Privacy Policy
Last updated 26 October 2026
The short version
- We collect what we need to run your account, enforce the device limit and save your progress.
- We never sell your data. There are no ads, no tracking cookies and no analytics services.
- You can see, correct, download or delete your data.
Who is responsible
AceYourMD is run by Johnny, who decides how your personal data is used. Contact details are at the end of this page.
What we collect
| Data | Why |
|---|---|
| Your name, email address and password (stored only as a one-way hash, never in plain text) | To create your account and sign you in |
| When you buy: your name, WhatsApp number, the plan, the amount paid and how you paid | To issue and keep track of your access code, handle refunds and keep financial records |
| Your access: the code you used, activation date and end date | To give you the access you paid for |
| Each sign-in: time, type of device, browser, approximate location (country and city, worked out from your IP address) and IP address | To enforce the limit of 3 devices, protect your account and detect account sharing or scraping |
| Your study progress: notes sections read, bookmarks, your own notes and highlights, question answers and times, flashcard reviews | To show your progress, schedule flashcards and measure use for refunds |
| Reports you send about the content, with the item and the answer you chose | To fix mistakes and reply to you |
| Messages you send us on WhatsApp or by email | To answer you |
The free sample does not need an account. Your sample answers stay in your own browser and are not sent to us. If you send a report from the sample, we keep the report, your browser type and a scrambled form of your IP address.
What we do not do
- We do not sell, rent or trade your data.
- We do not show ads, and we do not use advertising or tracking cookies.
- We do not use analytics services that follow you across sites.
- We only email you about your account: confirming your email address, password resets, access reminders, warnings about account sharing and replies to your reports.
Who else handles your data
- Hostinger, which hosts the site, the database and the email service, stores the data on its servers on our behalf.
- WhatsApp (Meta) handles the conversations you start with us there, under its own privacy policy.
- We may share data if the law requires it, or to protect the site and its users from fraud or misuse.
How long we keep it
- Your account and progress: while your access is active and for 12 months after it ends, so your progress is there if you renew. After that we delete it.
- Sign-in records: 12 months.
- Purchase records: as long as the law requires for financial records.
- Backups: up to 30 days, after which deleted data is gone from backups too.
- If you ask us to delete your account, we do so within 30 days, except records we must keep by law.
How we protect it
The site uses HTTPS everywhere. Passwords are stored as one-way hashes. Content and progress are only available to the signed-in account they belong to. Access to the admin area needs a password and a second step (an authenticator app), and every admin action is logged.
Your rights
You can ask to see the data we hold about you, correct it, receive a copy, or have it deleted. You can download your data and ask for your account to be deleted from your settings, or contact us. You can also object to how we use your data. If you are not happy with how we handle your request, you can contact the data protection authority where you live.
Age
AceYourMD is meant for medical students aged 18 or older.
Cookies
We only use cookies that the site needs to work. The cookie notice lists them.
Changes
We may update this policy. The date at the top shows the latest version. We will tell you about important changes on the site or by email.
Contact
Email support@aceyourmd.com or message us on WhatsApp at +995 574 479 914.