Privacy Policy
Last updated: November 8, 2026
This policy explains what personal data meduxa.ai collects, why, who it is shared with, how long it is kept, and what rights you have over it. It is written to meet both the EU General Data Protection Regulation (GDPR) and Israel's Privacy Protection Law, 5741-1981 (including Amendment 13).
The short version: we collect one email address (and, if you chose to give it, your specialty) — only if you typed it into the waitlist form, and only to tell you when the pilot opens. No advertising cookies, no cross-site tracking, and nothing is ever sold or shared with advertisers. You can ask us to delete your data at any time at privacy@meduxa.ai. This box covers the marketing site; for connecting your own AI tool in the app, see section 11.
1. Who is responsible for your data
MeduXa ("we", "us") operates meduxa.ai from Israel and is the controller of the personal data collected through it. For anything privacy-related, including the rights in section 7, write to privacy@meduxa.ai.
2. What we collect and why
This is a marketing site. It has no sign-up, no user accounts and no identifiable medical data. This is everything it collects:
| Data | Purpose | Legal basis |
|---|---|---|
| Email address — only if you submitted the waitlist form. Stored alongside it: the language of the page you signed up from and the time of signup. If you signed up on the family medicine page, we also store which page it was and when you gave consent, and the update we send you includes the launch price. If you signed up in the app and answered "which specialty?", we also store the specialty you chose; the question is optional. | To tell you when the pilot opens, and to write to you in the right language. Your specialty, if you gave it, is used to decide which packages to open and to tell you about the one that fits you. We do not send you other companies' marketing. | Consent — Art. 6(1)(a) GDPR. Giving us your email is voluntary and there is no statutory obligation to provide it; without it we simply cannot notify you. |
| Messages you type into the AI tutor demo at the top of the home page. | To generate the tutor's reply. Messages are sent to our language-model provider and are not stored in any database of ours. | Consent — an action you initiate yourself by sending the message. |
| Your IP address when you use the demo. | Rate limiting (three requests per hour) to prevent abuse of the demo. Held in server memory for at most an hour and never written to a database. | Legitimate interest — Art. 6(1)(f): protecting the service from abuse. |
| Aggregate traffic data — how many visitors reached which page, roughly which country from, and which on-page events occurred (for example, a click on the start button). | To understand what works on the page. Measurement runs on Vercel Web Analytics, which sets no cookies and creates no persistent visitor identifier, so it cannot track you across sites or identify you. | Legitimate interest — Art. 6(1)(f): aggregate, non-identifying measurement. |
| Operational server logs (IP address, timestamp, requested URL). | Operations, security and debugging. Created and deleted by our hosting provider under its own retention policy. | Legitimate interest — Art. 6(1)(f). |
| Detailed usage data — only if you consent: which pages you viewed, clicks and scrolling, device and browser type, approximate location, and a random visitor ID in a cookie. With Microsoft Clarity, also a recording of your session on the page (mouse movement, clicks and scrolling), with anything typed into fields masked. | To understand how the site is used and improve it. Measurement runs on Google Analytics and Microsoft Clarity, which load only after you click "Accept" in the consent notice. | Consent — Art. 6(1)(a). You can withdraw it at any time (see section 3). |
3. Cookies
This site sets no advertising or social-network cookies. Without your consent, only two strictly necessary items are stored:
- mx_lang — a functional cookie that remembers whether you were served the Hebrew or the English version, so the language routing returns you to the same one. Lifetime: one year. It holds no personal data and is never sent to a third party. You can delete it at any time in your browser settings.
- mx_analytics_consent — kept in your browser's local storage (localStorage). It remembers whether you accepted or declined measurement, so we don't ask again on every page. It is never sent anywhere.
Only if you consent, these measurement tools also load and set their own cookies:
- Google Analytics — the _ga and _ga_<id> cookies, which recognise a returning visitor. Lifetime: up to two years.
- Microsoft Clarity — the _clck (up to one year) and _clsk (one day) cookies, and sometimes other Microsoft cookies such as MUID.
If you haven't chosen, or you declined, these tools do not load at all. You can change your choice at any time: measurement settings. Withdrawing consent stops measurement from that moment; cookies already stored can be deleted in your browser settings.
4. Who your data is shared with
We do not sell your data, rent it, or hand it to advertisers. It is processed only by these service providers (processors):
- Supabase — stores the waitlist (the email addresses) and, for the app, the connection data described in section 11.
- Vercel — hosts the site, keeps operational logs and runs the aggregate traffic measurement.
- OpenRouter and Anthropic — route (OpenRouter) and process (Anthropic, the model provider) the messages typed into the tutor demo, solely to generate the reply.
- Google (Google Analytics) — usage measurement, only if you consent.
- Microsoft (Microsoft Clarity) — usage measurement and session recording, only if you consent.
Beyond that, we will disclose data if a court order or the law requires it.
Transfers outside the EEA and Israel
These providers' servers are located primarily in the United States. Transfers rely on the standard transfer mechanisms in those providers' data processing agreements (DPAs), including the European Commission's Standard Contractual Clauses (SCCs).
5. How long we keep it
- Waitlist email address: up to 24 months from signup, or until you ask us to delete it — whichever comes first. Deletion requests are handled within 30 days.
- Tutor demo messages: not stored by us at all; they exist only in your browser tab until you reload the page.
- IP address for rate limiting: at most one hour, in server memory.
- Aggregate traffic data: held by the measurement provider in aggregate form only, with no way to tie it back to you.
6. Security
The waitlist lives in a managed database with restricted access: the public key embedded in the page can only insert a row, and reading the list is blocked at the database's row-level security policy. Traffic to the site and to our providers is encrypted (HTTPS). The site holds no passwords, no payment details and no identifiable medical data. Should a security incident put your data at risk, we will notify you and the authorities as the law requires.
7. Your rights
Under the GDPR and Israel's Privacy Protection Law you have the right to:
- Access — find out what data we hold about you and get a copy of it.
- Rectification — correct data that is wrong or out of date.
- Erasure — ask us to delete your data.
- Restriction and objection — including objecting to processing based on legitimate interest.
- Portability — receive your data in a structured, commonly used format.
- Withdraw consent — at any time. Withdrawal does not affect the lawfulness of processing carried out before it.
To exercise any of these, write to privacy@meduxa.ai. We reply within 30 days. No reason is needed and there is no charge.
Right to complain: if our answer does not satisfy you, you can lodge a complaint with the data protection supervisory authority in your EU country of residence, or with the Israeli Privacy Protection Authority.
8. Children
This service is intended for physicians, residents and medical students. Do not join the waitlist if you are under 16. If we learn that we hold data about someone younger, we will delete it.
9. Changes to this policy
We may update this policy from time to time. The date of the last update appears at the top of this page, and we will email waitlist subscribers about any material change before it takes effect.
10. Contact
Privacy questions, requests and complaints: privacy@meduxa.ai.
11. Connecting your own AI tool to the app
This section applies to the app.meduxa.ai app, not to the marketing site. Where the option is available on your account, you can create a personal token in the app and use it to connect an AI tool of your choice (for example Claude Code or Cursor) to your account. The connection does not change your answers or progress in the app unless you turn on "Save answers", and it can save a practice set to "My sets" when you ask it to (both described below). The connection is your choice and stays inactive until you create a token or approve a connection from an AI app.
- What the tool can receive: text practice questions (no images) from the bundles you have access to; the correct answer and, only if cleared for sharing, the explanation, the rationale for the chosen option and the source, only after an answer choice is submitted for a question the tool sent you in the last 24 hours; and your own progress data: your bundles and access expiry, your attempts and accuracy per topic, and review cards that are due. Never another user's data.
- Connecting through sign-in from an AI app: in apps that support it (for example ChatGPT or claude.ai) you can connect your account without a token: the app sends you to MeduXa, you sign in and approve on a consent screen that shows the app's web address and what it will be able to read. After you approve, the app receives an access token for that same access, valid for 30 days. We keep: the app's registration (the name it declared and its return addresses), deleted when a new app registers after it has gone unused for 30 days and no connection still uses it; the connection request, valid for 10 minutes, and the one-time approval code, valid for 5 minutes (both deleted when a new connection request is made after they are a day old); and the connection record (the app's web address, the dates, and the token only as a one-way hash). During the connection a strictly necessary technical cookie is kept in your browser for ten minutes, to check that approval happens in the same browser where the connection started. You can connect up to three apps; reconnecting the same app replaces the previous connection, and when three are active, connecting another tool that runs on your own computer disconnects the oldest such tool, if there is one; otherwise the new connection is refused.
- Where it goes: what the tool receives from MeduXa, and what you type to it, is sent to the AI provider you chose and processed under that provider's privacy policy, including whether the data is kept or used for training. That provider is not our service provider: you choose it and you operate it.
- What we keep: the token record (the name you gave it, an identifying prefix, and the dates it was created, expires, was revoked and was last used; the token itself is stored only as a one-way hash that cannot be turned back into the token, and the identifying prefix is the only part kept in clear); daily usage counters (tool calls, questions sent, answers checked); and a log of the questions sent to the tool and of those whose answer was revealed through it, with the time. The log is used to allow an answer check only for a question that was sent to you and to protect the service; the usage counters apply the daily limits. This data is kept at most as long as your account exists (records of expired or revoked tokens may be removed earlier) and is deleted when it is deleted (to request deletion: privacy@meduxa.ai, see section 7). Legal basis: performance of our agreement with you, Article 6(1)(b) GDPR; for the abuse-protection purpose, legitimate interest, Article 6(1)(f).
- Logs and IP address: our call log records only the tool name, whether the call succeeded and how long it took, and not the token, the user ID or any question text (on an unexpected failure it also records a short technical error message, which is not designed to include any of these). As with any request to a server, our hosting provider (Vercel) receives the requester's IP address and records it in its operational logs, as described in section 2 (legitimate interest, Article 6(1)(f)). To protect the service, our hosting provider also counts requests per IP address and limits them to 60 per minute on the endpoints used for this connection (same legitimate interest). We do not store IP addresses in the connection data.
- Control: you can revoke a token or disconnect an app, or all of them at once, at any time in the app. You can hold up to three active personal tokens and, separately, up to three app connections. A personal token expires after 90 days and an app connection after 30 days; changing or resetting your password revokes all of them automatically. Unless you turn on "Save answers", the connection does not change your progress in the app: an answer checked through the tool is not recorded there as an attempt.
- Saving your answers (optional, off by default): in the app you can turn on "Save answers". It applies to all your connected AI tools and apps, and you can turn it off at any time in the app. While it is on, the first answer checked through the tool for each question that MeduXa sent to the tool is saved to your progress in the app, as an attempt, in your accuracy and, for a review question, in your review schedule; later checks of the same question are not saved. Each saved answer is marked as coming from a connected AI tool, together with the record of the question being sent, which identifies the token or connection used. Saved answers are not counted in the readiness estimate, in other users' answer statistics or in the leaderboard. Where this option is available on your account, we keep a record of each question sent to the tool (the question, the time, the token or connection, and whether and how it was answered) for 30 days, whether or not the option is on, so that an answer can be linked to the question it answers. Turning the option off stops new saving; answers already saved stay in your progress, like answers given in the app, and are deleted with your account. Legal basis: performance of our agreement with you, Article 6(1)(b) GDPR, at your request.
- Saving a practice set (where available on your account): when you ask it to, the tool can save a named list of questions as a practice set under "My sets" in the app. We store the name, the questions and their order, the day and, if the tool provides one, an https link back to your study summary. Saving again with the same name and day replaces that set's questions. A set is kept while your account exists (archiving only hides it) and is deleted with your account. Saving a set does not change your answers or progress. Legal basis: performance of our agreement with you, Article 6(1)(b) GDPR, at your request.