Privacy policy

We only collect the information necessary to operate the platform:

• Account data: name, e-mail address and password (encrypted).
• Progress data: your exercise answers, practice exams, audio recordings (speaking simulator) and your learning statistics.
• Payment data: processed entirely by our certified provider Stripe — MedyTCF never stores your banking details.
• Technical data: IP address, device and browser type, used for account security and abuse prevention (account sharing, quotas).

• Create and secure your account, manage your access to paid plans.
• Display your progress and statistics on the dashboard.
• Evaluate your written and spoken productions using our artificial intelligence tools.
• Send you important transactional e-mails (credentials, payment confirmation, password reset).
• Prevent fraud, unauthorized account sharing and quota abuse.

We never sell or rent your personal data. It is shared only with the providers strictly necessary to run the service:

• Supabase: database hosting and authentication.
• Google (Gemini): conversational oral simulator and text-to-speech — your audio responses are not used to train their models.
• Groq: automated evaluation of your written and spoken productions.
• Stripe: secure card payment processing.
• Brevo: sending transactional e-mails (credentials, account notifications).

All transactions are processed through a certified external gateway (Stripe) for international card payments. MedyTCF never has access to your full card number and never stores it on any server.

We use cookies strictly necessary to maintain your login session and remember your preferences (light/dark theme, language). You can configure your browser to block cookies, but some features of the site may then stop working correctly.

Your passwords are stored encrypted. We implement reasonable technical measures to protect your data against unauthorized access. Your data is kept for as long as your account remains active; you may request its deletion at any time (see next section).

In accordance with applicable data protection regulations, you have the following rights:

• Right of access to your personal data.
• Right to rectify inaccurate data.
• Right to delete your account and all your data.
• Right to restrict or object to processing.

To exercise any of these rights, write to us at the address below with the subject "GDPR Request." We process requests within 72 hours.

For any question about this privacy policy, contact us at info@medyzeus.com.