Privacy policy
Draft – will be completed and legally reviewed before publication.
This policy applies to the website medicabula.de and the Medicabula app.
Controller
[RobotBytes – Rechtsform]
[Straße und Hausnummer]
[PLZ Ort]
hallo@medicabula.de
Visiting the website and app
When you visit, the server processes technically necessary data (IP address, time, page requested, browser) to deliver the page and prevent abuse (Art. 6 (1) (f) GDPR). It is not stored: there are no access logs, and the IP address is kept only briefly in memory, for example to slow down repeated failed attempts. Server provider: Contabo GmbH, Aschauer Straße 32a, 81549 München, data centre in the EU.
No ads, no tracking
The website sets no cookies, uses no analytics or advertising services and loads no content from other providers (not even fonts). The app only sets a login cookie.
Waiting list
When you sign up, we store your email address, optionally who you are (studies, training …) and whether you would be up for a call, plus the time and the wording of your consent (Art. 6 (1) (a) GDPR). First you receive an email with a confirmation link (double opt-in); without confirmation we delete everything after 7 days. We delete confirmed entries once the launch email has been sent, at the latest after 24 months. If you offered a call, we contact you about it at most once. We do not store IP addresses for this. You can withdraw at any time via the link in every email.
Account and progress
For the app we store your name, email address, password (only as a hash), your field, your course choice, your exam date and your learning log (which terms you met when and how you answered, game results) to provide the service (Art. 6 (1) (b) GDPR). If you delete your account, we delete it together with the whole learning log.
Study groups, ranking and duels
Members of a study group see your name. Only if you agree in that group do they also see your weekly and total points, whether you are in the app right now (so you can challenge each other to a duel) and the ghost of your last ward round – hits and answer time per question, never which terms. During a duel the other person only sees your score. You can withdraw your agreement per group at any time.
“Report a problem” in the app
If you report a problem in the app, we store your text, your name, screenshots if you add them and technical details (page, app version, device/browser, screen size) to fix the error (Art. 6 (1) (b) and (f) GDPR). To fix it we create a task on our own development server – with text, screenshots and technical details, but without your name or account. Replies to it appear in the app.
Contact form
If you write to us via the contact form, we store your name, email address, topic and message in order to reply (Art. 6 (1) (b) and (f) GDPR). We do not store IP addresses for this. We delete the request 6 months after it arrived at the latest.
Contact by email
If you write to us, we process your address and message only to reply (Art. 6 (1) (b) and (f) GDPR) and delete them once that is done or if you ask us to.
Your rights
You have the right to access, rectification, erasure, restriction of processing, data portability and objection, and the right to lodge a complaint with a data protection authority.