Privacy Policy
ClinPot ("we") publishes InMedicine Learn and InMedicine Clinic (the "apps"). This policy explains what personal data the apps handle, why, where it is stored and what choices you have. We keep it short and specific; if anything here is unclear, write to support@clinpot.com.
1. Using the apps without an account
You can use most of the apps as a guest. Your notes, bookmarks, progress and settings then stay on your device only. The apps create a random device identifier (not linked to you) to count free AI questions and to send anonymous ad and crash statistics described below.
2. What we collect when you create an account
| Data | Why | Where |
|---|---|---|
| Email address and password (hashed), or a one-time sign-in code | To create and secure your account | Our database (Supabase, Mumbai region, India) |
| Name, specialty or exam, language | To personalise the app | Same |
| Notes, bookmarks, flashcard progress, Brain layer, study progress | To sync between your devices | Same |
| Subscription status | To unlock Premium on all your devices | Same, received from RevenueCat |
| Acceptance of these terms (version and time) | Record of consent | Same |
| Usage counters for free-tier limits | To apply daily limits fairly | Same, kept for 62 days |
InMedicine Clinic: notes are free text. Do not enter patient names, identifiers or contact details. The apps are not designed to store patient records.
3. AI assistant
When you ask the AI assistant a question, the question, the conversation and the library passages the app selected are sent to our server and from there to the model provider (Anthropic). The provider processes the request to generate an answer and does not use it to train models. By default we do not store the text of your question or the answer; we store only the subject, the mode and token counts. If logging of questions is switched on for quality review, it is noted in the app and entries are deleted after 30 days at most. Do not include personal or patient-identifying details in questions.
4. Advertising
The free tier shows ads through Google AdMob and, occasionally, our own announcements. Where consent is required, the app asks you before any ad is loaded (Google's consent form, and on iOS the App Tracking Transparency prompt). You can switch personalised ads off at any time in Profile → Privacy; ads are then requested as non-personalised. Google's handling of ad data is described in Google's advertising policies. Premium removes ads entirely.
5. Purchases
Subscriptions are sold through the App Store and Google Play and managed by RevenueCat. We receive your subscription status and an anonymous RevenueCat customer id tied to your account id. We never see your card details.
6. Crash reports
If the app crashes we receive a crash report (Sentry) containing the error, the app version, device type and operating system, and your anonymous account id. Reports never contain your notes, questions, email or name.
7. Drug data
Medicine pages fetch public regulator data (openFDA, RxNav) through our server, which caches it. The request contains the drug name only.
8. What we do not do
- We do not sell personal data.
- We do not use your notes or questions to train AI models.
- We do not collect precise location, contacts, photos or health records.
9. Processors
Supabase (hosting and database, Mumbai, India), Cloudflare (content delivery), Anthropic (AI model), Google AdMob (ads), RevenueCat (subscriptions), Sentry (crash reports), Expo (app updates). Each processes data only to provide its service to us.
10. Retention and deletion
Account data is kept while your account exists. You can delete your account in the app (Profile → Delete account): your profile, notes, progress and limits are deleted immediately; anonymous usage and ad statistics are kept without any link to you. Crash reports expire after 90 days. AI usage counters are kept for 62 days, question logs (if enabled) for 30 days.
11. Your rights
You can access and correct your data in the app, export your notes from the Notes screen, and delete your account at any time. Residents of the EU/EEA, the UK, India (DPDP Act 2023) and California have additional rights under their laws; email support@clinpot.com and we will respond within 30 days.
12. Age
InMedicine Learn is for users aged 16 and over. InMedicine Clinic is for healthcare professionals and students aged 18 and over. We do not knowingly collect data from younger users; if you believe a younger person has created an account, contact us and we will delete it.
13. Security
Data travels over HTTPS. Sign-in tokens are stored in the device's secure keychain. Access to the database is restricted by row-level security so each user can read only their own data.
14. Changes
If this policy changes materially, the app will ask you to review and accept the new version. The version date is at the top of this page.
15. Contact
ClinPot · support@clinpot.com