This Privacy Policy explains how CompleteBPT ("we", "us", "our") collects, uses, stores and protects your personal information. By creating an account or using the Platform, you consent to the practices described here.
1. Who We Are
CompleteBPT (ABN 81 063 937 873) is an AI-assisted study platform for RACP Basic Physician Training candidates, operated from New South Wales, Australia. For privacy enquiries, email support@completebpt.com.
2. Information We Collect
- Account information — your display name and email address, collected when you register, and the dates you accepted these terms.
- Study activity — flashcard reviews and ratings, your answers to questions and the resulting accuracy figures, case reviews, Sage presentation scores, the days you studied, your exam dates and study preferences.
- Content you create — personal notes, custom flashcards and saved favourites.
- Audio recordings — voice recordings made when you present a case to Sage. They are processed when you submit them and are not kept.
- Sage scores and feedback — the transcript, score and feedback from each marked presentation, kept for your logbook.
- Leaderboard and challenge data — your weekly count of questions answered, the name or pseudonym you chose to appear under, and the results of any challenge you send or accept.
- Referral data — your referral code, which account referred you (if any), and how many people you have referred.
- Access and payment data — your access period and its source (free period, purchase, referral or grant). If you buy a plan, Stripe handles the payment; we store the purchase date and expiry, never card details. No payment information is collected during the free period.
- Device and session data — identifiers for the devices you are signed in on (up to five), used to keep your account secure.
- Email preferences — whether you have opted out of non-essential emails.
3. How We Use Your Information
- To run the Platform: scheduling your reviews, tracking your progress, showing your logbook and topic pages
- To produce cohort statistics: your answers are combined with everyone else's to show, for each question, what share of trainees chose each option and how hard it is. These figures are published only as percentages, only once at least ten people have answered, and never with anything that identifies you
- To run the weekly leaderboard, which counts questions answered and shows you under a pseudonym unless you choose otherwise
- To share a challenge result with the one colleague you challenged, and theirs with you
- To credit referral months to the account whose link a new user signed up with
- To manage access and, if you buy a plan, process the payment through Stripe
- To send account emails (verification, welcome, access changes) and occasional product updates, which you can opt out of from any email or in Settings
- To keep accounts secure, enforce the device limit and prevent misuse
- To answer support enquiries and to improve the Platform using aggregated usage patterns
We do not sell your personal data, and we do not use it to target advertising. On our public pages we use Google Ads conversion tracking to measure whether advertising brings visitors to the site; that sets a cookie but does not involve your account data.
4. Where Your Data Is Stored
Your data is held on Google Cloud (Firebase) infrastructure. Our database is located in Sydney, Australia, and is encrypted in transit and at rest. Some processing is carried out by providers that may handle data outside Australia: Firebase Authentication, Google AI (for Sage), Stripe (payments) and Resend (email delivery). By using the Platform you consent to that processing.
5. Third-Party Services
- Firebase / Google Cloud — authentication, database and hosting
- Google AI (Gemini) — transcription, marking and explanations for Sage
- Stripe — payment processing for one-off purchases
- Resend — delivery of account and product emails
- Google Ads — conversion tracking on public pages only
Each provider operates under its own privacy policy and data-processing terms. We do not share identifiable personal data with any other third party.
6. Audio and Sage
When you present a case to Sage, your recording is sent to our server, transcribed and marked by Google AI, and the recording is discarded. The transcript, score and feedback are stored in your account for your logbook. You can delete your Sage history by deleting your account, or ask us to remove particular entries.
7. Cohort Statistics, Leaderboard and Challenges
- Cohort statistics use each person's first attempt at a question. We publish percentages only, never counts, and only once ten or more people have answered. Admin accounts are excluded. Nothing published can be traced to an individual.
- Leaderboard entries are a count of questions answered in the week, Monday to Sunday Sydney time. You appear under a stable pseudonym by default. In Settings you can show your display name instead, or hide yourself from the board entirely. Scores and accuracy are never shown.
- Challenges are between two people. The colleague you challenge sees your score on that set of questions, and you see theirs. Nobody else does.
8. Data Retention and Deletion
We keep your personal data while your account is active. If you delete your account from Settings, your login, personal data, study records, notes, comments and challenge results are deleted straight away; email us if you would like confirmation. Aggregated statistics already derived from your answers do not identify you and are retained. Stripe keeps billing records for its own legal obligations under its privacy policy.
9. Your Rights
Under the Australian Privacy Act 1988 (Cth) and other applicable law, you can:
- Access the personal information we hold about you
- Ask us to correct information that is inaccurate or incomplete
- Ask us to delete your personal data
- Withdraw consent to processing, by deleting your account
- Opt out of non-essential emails, from the link in any email or in Settings
- Hide yourself from the leaderboard, in Settings
To exercise any of these, email support@completebpt.com.
10. Security
We use reasonable technical and organisational measures to protect your information: encrypted transmission (HTTPS), encryption at rest, database security rules that limit access to each account's own data, Stripe-managed payment security, and publication of cohort figures only in aggregate. No system is completely secure, and we cannot guarantee absolute security.
11. Children
The Platform is for users aged 18 and over. We do not knowingly collect personal information from anyone under 18; if we learn that we have, we will delete the account.
12. Changes to This Policy
We may update this policy from time to time and will notify you of material changes by email or by notice within the Platform. Continued use after changes are published constitutes acceptance of the updated policy.
13. Governing Law
This policy is governed by the laws of New South Wales, Australia, and the Australian Privacy Act 1988 (Cth). Any dispute is subject to the exclusive jurisdiction of the courts of New South Wales.