Who this policy covers
This policy describes personal data handled by the Plexus MBBS learning app and its connected website. Operator/data controller: Medulla Learning App. Privacy and support email: projectmedullaapp@gmail.com. Postal address: Near KINFRA, Kalamassery, Ernakulam, Kerala - 683503, India.
Account and profile information
We process your account identifier, email and authentication records. If you sign in with Google, Google supplies the basic account information authorised on the consent screen, such as your email, name and profile image. Profile setup may collect your name, phone number, admission year, college, university, learning year, subjects and gender information entered in the form. Phone verification may process your number and verification status. Do not put patient-identifiable information in personal notes.
Study and device data
Plexus stores learning progress, highlights, bookmarks, practice responses, personal notes, preferences and downloaded content on your device. Account profiles and access records are stored on our backend. Servers and service providers process technical request information, IP addresses, authentication events and security logs to operate and protect the service. Essential browser and session storage supports login and saved study data. Local-only study records are not recoverable from our servers if you clear device data.
How information is used
Information is used to create and secure your account, personalise available subjects, save your learning activity, verify access, deliver content, assist with support and reconcile payments. Required fields are identified during profile setup. We do not request Google mail, contacts or Drive access for basic sign-in.
Providers and payments
Supabase provides authentication, database and storage services; Google provides Google sign-in; Vercel hosts the website. Where phone verification is enabled, the configured messaging provider processes your phone number and verification messages. When you purchase through Razorpay, Razorpay and its payment partners process payment information under their privacy policies. Plexus receives order references, payment status and entitlement details, rather than your full card credentials. We share information with providers only as needed to operate these services, and where legally required or necessary to address fraud or protect rights. We do not sell your personal information or use Google account information for advertising. Do not send us a card PIN, CVV, password or OTP.
Storage, security and retention
Native downloaded study content uses encrypted storage where supported. Browser storage does not provide equivalent protection. We use access controls and provider security features, but no security measure guarantees absolute protection. We retain account data while your account is active and as needed to provide the service. After a verified deletion request, we remove personal data that is no longer required. Limited transaction, dispute, fraud-prevention or legal records may be retained only for the period required by applicable law or an unresolved claim. Provider backups expire under the applicable backup lifecycle and are not used as active accounts. Processing locations depend on provider configuration and may be outside your region.
Your choices and deletion
You can edit supported profile fields, remove downloads and manage local preferences in Plexus. Contact projectmedullaapp@gmail.com to request access, correction, deletion, withdrawal of consent or to raise a privacy grievance. Send account deletion requests from your registered email with the subject “Plexus account deletion”; see Account & Data Deletion. We verify ownership before disclosing or deleting account data. Signing out or uninstalling does not delete the server account. We acknowledge requests within 2 working days and aim to complete verified deletion within 30 calendar days, subject to legal retention requirements. Your mandatory legal rights remain unaffected.
Children and updates
Plexus is intended for MBBS learners. Users under 18 must use the service with the consent and supervision required by applicable law. Contact projectmedullaapp@gmail.com if a child has provided information without the required consent. We will review the report and take appropriate action. We publish updates on this page and communicate material changes through the app or website. The date on this policy identifies the latest revision.