MedMini Privacy Policy

Last updated: July 23, 2026

Contact: support@steradianlabs.com

The short version. MedMini is a daily medical mini-games app. There are no ads, no cross-app tracking, and we never sell your data. You play without creating an account or giving us your name, email, or password. You can delete everything we hold about you at any time, from inside the app.

Who we are. MedMini is made by Steradian Labs. This policy explains what the app collects, why, who it is shared with, and the choices you have.

Information we collect.

• An anonymous device ID. On first launch the app generates a random identifier (a UUID) and stores it in your device Keychain and iCloud key-value storage. It is how your streak, scores, and friend groups follow you across launches and devices. It is not your name and is not tied to your real-world identity.
• Profile you choose to enter. An optional display name and your medical school, used to show you on leaderboards. You decide what to enter; a nickname is fine.
• Gameplay and progress. Which daily puzzles you complete, your scores and the metrics behind them, your streak, and your history, so we can rank the daily leaderboards and keep your streak.
• Friend groups. Groups you create or join and their join codes, so a group leaderboard works.
• Notification token. If you enable notifications, Apple gives us a push token (a delivery address for your device). It rotates and is not used to track you.
• Reports you send. If you report a puzzle, the reason you pick and any optional note, so we can fix or remove bad content.
• First-party analytics. Anonymous product events (app opens, game completions, screen actions) with your anonymous ID, a per-launch session ID, the app version, and timestamps. This is our own analytics; it is not shared with an advertising network.
• Purchase record. MedMini is a paid app. Apple processes the purchase and gives us an app-transaction identifier so your purchase works across your devices. We never see your card or payment details.

What we do NOT collect. We do not collect your real name, email address, or password (there is no login). We do not collect precise location, your contacts, your photos, biometric or health data, or the advertising identifier (IDFA). Tracking is turned off; the app ships with tracking declared off in its privacy manifest.

How we use your information. To run the games and daily leaderboards, keep your streak, deliver the notifications you asked for, honor your one-time purchase across your devices, measure and improve the app, and find and fix errors and bad puzzles.

Third-party AI. The medical puzzles are written and checked with AI models before they ever ship, as part of how we produce content. That happens on our side, not on your device: your data is not sent to any AI service. The app only sends the data described above to our own backend.

How we share information. We do not sell, rent, or share your data for advertising. We use a small set of service providers that process data only on our behalf, under contract:

• Supabase (database hosting) stores the data above.
• Railway (application hosting) runs our backend.
• Apple processes your app purchase and delivers push notifications. We may disclose information if required by law or to protect the safety and rights of our users.

Retention and deletion. You can delete everything from inside the app: You → Delete my data. That erases your streak, scores, friend-group memberships, history, and device records from our servers, and cannot be undone. Deleting the app also stops any further collection. You can also email support@steradianlabs.com and we will delete your data.

Your rights and choices. You can turn notifications on or off per type in Settings, edit your display name and school, leave friend groups, and delete all your data as above.

California (CCPA/CPRA). We do not sell or share your personal information as those terms are defined by California law, and we honor the Global Privacy Control signal. You have the right to know what we collect, to delete it, and not to be discriminated against for exercising these rights.

Europe, the UK, and other regions (GDPR/UK GDPR). You have rights to access, correct, delete, and port your data, and to object to or restrict processing. Our legal bases are performing the service you requested (contract), your consent (for notifications), and our legitimate interest in improving and securing the app. To exercise any right, contact us.

Security. Data is encrypted in transit (HTTPS) and access to our systems is restricted. No method is perfectly secure, but we work to protect your information.

Children. MedMini is intended for medical students and is not directed to children under 13, and we do not knowingly collect their data.

International transfers. Our providers may process data in the United States. Where required, we rely on appropriate safeguards for these transfers.

Changes. We will update this page and its "Last updated" date when this policy changes.

Contact. Questions? Email support@steradianlabs.com.