Privacy Notice

Information stored on your device

Study preferences, recent questions, progress, language choice, and your acceptance date/version may be stored in your browser using local storage. Clearing browser data can remove it.

Account and study information

When you create an account, you sign in directly to DrBeka with your DrBeka email and password. Supabase provides the authentication and database services used for your account identifier, email address, profile details, and session. DrBeka may store your study profile, exam goal, availability, progress events, flashcards, typed notes, uploaded study documents, subscription status, and account timestamps so those features can work across devices.

You can delete your DrBeka profile and associated study data from the Account page. When billing is provided through Stripe, deleting the account also cancels active Stripe subscriptions linked to that account. Subscriptions managed through another provider must be canceled with that provider.

Uploaded study documents

PDFs and lecture images you upload are stored in private, account-owned file storage. DrBeka stores document details such as the filename, content type, size, owner, and upload date. Documents are available only after an account ownership check and can be deleted from Study Notes.

Upload only material you are permitted to use. Never upload patient records, clinical photographs, identifying health information, answer keys obtained without authorization, or copyrighted material you are not allowed to store or process.

AI and medical-reference services

When you ask DrBeka a study question, the text you submit may be sent to an AI or medical-reference provider to generate an answer or retrieve sources. This can include OpenAI. If you choose translation, Google Translate helps translate the page. Please keep questions to study topics and leave out patient or other sensitive information.

Language and translation

Page translation is an optional machine-translation feature. When you turn it on, visible page text may be sent to Google Translate so the translated page can be displayed. Do not include patient information, private health information, credentials, or other confidential content in text you submit for translation.

Machine translation may be incomplete, outdated, or wrong—especially for medical terms, numbers, units, medication names, and instructions. The English source text and linked references control if a translation differs. Translation is not a professional translation, medical advice, or a substitute for checking an authoritative source, instructor, or licensed clinician.

Services, cookies, and international processing

Services that help DrBeka run include hosting, Supabase, Stripe when billing is enabled, OpenAI for configured AI features, and Google Translate when requested. They may process information in the United States or elsewhere under their own privacy policies. Your browser may remember language, theme, and sign-in preferences.

Billing

When subscriptions are enabled, checkout and billing management are handled by the configured payment provider. DrBeka stores the identifiers and subscription status needed to grant access, but it does not receive or store full payment-card numbers. The payment provider’s terms and privacy notice also apply.

Support requests

When support intake is enabled, DrBeka stores the name, reply email, category, subject, message, request status, and a security rate-limit hash. Support requests are scheduled for deletion after 90 days, although a legal hold, dispute, security investigation, or backup may require longer retention. Never include patient data, passwords, codes, or card details.

What not to submit

Never enter a patient name, date of birth, address, medical-record number, account number, identifiable photo, detailed case record, or other protected health information. Use fictional or de-identified study examples only.

Voice and audio

The browser requests microphone permission only after you tap a dictation or recording control. Study-note recordings stay in the current browser tab by default and are not sent to DrBeka or AI. They disappear when the tab reloads unless you download them. Speech dictation may use the browser or operating system speech service; consult your browser provider’s privacy information.

Product usage and security

The private owner dashboard reports aggregate counts derived from registered profiles and study activity, such as active studying users and questions answered. DrBeka does not currently use third-party advertising trackers on this dashboard. Technical logs may be processed by hosting providers for security, reliability, and abuse prevention. We use administrative, technical, and organizational safeguards, but no internet service can promise perfect security.

Retention, requests, and deletion

We keep account and study information only as long as needed to provide the service, comply with law, resolve disputes, enforce agreements, or protect the service. You may request access, correction, or deletion of DrBeka data through the Account page when available or by emailing contact@drbeka.com. We will verify the request and explain any legal exception or backup-retention period that applies. Clearing browser storage removes device-local preferences but does not delete server-side account data.

Security incidents

If we discover unauthorized access or disclosure, we will investigate, contain the incident, preserve evidence, and provide notices required by applicable law. Do not email passwords, verification codes, payment-card details, or patient information when reporting an incident.