Privacy Policy

• Account details. Your email address, and a display name if you provide one. If you sign in with Google, we receive your email address, name and profile picture from Google — nothing else, and we never receive your Google password.
• Learning data. The cases you attempt, the answers and confidence ratings you give, where you clicked on an image, your scores, bookmarks and progress. This is what makes the dashboard and your streak work.
• AI tutor conversations. Stored only when you are signed in and have consented to conversation history. You can withdraw that consent at any time in your account settings.
• Technical data. Standard server logs, and error reports if error tracking is enabled. We do not use advertising cookies and we do not sell or share data with advertisers.

QSpace and AnkiGen deserve their own explanation, because uploading your notes is the most sensitive thing you can do here.

• Your files are opened and read in your browser. The file itself is never uploaded to our servers.
• To write questions or cards, short excerpts of your material are sent to our AI provider, processed, and used to generate the result. We do not store those excerpts afterwards, and we do not use your material to train any model.
• The generated question bank or deck lives in your browser for the session. Closing the tab discards it, which is why the tools offer an export.

Do not upload material containing patient-identifiable information. These tools are built for lecture notes, textbooks and your own summaries.

We use a small number of processors, and only to run the service:

• Supabase — authentication, database and file storage.
• Vercel — hosting and delivery.
• Google — only if you choose to sign in with Google.
• An AI model provider — for tutor replies and for generating questions and flashcards from the excerpts described above.

We do not sell your personal data. We disclose it otherwise only where we are legally required to.

No patient-identifiable information appears in our case libraries. Every published image passes a documented rights, privacy and medical-review workflow before it is visible — including metadata stripping and, for DICOM, header de-identification — and only approved, de-identified derivatives are ever served. Original files stay in private storage.

• See and correct your profile from your account settings.
• Withdraw AI conversation consent at any time, which stops new conversations being stored.
• Delete your account. Deletion removes your personal learning data — attempts, bookmarks, progress and stored conversations — not only your login.
• Request a copy of your data, or ask us to delete it, by emailing mediverse.space@gmail.com.

Depending on where you live you may have additional rights over your data, including access, correction, portability and erasure. Contact us and we will honour them.

Account and learning data is kept while your account exists, and removed when you delete it. Access is protected by row-level security policies in the database, so one account cannot read another’s data. No system is perfectly secure, but personal learning data is never public and there are no public profiles, rankings or leaderboards.

Mediverse is intended for medical students and clinicians, and is not directed at children under 13. If you believe a child has created an account, contact us and we will remove it.

If this policy changes we will update the date at the top of this page. For anything privacy-related, email mediverse.space@gmail.com.

See also our Terms of Service.