Curevise Privacy Policy

Version: 2026-09-07

Last updated: 7 September 2026

1. Who we are

Curevise is a medical-education app operated by Dr Md Hadisur Rahman, Dhaka, Bangladesh.

For any question about your data, or to access, correct, or delete it, email security@curevise.com.

2. Scope

This policy describes Curevise's current data practices, including features that may process data when enabled. If a change affects what we collect or who receives it, we publish a new version of this policy.

You must be 18 or over to hold an account.

3. What we collect

Account: your email address, your name on record, your date of birth, your gender, your mobile number, your registration number and whether it is a BMDC or a university registration, your programme (MBBS or BDS), your medical college (picked from our list, or typed if it is not there), your session, the exams you are preparing for, your main exam date, and — if you are a doctor — your workplace. We also store a display name and @handle, which invite code you used and who created it, and your password, which is protected as described in §7.

Devices and sessions: basic information about the devices you use and your login sessions, used for account operation and security.

Study data: which cards you reviewed, when, how you rated each one, and related scheduling data. We use this to decide what to show you next.

Network address: your IP address is processed for security and abuse prevention. Curevise does not retain it as part of your account information. Service providers may process standard network logs when operating the service.

What we do not collect

Curevise is not designed to collect patient health information. Please do not enter identifiable patient information into the service.

4. How we use it

We use your data to run your account, run the scheduler that decides which cards you see, and keep the service working and secure.

5. What we do not do

We do not sell your personal data or use it for advertising.

6. Service providers and access

Curevise uses service providers for hosting and infrastructure, network and app delivery, transactional account email, and device-integrity checks.

Hosting providers process account and study data as necessary to operate Curevise. Network and app-delivery providers may process standard network and request information. Transactional email providers process your email address and the account-related message being sent.

When Android device-integrity checks are used, Google may process app and device-integrity information. Curevise does not send your name, email address, or study data to Google for this purpose.

As the operator of Curevise, Dr Md Hadisur Rahman may access account and study data where necessary to operate, support, moderate, and secure the service.

7. Password and security

Passwords are protected using a one-way cryptographic hash, so Curevise cannot read or recover your existing password; resetting it replaces it with a new one. We use technical and administrative safeguards to protect Curevise data, and access is restricted to what is necessary to operate and secure the service.

8. Where your data is stored

Curevise account and study data is primarily stored in Singapore, so this data may be processed outside Bangladesh. Service providers may process information in other countries where they operate, as described in §6.

9. How long we keep it

We keep your data for as long as needed to provide your account and the service, and where necessary for security or legal purposes. When you ask us to delete your account, we delete it (§10). Deleted data may remain temporarily in routine backups until those backups expire.

10. Your data requests

Email security@curevise.com to request a copy of your data, a correction, or deletion of your account. Some records may remain after deletion where necessary for security, fraud prevention, legal obligations, or legal claims. Information already processed by a service provider may also be subject to that provider's retention requirements.

11. Age

Curevise is for medical students and doctors and is not intended for anyone under 18. If you believe someone under 18 has an account, email security@curevise.com and we will remove it.

12. Changes

We publish a new version at https://curevise.com/privacy whenever this changes, with a new version string and date. We will provide notice and obtain renewed consent where required by applicable law.

13. Contact

security@curevise.com — privacy questions, data requests, and security reports.

Curevise, operated by Dr Md Hadisur Rahman, Dhaka, Bangladesh.