Privacy Notice

Information stored on your device

Study preferences, recent questions, progress, language choice, and your acceptance date/version may be stored in your browser using local storage. Clearing browser data can remove it.

Account and study information

When you sign in, ChatGPT provides DrBeka with an account identifier, email address, and available display name. DrBeka uses Supabase authentication and database services to manage the account and session. DrBeka may store your study profile, exam goal, availability, progress events, flashcards, typed notes, uploaded study documents, subscription status, and account timestamps so those features can work across devices.

You can delete your DrBeka profile and associated study data from the Account page. Deleting DrBeka data does not delete your ChatGPT account or automatically cancel an external subscription.

Uploaded study documents

PDFs and lecture images you upload are stored in private account-owned object storage. DrBeka stores document metadata such as the filename, content type, size, owner, and upload date. Documents are available only through an authenticated ownership check and can be deleted from Study Notes.

Upload only material you are permitted to use. Never upload patient records, clinical photographs, identifying health information, answer keys obtained without authorization, or copyrighted material you are not allowed to store or process.

AI and medical-reference services

When you ask DrBeka a study question, the right service may help us find an answer or a source. This can include OpenAI or a medical-reference provider. If you choose translation, Google Translate helps translate the page. Please keep questions to study topics and leave out patient or other sensitive information.

Providers, cookies, and international processing

A few trusted services help DrBeka run, including hosting, Supabase, Stripe when billing is enabled, OpenAI, and Google Translate when requested. They may process information in the United States or elsewhere under their own privacy policies. Your browser may remember language, theme, and sign-in preferences.

Billing

When subscriptions are enabled, checkout and billing management are handled by the configured payment provider. DrBeka stores identifiers and subscription status needed to grant access, but it does not receive or store complete payment-card numbers. The payment provider’s terms and privacy notice also apply.

Support requests

When support intake is enabled, DrBeka stores the name, reply email, category, subject, message, request status, and a security rate-limit hash. Support requests are marked for deletion after 90 days unless longer retention is required to resolve a dispute, comply with law, or protect the service. Never include patient data, passwords, codes, or card details.

What not to submit

Never enter a patient name, date of birth, address, medical-record number, account number, identifiable photo, detailed case record, or other protected health information. Use fictional or de-identified study examples only.

Voice and audio

The browser requests microphone permission only after you tap a dictation or recording control. Study-note recordings stay in the current browser tab by default and are not sent to DrBeka or AI. They disappear when the tab reloads unless you download them. Speech dictation may use the browser or operating system speech service; consult your browser provider’s privacy information.

Product usage and security

The private owner dashboard reports aggregate counts derived from registered profiles and study activity, such as active studying users and questions answered. DrBeka does not currently add invasive third-party advertising trackers for this dashboard. Technical logs may be processed by hosting providers for security, reliability, and abuse prevention. We use reasonable administrative, technical, and physical safeguards, but no online service can guarantee perfect security.

Retention, requests, and deletion

We retain account and study information while your account or the requested feature requires it, and longer when needed for security, billing, legal obligations, dispute resolution, or backups. You may request access, correction, or deletion by emailing contact@drbeka.com or using the Account page where available. Browser-only local-storage data must be removed in your browser settings.

Security incidents

If we discover a security incident involving personal information, we will investigate, contain it, and provide notices required by applicable law. Do not email passwords, authentication codes, payment-card details, or patient information.