Privacy Policy
Effective date: September 12, 2026 · Last updated: September 12, 2026
In short
We collect what you give us at signup (name, username, email, phone, country, city) plus what you upload and how you use the app, so we can run the Service and its AI classification/quiz features. We never sell your data. We share it only with the infrastructure providers that host and run the Service, and with other users you explicitly choose to share or connect with. You can review, correct, or delete your data at any time. This summary isn't a substitute for the full policy below.
1.Who this applies to
This Privacy Policy describes how Mycelia & Rays (the "Service") collects, uses, and shares information when you create an account and use the Service. It should be read together with our Terms of Use.
2.Information we collect
| Category | Examples |
|---|---|
| Account information | First/last name, username, email, mobile phone, country, city, and (optionally) how you heard about us |
| Your content | Documents, images, and slide decks you upload, plus highlights, notes, quiz answers, and review history you create |
| Usage & log data | Login timestamps, presence status, IP address (for rate-limiting and abuse prevention), and general activity within the app |
| Communications | Messages sent through the in-app chat, and friend/share requests |
| Local device data | Theme, language, and layout preferences stored in your browser (localStorage), and your session cookie |
3.How we use your information
- To create and secure your account (email confirmation, login, password reset, session management).
- To classify, file, and index the documents you upload, and generate quizzes and review schedules from them.
- To power sharing, friends, chat, and notifications between users you interact with.
- To detect and prevent abuse — rate limiting signup, login, and other sensitive actions.
- To send you transactional email (email verification, password reset, review reminders), and occasional updates from the team. Every email includes an unsubscribe link; unsubscribing stops the latter but not account-security email tied to something you did (like a password reset).
4.AI processing of your documents
When you upload a document, its content is read by an AI classification pipeline to determine what it is and where it belongs in your library, and (when you ask for it) to generate quiz questions from it. This processing happens to serve your own account and isn't used to build a public or shared dataset.
5.Please don't upload real patient data
As set out in our Terms of Use, this Service is a personal study tool, not a clinical record system, and isn't operated as a HIPAA "covered entity" service. This Policy governs the account information and study content you provide us — it is not a substitute for the safeguards a real patient-data system would need, so real, identifiable patient health information should never be uploaded here.
6.How we share information
We don't sell your personal information. We share it only in these cases:
- With other users, at your direction — a document or folder you share, or a message you send a friend, is visible to that recipient under the permission you granted.
- With service providers who run the Service on our behalf — cloud hosting and storage infrastructure, and a transactional email provider used solely to deliver account emails (verification, password reset, review reminders). These providers process data only as needed to provide their service to us.
- Where required by law — if we're legally compelled to disclose information, or to protect the rights, safety, or security of the Service or its users.
7.Data retention
We keep your account and content for as long as your account is active. If you deactivate your own account, your documents and library stay in the system (so an administrator can review the account) unless an administrator removes them. You can request full deletion by contacting us (Section 13).
8.Security
Passwords are stored hashed (never in plain text), sessions are cookie-based with expiry, and access to a document or folder is scoped to its owner unless explicitly shared. No system is perfectly secure, but we design account and data-access controls with that goal in mind.
9.Your rights & choices
- Access & correction — update your name, email, phone, country, or city at any time from Account Settings.
- Deletion — deactivate your own account from Account Settings, or contact us to request full erasure of your data.
- Portability — you can download your own documents from the library at any time.
10.Cookies & local storage
We use a session cookie to keep you logged in, and your browser's localStorage to remember interface preferences (theme, language, sidebar width) on your own device. We don't use third-party advertising or tracking cookies.
11.Children's privacy
The Service is intended for medical students, residents, fellows, and attendings, and isn't directed at children. We don't knowingly collect information from anyone under 16.
12.International data transfers
Our infrastructure may process and store data in a different country than the one you're in. Where that happens, we rely on our providers' own safeguards for cross-border data handling.
13.Changes to this policy
We may update this Privacy Policy as the Service evolves. We'll update the "Last updated" date above when we do, and flag material changes in the app.
14.Contact
Questions about this Policy, or a request to access, correct, or delete your data? Reach us at privacy@myceliandrays.com.