Privacy Policy
Effective date: September 24, 2026.
MAI Study is a medical education service operated by Mavus Corporation. This policy describes how we handle information when you visit our website, sign in, or use its learning and review features. Contact us at services@mavusmedical.com.
Information we collect
- Account information: email address, an internal account identifier, authentication identities, and account permissions.
- Social sign-in information: when you choose Google or Facebook, the provider may supply your provider account identifier, email address, email verification status, display name, and profile image. Authentication sessions and related tokens are processed to establish and maintain sign-in. We do not receive your Google or Facebook password.
- Information you submit through available features, such as notes, posts, and knowledge-statement review votes. Features still under development may show demonstration data rather than saved personal learning records.
- Technical information processed by our hosting and authentication services, such as IP addresses, browser information, request times, errors, and authentication or security events.
How we use information
We use this information to authenticate you, maintain your account, enforce permissions, provide the features you use, associate your submissions with your account, respond to support requests, and investigate errors or abuse. Notes or posts submitted to shared areas may be visible to other users of those areas; do not submit patient records or identifiable health information.
Google and Facebook data
Our social sign-in requests basic identity and email information. It does not request access to Gmail messages, Google Drive files, calendars, Facebook posts, or friends lists. We use sign-in information for account access and identification, not advertising or general-purpose AI model training. We do not sell Google or Facebook account data.
MAI Study handles Google data in accordance with the Google API Services User Data Policy, including applicable Limited Use requirements. We will explain new purposes and obtain additional authorization where required before requesting additional access.
Service providers and disclosure
We use Supabase for authentication and database services and Vercel for website hosting. These providers process information needed to operate the service. Google or Facebook processes your sign-in under its own policies when you choose that provider. Information may be processed outside your country. Authorized personnel may access information when needed for support, security, or administration. We may also disclose information when required by applicable law or to address fraud or security incidents.
Cookies and security
We use authentication cookies and browser storage to maintain sessions and complete secure sign-in. Blocking or clearing them may prevent login or sign you out. We use HTTPS and access controls to protect information, but no online service can guarantee complete security. Never send us passwords, verification codes, or provider secrets.
Retention, access, and deletion
Account information and submitted content are retained while needed to provide the service. You may request access, correction, or deletion by contacting us from your account email. We may need to verify ownership before acting. After verification, we will explain the scope and expected timing of deletion, including any records that must be retained for legal or security reasons. Deleted data may remain in restricted backups until those backups expire.
See account and data deletion instructions. Removing MAI Study from your Google or Facebook connected apps stops that authorization but does not itself delete information already stored by MAI Study.
Policy changes
We will update this page when our practices change and provide notice of material changes. Questions about this policy or your information can be sent to services@mavusmedical.com.