Privacy Policy
Last updated: 2026-07-04 · Meducation is operated by SciBorg Communications (Pty) Ltd (registration number 2026/292496/07), South Africa.
The most important thing first: no patient data
Meducation is a tool for healthcare professionals. It does not collect, store, or process identifiable patient information — no names, no identity numbers, no dates of birth, no contact details, and no medical records. When a doctor personalises a brochure, the selections (such as an age group or a comorbidity) are used to assemble the document in the moment and are not saved as a patient record. The personal information described below is about our users — the healthcare professionals and practice staff who hold Meducation accounts.
What we collect about you
- Account details: your name, email address, password (stored as a secure hash by our authentication provider), role, and the practice or group your account belongs to.
- Profile and branding assets you upload:an optional headshot, and your practice's logo, banner image, colours, address, and emergency contact details — these appear on the brochures you generate.
- Usage records: events such as sign-ins, pages viewed, and brochures composed (the condition code and medication codes selected — never any patient detail), kept for security auditing and to improve the product.
- Security data: two-step verification enrolment, trusted devices, and rate-limiting records that protect your account.
- Feedback you send us: your message, technical context (page, browser, device type), and a screenshot only if you choose to attach one.
Why we process it
To provide the service you signed up for (account management, brochure generation, practice branding); to secure the platform (authentication, abuse prevention, audit trails); to support you (feedback and support requests); and to improve the product using aggregate usage patterns. We do not sell personal information or use it for third-party advertising.
Where your information lives
Our application runs in Cape Town, South Africa. Our database provider does not offer a South African region, so account data is stored in Frankfurt, Germany (European Union) — a jurisdiction with data-protection law that provides an adequate level of protection, as contemplated by section 72 of the Protection of Personal Information Act (POPIA). Transfers to our service providers below are made on the same basis.
Who helps us process it
We use a small set of service providers (operators under POPIA) to run Meducation: Vercel (application hosting), Supabase (database, authentication, and file storage), Resend (transactional email such as invitations and password resets), Upstash (security rate-limiting), and Sentry (error monitoring, configured to scrub personal information). Each processes data only on our instructions.
How long we keep it
Account information is kept for as long as your account exists. Security and usage records are kept for auditing purposes. When an account is deleted, the account profile and authentication records are removed; certain records required for security auditing and content-governance history may be retained in de-identified form. We are formalising fixed retention periods as the platform matures — contact us for the current state at any time.
Your rights under POPIA
You may request access to the personal information we hold about you, ask us to correct it, or ask us to delete your account and associated information. Contact us at admin@sciborgcommunications.com and we will respond within a reasonable time. If you believe we have mishandled your information, you may lodge a complaint with the Information Regulator (South Africa) — inforegulator.org.za.
Information Officer
The Information Officer, SciBorg Communications (Pty) Ltd · admin@sciborgcommunications.com
If you join the waitlist
Before public sign-up opens, visitors can join a launch waitlist by submitting an email address. We store only that email address, the time you submitted it, and which form you used — nothing else. We use it once, to email you when Meducation launches, and we do not share it. Ask us at admin@sciborgcommunications.com at any time to remove your address from the waitlist.
Cookies
We use only the cookies required to keep you signed in and to keep your account secure (session, security-verdict, and trusted-device cookies). We do not use advertising or cross-site tracking cookies.
Security
All traffic is encrypted in transit. Access to data is isolated per practice at the database level, protected by row-level security. Two-step verification is available on every account. We follow a least-privilege model for our own staff access.
Changes to this policy
We will update this page when our practices change and revise the “Last updated” date above. Material changes will be communicated to account holders.