1Who we are
MedDomain MMI Practice ("MedDomain", "we", "us") is a business operated
from New Zealand, running meddomain.org and the practice app at
meddomain.streamlit.app. We are the agency responsible for the personal
information described here. Contact us any time at
support@meddomain.org.
2What we collect
Only what the service needs to work. There is no signup form asking you
for anything else, and we don't buy information about you from anyone.
Account
Your email address, and a password you set through a secure link. Your
password is stored only as a cryptographic hash by our authentication
provider — we never see it, and neither can we recover it.
Purchases
Which plan you bought, when it expires, and the reference IDs our
payment provider uses to identify your customer and subscription
records. We never see or store your card number —
payment happens entirely on Stripe's own checkout page.
Recordings
The video and audio of you answering a practice station, captured by
your browser once you've given camera and microphone permission and
consented on screen. Section 3 covers what happens to it.
Transcripts
The text of what you said, produced from your recording so it can be
marked. Held for your session and shown to you with your feedback —
not saved to your history.
Practice history
For each answer you have marked: the question and station type,
whether it was timed, your overall and per-attribute scores, the
written feedback, and the date. This is what your History page is
built from, and what stops you being served the same question twice.
Support messages
Anything you write to us — a support ticket, a star rating, or a plain
email. A ticket sent from inside the app arrives with your account
email attached, so we know whose account to look at.
Technical
One login cookie (section 9), and the ordinary server and security
logs our hosting providers keep, which can include your IP address.
3Your recordings — the important part
Video of your own face and voice is the most sensitive thing this service
touches, so we want to be exact about it rather than vague.
-
Your browser records your answer and sends it to our server, because
that's where it gets turned into text.
-
The transcription happens on our own server, using
open-source speech recognition software running there. Your audio and
video are not sent to any speech-to-text company or
other third party.
-
The file stays only so you can watch yourself back on your feedback
page. It is deleted as soon as your session ends — when
you move to the next question, return home, retry a take, or finish a
full mock. If a session is abandoned (you close the tab, your laptop
dies), a scheduled clean-up removes the file automatically, and in any
case no recording is left on our server for more than a few hours.
-
We never watch your recordings for any purpose other than fixing a
specific technical fault you've reported, we never share or publish
them, and we never use them for marketing or to train any AI model.
Because we delete them, we can't get a recording back for you later. If
you want to keep one, download it from your feedback page before you
leave it — the page reminds you of this.
4How we use your information
- To create your account and let you log in and stay logged in.
- To confirm what you've paid for and how long your access runs.
- To transcribe and mark your answers and show you feedback.
- To keep your practice history and choose questions you haven't done.
- To send you service emails — purchase confirmation, password resets,
and notices about the service. We don't send marketing emails.
- To answer your support messages.
- To keep the service secure and working: enforcing the daily scoring
limit, investigating faults, and preventing abuse or account sharing.
- To meet legal, tax and accounting obligations.
We do not sell your personal information, rent it, or share it for anyone
else's advertising. Ever.
5AI marking
To produce your feedback, the text transcript of your answer
is sent to Anthropic's Claude API along with the question and the marking
criteria. Your recording is not sent, and neither is your name, email or
any other account detail — the request carries the answer and the question,
nothing that identifies you.
Anthropic processes it as our service provider to return the scores and
comments, and under its commercial API terms does not use it to train its
models. The resulting scores and written feedback are saved to your
history; the transcript itself is not.
6Who else handles your information
We're a small operation and we use established providers rather than
running everything ourselves. Each of them handles information only to
provide their part of the service to us:
Supabase
Accounts and logins, your subscription record, and your practice history.
Stripe
Payments and subscriptions. Stripe collects your payment details directly under its own privacy policy; we receive confirmation and reference IDs, not card data.
Anthropic
Marks the text of your answers (section 5).
Resend
Delivers our confirmation and support emails.
Streamlit Community Cloud
Hosts the practice app. This is the server your recording is briefly written to and transcribed on.
Cloudflare
Hosts and serves this website.
Beyond these, we will only disclose personal information where the law
requires it, where it's necessary to establish or defend a legal claim, or
where you've asked us to.
7Information held overseas
All of the providers listed above are based outside New Zealand and may
store or process your information overseas, including in the United States
and other countries where they operate. As required by information privacy
principle 12 of the Privacy Act 2020, we take reasonable steps to use
providers that are subject to comparable privacy safeguards and are bound
by contract to protect your information and use it only for the purposes
we've engaged them for.
8How long we keep things
Recordings
Until your session ends — minutes, typically. Automatically removed within a few hours at the outside.
Transcripts
Your session only. Not written to your history.
Scores and feedback
Kept while your account exists, so your History page has something to show. Deleted when you delete your account.
Account and subscription
Kept while your account exists. Records of the transaction itself are retained for as long as New Zealand tax and financial record-keeping law requires, even after an account is closed.
Support messages
Kept in our support inbox while they're useful for helping you and resolving related issues.
9Cookies
The practice app sets one cookie. It holds a
cryptographically signed token that keeps you logged in when you reload
the page or open a new tab, so you don't have to sign in again each time.
It's strictly necessary for the service to function, and clearing it just
logs you out.
We run no analytics, no advertising and no third-party tracking
scripts on this website or in the app. Nobody is following you
around the internet on our behalf, which is why you aren't being asked to
dismiss a cookie banner.
10Your rights
Under the Privacy Act 2020 you have the right to ask for a copy of the
personal information we hold about you, and to ask us to correct it if
it's wrong. You can also ask us to delete your account and the practice
history attached to it.
Email support@meddomain.org from
your account's email address and we'll respond as soon as we can, and
within 20 working days as the Act requires. There's no charge for a
reasonable request. We may need to confirm it's really you before we act
on it.
If you're using the service from outside New Zealand, you may have further
rights under your local privacy law — write to us and we'll do our best to
accommodate them.
11Security
Traffic to the website and the app is encrypted in transit. Passwords are
stored only as hashes. Database access rules mean an account can only ever
read its own subscription and its own practice history, and the login
cookie is signed so it can't be forged or edited. Access to our providers'
dashboards is limited to the people who run the service.
No online service can promise perfect security, and we won't pretend
otherwise. If a privacy breach ever occurred that was likely to cause you
serious harm, we would notify you and the Office of the Privacy
Commissioner as the Privacy Act 2020 requires.
12Under-16s
The service is not intended for anyone under 16 — see section 3 of our
Terms of Service. We don't knowingly collect
information from under-16s, and if we find that we have, we'll delete it.
If you're a parent or guardian and believe your child has created an
account, please contact us.
13Changes to this policy
We'll update this page when what we do changes, with a new date at the
top. If a change materially affects how we handle your information, we'll
make reasonable efforts to tell you by email rather than leaving you to
notice.