Privacy policy

Last updated: 4 October 2026

Who is responsible

MediFries is responsible for your personal information. Contact info@medifries.com for support or questions about your information.

MediFries is a medical learning app. It is not a clinical record or a personalised healthcare service. Do not put identifying information about patients into notes, images or support messages.

Studying without an account

An account is optional. Study history, personal notes, attached photos and preferences are saved on your device. The app checks for learning-content updates; hosting services receive connection information, such as your IP address, when it connects.

MediFries progress backup does not upload your personal notes or photos. Apple's device backups may include app files according to your device settings and Apple's policies.

Accounts and sign-in

For email sign-in, we use your email address to create or access an account and send a one-time code. Supabase manages authentication and Resend delivers these emails. Your account has a unique identifier. The app keeps its sign-in session securely on your device using the Keychain.

If an Apple or Google sign-in option is available in your app version and you choose it, that provider confirms your identity to Supabase. Apple may provide an email address or private relay alias and an account identifier; MediFries does not request your full name from Apple. Google may provide your email, identifier, name and profile metadata such as an avatar URL. Supabase may retain these in account metadata. MediFries does not request your Gmail messages, Drive files or Calendar. Provider passwords are entered in their sign-in interface, not collected by MediFries.

Authentication and email services also process connection, security and delivery records, including IP addresses, sign-in events, email recipients and delivery status.

Optional progress backup

When you choose Enable backup, the app sends your question attempts, selected answers, correctness, study timestamps, flashcard ratings and review schedule to our server. These are linked to your account to restore progress and personalise your learning schedule. Backup runs when you learn or reopen the app.

You can pause future backup on this device in Account settings. Pausing retains the existing cloud copy and does not pause another device. Signing out stops account-backed activity on this device; it does not delete the account or stored progress.

Why we use information

We use account information and requested backup data to provide the features you choose, on the basis of performing our service contract with you. We use necessary security and connection records, and support correspondence, for our legitimate interests in keeping the service secure, fixing problems and responding to requests. We limit this use to what is needed for those purposes. We may also retain information where a legal obligation requires it.

Learning estimates and scheduling help you study. They are not decisions about your employment, education eligibility or clinical competence.

Services and international processing

• Supabase: authentication, learning-content hosting and optional progress backup. Our database project is hosted in London; its wider service operations and subprocessors may process information elsewhere.
• Resend: sign-in email delivery. We use its Ireland sending route. Resend stores account information, email metadata, logs and API records in the United States regardless of the sending region.
• Hostinger: our support mailbox and domain services.
• Cloudflare: hosting these information pages and processing the connection/security information needed to serve and protect them.
• Apple and Google: identity services if you choose their sign-in option; their own privacy policies also apply.

We use service-provider data-processing terms and applicable transfer safeguards, including standard contractual clauses and the UK addendum where relevant, for processing outside the UK. Contact us for information about the safeguards applicable to your data.

We do not sell personal information. MediFries has no advertising or cross-app tracking integration. These pages use no analytics scripts, tracking pixels, contact forms or advertising cookies. We have not enabled email open or click tracking for sign-in emails.

Retention and deletion

We retain your account and backed-up study information while you keep the account, unless you request deletion. There is currently no automatic inactive-account deletion policy. In the app, choose Settings → Account → Delete account. After successful deletion, the account and associated learner records are removed from the active application database. Local study history remains, as the confirmation explains; backup is off until you sign in and enable it again. See deletion instructions.

Resend's current free plan retains email records for 30 days. Supabase's current free plan makes API and database logs available in its dashboard for one day. We do not store an additional database copy of sign-in audit records. Other provider service and security records may have different retention periods: these are kept as needed to operate and protect the service, investigate problems and meet applicable obligations, under the provider's retention process. Any records required for an unresolved security incident or legal obligation may be retained until it is resolved. Account deletion does not immediately erase every provider log or Apple device backup.

We keep support correspondence for as long as needed to respond to and resolve your request, and to deal with related complaints or legal obligations. Personal notes, photos and local study history stay on your device until you remove them or the app's local data.

Your choices and rights

You can study without an account, enable or pause backup, sign out and delete an account. Depending on the circumstances, you have rights to access, correct, erase, restrict or object to use of your information, and to receive portable copies of relevant information.

Email info@medifries.com to make a request. We may need to verify your identity to protect your information. You can complain to the UK Information Commissioner's Office.

Your right to object

You can object to our use of your information for legitimate interests, including security and support, by emailing info@medifries.com. Tell us which use you object to and why. We will consider your circumstances and stop that use unless we have overriding legitimate grounds or need it for legal claims.

Audience and changes

MediFries is intended for medical learners and healthcare professionals. We will update this policy if the app's data use changes materially. The date above identifies the current version.

Provider information

Supabase privacy · Resend privacy · Hostinger privacy · Cloudflare privacy · Google privacy · Apple privacy