Curevise Privacy Policy
Version: 2026-10-25
Last updated: 25 October 2026
1. Who we are
Curevise is a medical-education app and a product of Hadian Labs, Dhaka, Bangladesh, owned by Dr Md Hadisur Rahman. In this policy, "we" and "us" mean Hadian Labs.
For any question about your data, or to access, correct or delete it, email security@curevise.com.
2. Scope
This policy describes how we handle your data today, including in features that may process data when they are turned on. If a change affects what we collect or who receives it, we publish a new version of this policy.
You must be 18 or over to hold an account.
3. What we collect
Account: your email address, your name on record, your date of birth, your gender, your mobile number, your registration number and whether it is a BMDC or a university registration, your programme (MBBS or BDS), your medical college (picked from our list, or typed if it is not there), your session, the exams you are preparing for and your main exam's subject, your main exam date (the exam sitting you pick), and — if you are a doctor — your workplace. We also keep your display name and @handle, which invite code you used and who created it, and your password, which we protect as described in §7.
Devices and sessions: basic information about the devices you use and your login sessions, which we use to run your account and keep it secure.
Study data: which cards you reviewed, when, how you rated each one, how long each card was on your screen and when you revealed its answer, and related scheduling data. We use this to decide what to show you next.
We also keep the cards you save or hide, and the notes you write on cards. When you delete a note it disappears from the app, but we keep its text until your account is erased (§9).
Pearls: which pearls you watched to the end, how you answered their questions, and the pearls you save, hide or put off. We use this to decide which pearls to show you next.
Support: when you ask for help in the app, the message you write, the topic you pick, your phone's model and the version of the app. When you report a problem with a card, the kind of problem you pick and the note you write. We use these to answer you and to fix cards.
Network address: we process your IP address for security and to prevent abuse. We do not keep it as part of your account information. Our service providers may process standard network logs when they operate the service.
What we do not collect
Curevise is not designed to collect patient health information. Please do not enter identifiable patient information into Curevise.
4. How we use it
We use your data to run your account, to run the scheduler that decides which cards you see, and to keep Curevise working and secure.
5. What we do not do
We do not sell your personal data or use it for advertising.
6. Service providers and access
We use service providers for hosting and infrastructure, network and app delivery, transactional account email, and device-integrity checks.
Hosting providers process your account and study data as needed to run Curevise. Network and app-delivery providers may process standard network and request information. Transactional email providers process your email address and the account message being sent. When you delete your account, and if you restore it, we also email ourselves a short notice with your account's internal number, the dates, and how many times the account has been deleted or restored, and nothing else, so that a restored backup cannot undo either choice.
When Android device-integrity checks are used, Google may process information about the app and your device's integrity. We do not send your name, email address or study data to Google for this.
When you report a problem with a card, we may use an AI editing assistant — Claude, provided by Anthropic — to suggest a fix. It receives the card, its sources, and your report's type, date and note as you wrote it. It does not receive your name, email address, or any other account or study data. We approve every change before it reaches learners. Please do not include personal details in a report.
We may access your account and study data where necessary to operate, support, moderate and secure Curevise.
7. Password and security
We cannot read or recover your password; resetting it replaces it with a new one. We use technical and administrative safeguards to protect your data, and access to it is restricted to what is necessary to operate and secure the service.
8. Where your data is stored
Your account and study data is stored mainly in Singapore, so it may be processed outside Bangladesh. Our service providers may process information in the other countries where they operate, as described in §6.
9. How long we keep it
We keep your data for as long as you have an account, and where necessary for security or legal reasons.
When you delete your account (§10), it is closed at once: you are signed out everywhere and no one can sign in to it. For 30 days you can restore it by signing in and choosing Restore my account, or by emailing us. After 30 days we erase it: your profile, your password and sign-ins, and your card notes are deleted, and the words of your support messages and card reports are removed.
We keep payment records, which the law requires for tax and refunds, records of what our staff did on your account, and your study history with nothing that names you. If an account was banned, we keep what we need to stop it being created again.
Deleted data may remain in routine backups until those backups expire. If we ever restore a backup, we redo every deletion and restore made since it, keeping their original dates, before the backup is used.
10. Your data requests
To delete your account, open the app and go to Profile › Settings › Delete account. If you cannot use the app, follow the steps at curevise.com/delete-account: email us from the address on your account, and we delete it within 7 days of confirming the request is yours.
Email security@curevise.com to ask for a copy of your data, a correction, or the deletion of your account. Some records may remain after deletion where necessary for security, fraud prevention, legal obligations or legal claims. Information a service provider has already processed may also be subject to that provider's retention requirements.
11. Age
Curevise is for medical students and doctors and is not intended for anyone under 18. If you believe someone under 18 has an account, email security@curevise.com and we will remove it.
12. Changes
Whenever this policy changes, we publish a new version at https://curevise.com/privacy with a new version string and date. We will give notice and ask for your consent again where the law requires it.
13. Contact
security@curevise.com — privacy questions, data requests and security reports.
Hadian Labs, Dhaka, Bangladesh.