Medpass
Last updated: 26 April 2026

Privacy Policy

1. Who we are

Medpass operates at medpassgh.com. When we say “we”, “us”, or “Medpass”, we mean the team behind this service. For data questions, contact hello@medpassgh.com.

2. What data we collect

We collect:

  • Account data: your name, email address, school, and year of study when you register.
  • Study data: the questions you attempt, your answers, time spent, and session history. This is used to power analytics and personalisation.
  • Payment data: subscription plan, transaction references, and timestamps. Card or mobile money details are handled entirely by Paystack — we never see them.
  • Technical data: browser type, approximate location (country-level), and usage patterns via server logs. We do not use third-party tracking cookies.

3. How we use your data

We use your data to:

  • Provide and improve the question bank and practice features.
  • Track your subscription status and process payments.
  • Send transactional emails (account confirmation, password reset, billing receipts). We do not send marketing emails without your consent.
  • Diagnose bugs and improve site performance.

4. Data processors

We use the following third-party services to operate Medpass. Each processes your data only as necessary to provide their service:

  • Supabase — database and authentication. Data is stored in the EU (Frankfurt).
  • Paystack— payment processing. Subject to Paystack's own privacy policy.
  • Vercel — hosting and edge delivery.

5. Data retention

We retain your data for as long as your account exists. If you delete your account, your personal data is removed from our systems within 30 days. Study history may be retained in anonymised, aggregated form for analytics.

6. Your rights

You have the right to:

  • Access the personal data we hold about you.
  • Correct inaccurate data via the Account settings page.
  • Delete your account and associated data from the Account settings page.
  • Request a copy of your data by emailing hello@medpassgh.com.

7. Cookies

We use only essential cookies required for authentication (managed by Supabase). We do not use advertising or analytics cookies.

8. Changes to this policy

We may update this policy from time to time. The “Last updated” date at the top of this page reflects the most recent revision. Continued use of Medpass after changes constitutes acceptance.

9. Contact

Questions or data requests: hello@medpassgh.com