Privacy Policy
1. Who we are
PRIMEX ("the Service") is operated by PRIMEX Study ABN 41 535 231 642, based in New South Wales, Australia. This policy explains what data we collect, why, and how we handle it.
2. What we collect
Account information: your email address and name when you register. We need this to create your account and send you access codes or subscription confirmations.
Study data: answers you write for SAQs, MCQ responses, viva transcripts, flashcard progress, and study plan settings. This data is stored to provide the Service and track your progress.
Payment information: payments are processed by Stripe. We do not store your card number, CVC, or bank details. Stripe's privacy policy governs their handling of your payment data.
Usage data: basic analytics such as page views and feature usage to help us improve the Service. We use Plausible (privacy-friendly analytics that runs without third-party cookies) and Google Analytics 4 (uses cookies to measure aggregate site usage and conversions; Google may transfer this data to the United States). We do not use third-party advertising or marketing pixels.
3. How we use your data
We use your data to provide and improve the Service, send transactional emails (access codes, subscription updates), and generate anonymised, aggregated statistics about exam performance and usage patterns. We do not sell your personal data to anyone.
4. AI processing
Your written answers, voice transcripts, and Ask-PRIMEX questions are sent to AI language models (currently Anthropic's Claude; we may use other equivalent providers under no-training commercial terms) for grading, feedback, and answer generation. Anthropic does not use API inputs to train its models under our commercial API agreement. Inputs are processed in real time and are not retained by us beyond the duration needed to deliver the response.
5. Microphone, voice and audio data
If you choose to use voice dictation in Ask PRIMEX or spoken-response mode in the viva simulator, the Service records short audio clips while you are actively holding the microphone. Audio is sent either to Deepgram (for transcription to text) or processed in the browser via the Web Speech API, depending on your platform. Audio clips are not stored by PRIMEX after transcription is complete. The microphone permission is only active while you tap the mic button; it is not continuously on. The viva simulator may also synthesise spoken examiner replies using a text-to-speech provider (currently ElevenLabs); the text sent for synthesis is the AI-generated response, not your personal data.
6. Community features
Study groups. You can create or join a private study group using an invite code. Other members of that group can see your display handle, your study statistics (such as your SAQ, MCQ and viva counts, your highest tier, and your last-active date), and any messages you post in the group chat. Your name and email address are never shown to other members. You can leave a study group at any time.
Question discussions. On practice questions you can post comments that are visible to other users preparing for the same exam. You post under a display handle of your choosing, or anonymously. Comments are checked by an automated moderation step and may be reviewed or removed by our moderators. Your name and email address are never shown.
Live peer practice. Viva Exchange and OSCE Hot Case Exchange let you book and run live practice sessions with another trainee. During a session your audio, and video if you turn on your camera, are streamed in real time to the other participant through our realtime infrastructure provider (LiveKit). After a session, you and your practice partner can each submit a rubric mark and written feedback on the other's performance, which is visible to the person it is about. In an OSCE Hot Case session, the host can choose to record the session audio so the participants can review it afterwards. When recording is enabled, an audio-only recording is stored in cloud storage and is available to the people who took part in that session. You can ask us to delete a recording at any time.
Cohort activity. Your study activity contributes to anonymised, aggregated statistics shown to other users preparing for the same exam, such as recent activity counts and the most-discussed questions. Individual users are not identified in these aggregates.
Saved answers. The saved-answers library is a private archive stored only in your browser on the device you saved from. It is not uploaded to our servers, not shown to other users, and not used to train AI models.
Content you post in study groups or question discussions is stored on our servers so it can be shown to other members. You can ask us to remove community content you have posted at any time.
7. Push notifications (mobile app)
The PRIMEX iOS and Android apps may send you push notifications for flashcard review reminders, new features, or subscription updates if you opt in during first-run setup. Notification preferences can be changed at any time from the device Settings app or from PRIMEX account settings. Push tokens are stored only to deliver notifications to your device. Notifications are routed through Apple Push Notification service (iOS) and Google Firebase Cloud Messaging (Android); these providers receive the device token and the notification payload to deliver the message.
8. Data storage and processors
Your data is stored on Vercel (hosting and serverless functions), Vercel KV and Neon (databases), with servers primarily in the United States. By using the Service, you consent to your data being transferred to and processed in the US.
We use the following third-party processors to deliver the Service. Each is bound by its own privacy and data-processing terms.
- Anthropic - AI language model provider (grading, viva, Ask PRIMEX). No-training commercial API agreement.
- Vercel - application hosting, serverless functions, and Vercel KV database (United States).
- Neon - PostgreSQL database for community features (study groups, question discussions, and cohort activity). United States.
- LiveKit - realtime audio and video infrastructure for live peer practice sessions (Viva Exchange and OSCE Hot Case Exchange).
- Cloudflare R2 - object storage for opt-in audio recordings of OSCE Hot Case practice sessions.
- Stripe - payment processing. Card details go directly to Stripe; we never receive or store them.
- Resend - transactional email delivery (access codes, subscription confirmations, account emails).
- Deepgram - speech-to-text transcription of viva and Ask-PRIMEX voice clips.
- ElevenLabs - text-to-speech for spoken examiner replies in the viva simulator.
- Plausible - privacy-friendly analytics (page views and feature usage; runs without third-party cookies).
- Google Analytics 4 (Google LLC) - measurement of aggregate site usage, conversions, and feature engagement. Uses cookies and may transfer data to the United States.
- Sentry - application error monitoring; receives stack traces and minimal request metadata when something breaks. We avoid sending personal information to Sentry.
- Internal context-retrieval service - a PRIMEX-operated retrieval server that supplies background reference passages to ground AI answers on certain exam sections. Receives the question text only, not your account identity. No personal data is retained by this service beyond the request lifetime.
- Apple Push Notification service / Google Firebase Cloud Messaging - delivery of mobile push notifications.
9. Data retention
We retain your account and study data for as long as your account is active. If you cancel your subscription, your data is kept for 12 months in case you return, then deleted. You can request earlier deletion at any time.
10. Your rights and account deletion
You can access the personal data we hold about you, request correction of inaccurate data, export your study data, and request deletion of your account and all associated data. In the PRIMEX mobile apps, account deletion is available from Settings → Account → Delete Account. On the web, account deletion is available from the Account page or by emailing primex.study.ai@gmail.com. Deletion requests are actioned within 30 days.
11. Cookies
We use a small number of cookies and similar identifiers on the website:
- Strictly necessary: a session cookie to keep you logged in.
- Analytics (Plausible): aggregated, privacy-friendly site usage. No third-party cookies.
- Analytics (Google Analytics 4): measurement of aggregate site usage, conversions, and feature engagement.
We do not use advertising or marketing pixels. To opt out of Google Analytics across all sites, you can install Google's official browser opt-out add-on or enable "Do Not Track" / "Global Privacy Control" in your browser. The PRIMEX iOS and Android apps do not use advertising SDKs or third-party tracking identifiers.
12. Children
The Service is intended for users aged 16 and over (including medical trainees, medical students, and GAMSAT candidates). We do not knowingly collect data from children under 16.
13. Changes
If we make material changes to this policy, we will notify you by email at least 14 days before the changes take effect.
14. Contact
Questions about privacy, or to make a request under Australia's Privacy Act 1988? Email primex.study.ai@gmail.com.