Privacy, in plain words.

01 · Who we are

MedNova is run by its owner, not a company.

MedNova is an educational medical reasoning game. It is run by its owner, who decides how your information is used (the "controller"). This policy explains what the app really collects, why, where it is kept and what you can do about it.

MedNova is for education only. It is not medical advice, and all cases and patients in it are fictional.

02 · Your account

An account needs your email, a password and a username.

Sign-up. When you create an account we receive your email address, a password and the username you choose (also used as your display name). Sign-in and email codes are handled by Supabase Auth. Your password is stored by Supabase only as a one-way hash; MedNova never sees or stores it in plain text.

Profile. Your account has a profile with your username, display name, avatar (the character you pick) and a friend code that others can use to add you.

Guests. You can play as a guest without an account. Guest progress stays on your phone and is not linked to you on our servers.

03 · Your play

We keep your games, scores and wallet.

• Plays and scores: which games you play, your answers and results, scores, streaks and times.
• Learning: the cases you miss and the cards you collect, so you can review them later.
• EXP and tokens: your wallet is kept on your phone and, when you are signed in, synced to your account.

04 · Friends and online play

Playing with others means some of your data is shared with them.

• Friends: friend requests, your friends list and the people you block.
• Presence: when you were last seen in the app, shown to your friends.
• Invites and challenges you send or receive.
• Online rooms and matches: the rooms you create or join, your team and character, guesses and results.
• Room chat: the stickers and preset voice lines you send in a room. There is no free-text chat.
• Silent Artist: the drawings you make in an online room are sent live to the other players in that room.
• Reports: if you report a drawing, we keep the report and the drawing so it can be reviewed.

Other players can see your username, avatar, scores in shared games and anything you send in a room. Do not use your real name as a username if you do not want it shown.

05 · On your phone

Some data stays on your device.

MedNova stores your sign-in session, settings, saved plays and wallet on your phone so the app works offline and opens quickly. Deleting the app removes this local data.

06 · Where it is kept

Our servers are in the EU, in Frankfurt.

Account and game data is stored with Supabase, which acts as our processor and hosts it on servers in Frankfurt, Germany (EU). Supabase handles it only on our instructions. If you use MedNova from outside the EU, your data travels to these servers.

MedNova does not use analytics, advertising or tracking tools, and does not sell your data.

07 · Why we use it

We use your data only to run the game for you.

• To create and secure your account and sign you in.
• To save your progress, scores, wallet and learning cards.
• To run friends, invites, online rooms and matches.
• To keep play safe: blocking, reviewing reports and stopping misuse.
• To answer your messages and bug reports.

Legal basis. Under the EU GDPR and the data protection laws that apply to you, we use your data because it is needed to provide the service you asked for (our contract with you), and for our legitimate interest in keeping MedNova safe and working.

08 · How long we keep it

Until you delete your account.

We keep your account data for as long as your account exists. When you delete your account, your account and the rows linked to it (profile, plays, wallet, misses, cards, friends and blocks) are removed from our servers. Data on your phone stays until you delete the app.

09 · Deleting your account

You can delete it yourself, in the app.

Open Profile and tap "Delete my account", then confirm. Your account is deleted straight away and the app returns to guest mode. If you cannot open the app, write to us and we will delete it for you.

10 · Your rights

Your data is yours: you can see, fix or delete it.

• Access: ask for a copy of the data we hold about you.
• Correction: ask us to fix data that is wrong.
• Deletion: delete your account in the app, or ask us to.
• Objection: object to how we use your data, or ask us to limit it.

These rights come from the GDPR and the data protection laws that apply to you. To use them, write to us (see Contact). You may also complain to your local data protection authority.

11 · Age

MedNova is for people 16 or older.

You must be 16 or older to create an account. We do not knowingly collect data from children under 16. If you think a child has made an account, write to us and we will delete it.

12 · Changes

If this policy changes, this page changes.

We update this policy when MedNova's features or data use change. The current version is always on this page.

13 · Contact

Privacy questions? Write to us.

For privacy questions or requests, contact MedNova at Support.novagames@gmail.com.