# DE.med Privacy Policy

> Privacy Policy for DE.med, the app for international medical professionals preparing for medical licensure in Germany.

Canonical: https://medhub.one/privacy/demed
Last updated: 2026-09-04

Last updated: March 9, 2026

This policy explains how **Medhub** (operator of DE.med) collects, uses, and protects your information when you use the DE.med mobile application and related services. DE.med helps international medical professionals prepare for the Fachsprachprüfung (FSP) and Kenntnisprüfung (KP) required for German medical licensure.

## 1\. Data Controller

The data controller for DE.med is **Medhub**. Contact: [contact@medhub.one](mailto:contact@medhub.one)

## 2\. Information We Collect

### Account Data

When you register, we collect your email address and chosen display name. This data is stored in our secure Supabase database and is required to provide the service.

### Usage and Learning Data

We store your quiz answers, flashcard progress, spaced repetition scores, and study pathway progress to provide personalised learning recommendations and track your advancement toward German medical licensure.

### Audio Data (FSP Simulation)

The FSP simulation feature uses your microphone for voice-based patient dialogue practice. Audio recordings are processed in real time via Groq Whisper for speech-to-text transcription. Audio is not stored permanently on our servers.

### Payment Data

Subscription purchases are handled by RevenueCat (mobile) and Stripe (web). We do not store your payment card details. Please review RevenueCat and Stripe privacy policies for details on how they handle payment information.

### Error and Analytics Data

We use Sentry for crash reporting. Crash reports may contain device type, OS version, and anonymised stack traces. No personally identifiable information is included in crash reports.

## 3\. Legal Basis (GDPR)

We process your personal data under the following legal bases:

* **Contract performance**: account data and learning progress are necessary to deliver the service you signed up for.
* **Legitimate interests**: crash reports and aggregate analytics help us improve the application.
* **Consent**: microphone access for FSP simulation, which you can revoke at any time in your device settings.

## 4\. Data Sharing

We do not sell your personal data. We share data only with the following sub-processors necessary to operate the service: Supabase (database and authentication), RevenueCat (in-app purchases), Stripe (web payments), Groq (speech transcription), OpenAI (AI grading and feedback), Sentry (error tracking), and Google Cloud (text-to-speech).

## 5\. Data Retention

Your account and learning data are retained as long as your account is active. You may request deletion of your account and all associated data at any time by contacting [contact@medhub.one](mailto:contact@medhub.one). Data will be deleted within 30 days of your request.

## 6\. Your Rights (GDPR)

Under the General Data Protection Regulation you have the right to: access your data, correct inaccuracies, request erasure, restrict processing, data portability, and object to processing. To exercise any of these rights, contact [contact@medhub.one](mailto:contact@medhub.one).

## 7\. Children

DE.med is intended for adults (18+) who are qualified or training medical professionals. We do not knowingly collect data from children under 13\. If you believe a child has provided us with personal data, please contact us immediately.

## 8\. Changes to This Policy

We may update this policy periodically. We will notify you of significant changes via email or in-app notification. Continued use of DE.med after changes constitutes acceptance of the updated policy.

## 9\. Contact

For any privacy-related questions, please contact: [contact@medhub.one](mailto:contact@medhub.one)