Privacy Policy
1. Who we are
Primex ("the Service") is operated by Primex Study ABN 41 535 231 642, based in New South Wales, Australia. This policy explains what data we collect, why, and how we handle it.
2. What we collect
Account information: your email address and name when you register. We need this to create your account and send you access codes or subscription confirmations.
Study data: answers you write for SAQs, MCQ responses, viva transcripts, flashcard progress, and study plan settings. This data is stored to provide the Service and track your progress.
Payment information: payments are processed by Stripe. We do not store your card number, CVC, or bank details. Stripe's privacy policy governs their handling of your payment data.
Usage data: basic analytics such as page views and feature usage to help us improve the Service. We do not use third-party tracking or advertising cookies.
3. How we use your data
We use your data to provide and improve the Service, send transactional emails (access codes, subscription updates), and generate anonymised, aggregated statistics about exam performance and usage patterns. We do not sell your personal data to anyone.
4. AI processing
Your written answers, voice transcripts, and Ask-PRIMEX questions are sent to AI language models (currently Anthropic's Claude; we may use other equivalent providers under no-training commercial terms) for grading, feedback, and answer generation. Anthropic does not use API inputs to train its models under our commercial API agreement. Inputs are processed in real time and are not retained by us beyond the duration needed to deliver the response.
5. Microphone, voice and audio data
If you choose to use voice dictation in Ask PRIMEX or spoken-response mode in the viva simulator, the Service records short audio clips while you are actively holding the microphone. Audio is sent either to Deepgram (for transcription to text) or processed in the browser via the Web Speech API, depending on your platform. Audio clips are not stored by Primex after transcription is complete. The microphone permission is only active while you tap the mic button; it is not continuously on. The viva simulator may also synthesise spoken examiner replies using a text-to-speech provider (currently ElevenLabs); the text sent for synthesis is the AI-generated response, not your personal data.
6. Community feed
If you opt in to sharing on the community feed, your answers are displayed anonymously to other users. Your name and email are never shown. You can stop sharing at any time, and previously shared answers can be removed on request.
7. Push notifications (mobile app)
The Primex iOS and Android apps may send you push notifications for flashcard review reminders, new features, or subscription updates if you opt in during first-run setup. Notification preferences can be changed at any time from the device Settings app or from Primex account settings. Push tokens are stored only to deliver notifications to your device. Notifications are routed through Apple Push Notification service (iOS) and Google Firebase Cloud Messaging (Android); these providers receive the device token and the notification payload to deliver the message.
8. Data storage and processors
Your data is stored on Vercel (hosting and serverless functions) and Vercel KV (database), with servers primarily in the United States. By using the Service, you consent to your data being transferred to and processed in the US.
We use the following third-party processors to deliver the Service. Each is bound by its own privacy and data-processing terms.
- Anthropic — AI language model provider (grading, viva, Ask PRIMEX). No-training commercial API agreement.
- Vercel — application hosting, serverless functions, and Vercel KV database (United States).
- Stripe — payment processing. Card details go directly to Stripe; we never receive or store them.
- Resend — transactional email delivery (access codes, subscription confirmations, account emails).
- Deepgram — speech-to-text transcription of viva and Ask-PRIMEX voice clips.
- ElevenLabs — text-to-speech for spoken examiner replies in the viva simulator.
- Plausible — privacy-friendly analytics (page views and feature usage; no third-party tracking).
- Sentry — application error monitoring; receives stack traces and minimal request metadata when something breaks. We avoid sending personal information to Sentry.
- Internal context-retrieval service — a Primex-operated retrieval server that supplies background reference passages to ground AI answers on certain exam sections. Receives the question text only, not your account identity. No personal data is retained by this service beyond the request lifetime.
- Apple Push Notification service / Google Firebase Cloud Messaging — delivery of mobile push notifications.
9. Data retention
We retain your account and study data for as long as your account is active. If you cancel your subscription, your data is kept for 12 months in case you return, then deleted. You can request earlier deletion at any time.
10. Your rights and account deletion
You can access the personal data we hold about you, request correction of inaccurate data, export your study data, and request deletion of your account and all associated data. In the Primex mobile apps, account deletion is available from Settings → Account → Delete Account. On the web, account deletion is available from the Account page or by emailing primex.study.ai@gmail.com. Deletion requests are actioned within 30 days.
11. Cookies
We use a session cookie to keep you logged in. We do not use advertising or third-party tracking cookies. The Primex mobile apps do not use advertising SDKs or tracking identifiers.
12. Children
The Service is intended for medical trainees and students aged 18 and over. We do not knowingly collect data from children under 16.
13. Changes
If we make material changes to this policy, we will notify you by email at least 14 days before the changes take effect.
14. Contact
Questions about privacy, or to make a request under Australia's Privacy Act 1988? Email primex.study.ai@gmail.com.