Legal

Privacy Policy

Effective date: April 27, 2026 · Last updated: April 27, 2026

1. Overview

StepwiseMed ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains what information we collect, how we use it, and what rights you have in relation to it when you use the StepwiseMed platform — including our web application, progressive web app (PWA), and related services (collectively, the "Service").

By using our Service, you agree to the collection and use of information in accordance with this policy. If you do not agree, please discontinue use of the Service.

2. Information We Collect

We collect only the information necessary to provide and improve the Service:

Account information: When you create an account, we collect your name and contact information (such as phone number or email address) provided at registration.
Usage data: We collect data about how you interact with the platform — questions attempted, accuracy rates, time per question, session logs, and feature usage. This data is used to power your performance dashboard and score predictor.
Device information: We record the devices on which your account is accessed, including device type, operating system, and browser/app version, for the purpose of enforcing our device access policy (see Section 4).
Technical data: IP addresses, access timestamps, and error logs may be collected for security monitoring and service reliability.
AI interaction data: Queries submitted to the built-in AI assistant may be stored temporarily to improve response quality. No personally identifiable information should be included in AI queries.

We do not collect payment card numbers or sensitive financial data directly — any payments are processed through secure third-party payment providers.

3. How We Use Your Information

We use the information we collect to:

Provide, maintain, and improve the Service
Personalise your study experience and generate performance insights
Enforce account security, device limits, and our Terms of Service
Respond to your support requests and communications
Send service-related notifications (such as account or access updates)
Detect and prevent fraud, abuse, or unauthorised access
Comply with applicable legal obligations

We do not sell, rent, or trade your personal data to third parties for marketing purposes.

4. Device Access & Session Limits

To protect the integrity of the Service and ensure fair use, the following device restrictions apply to all accounts:

Maximum of 3 simultaneous device logins per account. A "device" is defined as any unique browser or app installation on a physical device (phone, tablet, laptop, or desktop).

If you attempt to log in from a fourth device while three active sessions already exist, the oldest active session will be automatically terminated, or you will be prompted to log out from an existing device before proceeding.

Sharing account credentials with other individuals is a violation of our Terms of Service and may result in immediate account suspension.

We reserve the right to flag and investigate accounts that show access patterns inconsistent with individual use. Accounts found to be in violation of device-sharing policies will be suspended without refund.

5. AI-Powered Features

The Service includes AI-powered features such as the "Ask AI" assistant, the Score Predictor, and the personalised Study Plan generator. These features process your usage data and submitted queries to generate responses and recommendations.

AI-generated explanations and predictions are for educational guidance only and do not constitute medical advice.
Do not submit personally identifiable information (such as your full name, ID number, or patient data) in AI query fields.
AI responses are generated automatically and may occasionally contain errors. Always cross-reference with authoritative medical resources.
Query data submitted to AI features may be reviewed by our team in anonymised form to improve model accuracy.

6. Data Retention

We retain your account and usage data for as long as your account is active or as needed to provide you with the Service. If you request account deletion, we will delete or anonymise your personal data within 30 days, except where we are required to retain it by law (e.g. for fraud prevention or legal compliance).

Aggregated and anonymised data (which cannot be used to identify you) may be retained indefinitely for product improvement purposes.

7. Data Security

We implement industry-standard security measures to protect your data, including:

Encrypted data transmission (TLS/HTTPS) for all network communications
Secure credential storage using cryptographic hashing
Access controls limiting data access to authorised personnel only
Regular security reviews and monitoring

However, no method of transmission over the internet or method of electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

8. Sharing of Information

We do not sell your personal data. We may share data only in the following limited circumstances:

Service providers: We use third-party services (such as cloud infrastructure and analytics providers) that process data on our behalf under strict data processing agreements.
Legal requirements: We may disclose data if required to do so by law, court order, or governmental authority.
Business transfers: In the event of a merger, acquisition, or asset sale, your data may be transferred as part of that transaction. We will notify you of any such change.

9. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

Access: Request a copy of the personal data we hold about you.
Correction: Request correction of inaccurate or incomplete data.
Deletion: Request deletion of your account and associated personal data.
Objection: Object to certain types of data processing.
Portability: Request a machine-readable export of your data.

To exercise any of these rights, contact us via WhatsApp at +92 330 6384606 or by email at contact@stepwisemed.app. We will respond within 30 days.

10. Children's Privacy

The Service is intended for use by medical students and healthcare professionals. We do not knowingly collect personal data from individuals under the age of 16. If you believe a minor has created an account, please contact us immediately and we will promptly remove the data.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date at the top of this page and, where appropriate, notify you directly. Continued use of the Service after such changes constitutes your acceptance of the updated policy.

12. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

WhatsApp: +92 330 6384606
Email: contact@stepwisemed.app
Instagram: @stepwisemed.app