Privacy Policy

EdgeMed Education Ltd ("we", "us", "our") respects your privacy. This Privacy Policy explains what personal data we collect when you use EdgeMed EM at edgemedem.com (the "Service"), how we use it, who we share it with, and what rights you have. We are a company incorporated in the Republic of Ghana with registration number CS123660626.

1. What we collect

Information you provide:

• Your email address (required for sign-up).
• Your name (optional, used to personalise welcome emails and the dashboard).
• Your password — stored as a one-way cryptographic hash; we never see your actual password and cannot recover it.
• Your target exam date (optional, used to power the days-to-exam countdown and study-pace nudges).
• Any content you submit through support emails or feedback prompts.

Information we collect automatically:

• Approximate location (country and region) derived from your IP address — used to display prices in your local currency and to inform feature usage analytics.
• Usage data — which questions you answered, the answers you chose, time spent, quiz scores, marked questions, and topic performance. This powers your per-topic heatmap, weak-area suggestions, marked-question pool, and predicted pass score.
• Cookies and browser local storage — a session cookie for login, plus small flags (e.g. which Question of the Day you've already seen, your preferred topic filter).
• Technical data — browser type, operating system, referrer URL, and request timestamps in server logs.

Information from payment processors:

• Card numbers and mobile-money details are handled directly by Paystack; they never touch our servers. We receive only the transaction reference, masked last-4 digits (where applicable), payment amount, currency, and confirmation status.

2. How we use your data

• To provide and operate the Service (deliver questions, score tests, render your dashboard).
• To send subscription receipts, exam-approaching reminders, important account notices, and (if you opt in) occasional product updates.
• To compute performance analytics, weak-area suggestions, and marked-pool contents personal to your account.
• To detect and prevent fraud, abuse, and credential sharing.
• To comply with our legal obligations (tax records, fraud reporting).

3. Who we share it with

We share limited data with the following processors strictly to operate the Service. Each is contractually bound to use your data only on our instructions and to keep it secure.

• Paystack — payment processing (cards, mobile money, bank transfers).
• Render.com — application and database hosting.
• Resend.com — transactional email delivery (receipts, reminders).
• Anthropic — large-language-model question generation. No user data is sent during generation; prompts contain only the topic and reference material we are sourcing from.

We do not sell or rent your personal data to anyone, and we do not share it with advertisers. We may disclose data if compelled by a valid legal order from a Ghana court or other competent authority.

4. Data retention

• Account data: retained while your account is active and for 12 months after closure to handle billing queries, then deleted or anonymised.
• Payment records: retained for 6 years to comply with Ghana tax law (Section 27 of the Internal Revenue Act and successor provisions).
• Question-attempt analytics: retained for the lifetime of your account so the heatmap and predicted-pass score remain accurate. You may request earlier deletion at any time.
• Server logs: retained for up to 90 days for security and debugging, then rotated out.

5. Your rights

You have the following rights with respect to your personal data:

• Access — request a copy of the data we hold about you.
• Correction — correct inaccurate or incomplete data. Most fields can be edited from your account page.
• Deletion — close your account and have your personal data deleted, subject to the retention periods above.
• Portability — request an export of your question-attempt history in a machine-readable format.
• Objection / withdrawal of consent — object to processing or withdraw consent where consent is the legal basis.

To exercise any of these rights, email support@edgemedem.com. We will respond within 30 days.

6. Security

We use HTTPS for all traffic between your browser and our servers, store passwords as one-way hashes, and operate on hardened cloud infrastructure with access controls. No system is perfectly secure. If we become aware of a personal-data breach that is likely to affect your rights, we will notify you and the relevant Ghana authorities promptly, in line with our obligations under the Data Protection Act 2012 (Act 843).

7. Children

EdgeMed EM is intended for adults and licensed medical trainees. We do not knowingly collect personal data from anyone under 18. If you believe a minor has registered an account, email support@edgemedem.com and we will delete the account and any associated data.

8. International transfers

The Service is operated from Ghana, but our infrastructure providers may process your data in the United States or European Union (Render.com, Resend, Anthropic). By using the Service, you consent to this transfer. Where required we rely on standard contractual clauses with our processors.

9. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be communicated by email and by an in-app notice. The "Last updated" date at the top of this page reflects the most recent change.

10. Contact and complaints

If you are not satisfied with our response, you have the right to lodge a complaint with the Data Protection Commission of Ghana (dataprotection.org.gh).