access: we store your Premium entitlement expiry, verification timestamp and source to control access. Subscription purchases are not available in the app at present. We do not collect card details or process payments in this version.

Teaching administration: authorised content personnel submit selected content files, question banks and teaching descriptions. We process uploader and reviewer account references, file names, file sizes, content hashes, scan and approval status, and publication records. Tutorial records include the tutor account, syllabus topic, optional description, schedule, duration, publication state, external class link and attachment metadata. These support safe publication, class scheduling and access control. The student Library is curated by MEDWORLD; it is not a public file-sharing service and students cannot upload personal notes into it.

Support: if you choose to email us, Gmail processes your email address, message and any attachments. Send only information needed to resolve your request; avoid patient information, payment credentials and unnecessary sensitive documents. Feedback currently uses support email, not an in-app rating database.

Technical operations: requests to Supabase and services you choose to open transmit network information, including IP addresses and request metadata, needed to deliver and secure the service. Providers may keep operational and security logs under their own terms. MEDWORLD does not currently use advertising SDKs or dedicated third-party behavioural analytics or crash-reporting services.

3. Storage on your device

The app stores sign-in/session information, appearance preferences, text size, reminder settings, account-scoped bookmark caches and pending changes, and practice recovery/history data on your device. Pending study results and bookmarks are retried when connectivity returns. A failed connection can delay synchronisation; another device may not immediately show the same records.

Study and class reminders are scheduled locally with device notification permission where required. Reminder times and class reminder identifiers are stored locally. This is not a remote push-messaging service or attendance tracker. PDFs are fetched from protected storage and temporarily processed for the Android reader.

4. Service providers and who can access data

Supabase provides authentication, database, file storage and server-side functions. Account-linked student tables are protected by ownership-based database policies. Being a tutor does not give access to other students' profiles, private bookmarks, answers, performance records or entitlement records through the tutor app. Tutors manage their own teaching content and classes under their assigned permissions; the owner can review and approve organisational content and class publication. Authorised backend operators can have privileged access when necessary for operation, security, support or lawful requests.

File checks currently run through MEDWORLD's private scanner on the publisher's trusted Windows PC using ClamAV and PDF validation tools. Selected administrator/tutor files are temporarily downloaded there for checks before approved delivery through Supabase Storage. Our scanner does not submit files to a public malware-scanning website. Scan approval reduces risk but is not a guarantee that a file is harmless or academically accurate.

Tutorials can open Google Meet or Google Classroom outside MEDWORLD. Google and the tutor may see information you provide or expose while using those services, such as your chosen account/display name and participation. Those services have their own privacy controls and terms. MEDWORLD currently has no in-app attendance roster, recording system or student participation-tracking feature. A scheduled LIVE indicator is not an attendance record. Gmail also processes support correspondence you send us.

We do not sell personal information. We may disclose information where legally required or reasonably necessary to investigate abuse, secure the service or protect legal rights. We do not publish student scores in a MedClash leaderboard in this build.

5. Purposes and lawful grounds

We use account, study and entitlement data to provide the learning services you request; teaching records to operate and moderate educational publishing; and necessary technical information to secure and maintain the service. We use support messages to answer your request. Where applicable, the relevant lawful grounds include providing the requested service, legitimate interests in safe operation subject to your rights, compliance with legal obligations, and consent where the law requires it. A device permission is not blanket consent to unrelated processing. Where we rely on consent, you may withdraw it without affecting earlier lawful processing.

6. Storage locations, safeguards and retention

Supabase and Google may process information in countries other than your own. Data protection rules can differ between countries. International processing is subject to applicable data protection requirements; contact us with questions about the services handling your information.

We use authenticated access, database ownership controls, protected file storage, content approval and server-side authorisation. No network, device or storage system is completely secure. Protect your device and email account, and contact support if you suspect unauthorised access.

Active account and learning records are kept while needed to provide your account and study history unless you remove supported records or delete your account. Account deletion removes the account and associated active learning records through the deletion workflow. Device caches on other or offline devices may persist until they are cleared or the app processes the account change; deletion cannot erase copies you exported or sent to another service.

Support correspondence is retained as needed to address your request, resolve disputes and meet applicable legal obligations. Operational logs and backup copies may be retained separately from active account records under service-provider processes. Removing active account data does not immediately erase every backup copy.

7. Your choices and requests

You can edit supported profile details, remove bookmarks, delete supported attempt-history entries, change reminder settings and disable notification permission in your device settings. You can request access, correction or deletion, or raise an objection, restriction or portability request where applicable law provides those rights, by emailing medworld.tutorial@gmail.com. We may need proportionate proof that the account is yours; never send a password or verification code. We will explain any lawful limitation on a request. Contact us first with a concern; where applicable you may also complain to the Nigeria Data Protection Commission or your relevant supervisory authority.

To delete your account in the app, open Settings, choose Delete account, and complete the confirmation and password check. The server verifies the account, prepares associated file cleanup, revokes sessions and permanently deletes the account and linked active learning records. Connectivity or cleanup failures can require support. Do not assume that a failed request completed; follow the confirmation shown. Password recovery cannot restore a deleted account. Once store billing exists, account deletion must not be assumed to cancel a separately managed subscription.

You may also request deletion by emailing support without reinstalling the app.

8. Adults and policy updates

MEDWORLD is intended for university medical students aged 18 and above and is not directed at children. We do not collect identity documents or dates of birth for age verification. If you believe a child has supplied personal information, contact support so we can review and address it appropriately.

We will update this policy when processing changes and use an appropriate notice for material changes. Where law requires specific consent, we will request it separately. Reading this policy is not treated as blanket consent.

9. Website visits

Our website provides product, support and policy information. Hosting services process network requests, such as IP addresses and browser/request information, to deliver and secure these pages. We do not use advertising trackers on these pages. A deletion-request email link opens your own email service; preparing that email does not itself submit or complete an account deletion.

10. Contact

MEDWORLD

Operator: Jolaoso Emmanuel Toluwanimi, Nigeria

Privacy and support: medworld.tutorial@gmail.com