Privacy Policy

This Privacy Policy explains how CompleteBPT ("we", "us", "our") collects, uses, stores, and protects your personal information when you use our platform. By creating an account or using the Platform, you consent to the practices described in this policy.

1. Who We Are

CompleteBPT is an AI-assisted study platform for RACP Basic Physician Training (BPT) candidates, operated from New South Wales, Australia. For privacy enquiries, please contact us via the Support page.

2. Information We Collect

We collect the following categories of personal information:

• Account information — your display name and email address, collected when you register.
• Study activity data — flashcard review history, MCQ attempt history and accuracy statistics, case review progress, Sage presentation scores, exam dates, and study preferences.
• User-generated content — personal notes, custom flashcards, and saved favourites you create within the Platform.
• Audio recordings — voice recordings made during Sage presentation practice sessions. These are processed in real time for transcription and are not permanently stored.
• Sage scores and feedback — the results of AI-marked presentation attempts, including scores and feedback text, are stored to power your Sage Logbook.
• Payment and access data — access plan status, purchase dates, and access expiry dates, managed via Stripe. We do not store payment card details. Payments are one-time and do not auto-renew.
• Device and session data — session identifiers used to manage account security and single-device login enforcement.

3. How We Use Your Information

We use your information to:

• Provide and operate the Platform, including personalised study scheduling and progress tracking
• Process and display AI-generated feedback on your presentation attempts
• Manage your subscription, process payments via Stripe, and communicate billing information
• Enforce account security, including session management and abuse prevention
• Respond to support enquiries
• Improve and develop the Platform based on aggregated usage patterns

We do not use your personal data for advertising or sell it to third parties.

4. How We Store Your Data

Your data is stored securely using Firebase (Google Cloud) infrastructure, with servers located in the United States. By using the Platform, you consent to this international transfer of data. Firebase provides enterprise-grade security including encryption at rest and in transit.

5. Third-Party Services

We use the following third-party services to operate the Platform:

• Firebase / Google Cloud — authentication, database, and hosting
• Stripe — subscription billing and payment processing
• Google AI (Gemini) — audio transcription and AI feedback generation for Sage

Each of these providers operates under their own privacy policies and data processing agreements. We do not share identifiable personal data with any other third parties.

6. Audio Data and Sage

When you use the Sage presentation practice feature, your voice recording is transmitted to our servers, transcribed using Google AI, and evaluated against a model answer. The audio recording itself is not permanently stored. The resulting transcript, score, and feedback are stored in your account to populate your Sage Logbook. You can view and delete your Sage history at any time by contacting us or deleting your account.

7. Data Retention

We retain your personal data for as long as your account is active. If you delete your account, your personal data and user-generated content are permanently deleted. Stripe may retain billing records for their own legal and compliance purposes in accordance with their privacy policy.

8. Your Rights

Under the Australian Privacy Act 1988 and applicable privacy laws, you have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate or incomplete information
• Request deletion of your personal data
• Withdraw consent to data processing (by deleting your account)

To exercise any of these rights, please contact us via the Support page.

9. Security

We implement reasonable technical and organisational measures to protect your personal information against unauthorised access, disclosure, alteration, or destruction. These include encrypted data transmission (HTTPS), Firebase security rules restricting data access to account owners, and Stripe-managed payment security. No system is completely secure, and we cannot guarantee the absolute security of your data.

10. Children

The Platform is intended for users aged 18 and over. We do not knowingly collect personal information from children under 18. If we become aware that a user is under 18, we will delete their account.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or notice within the Platform. Continued use of the Platform after changes are published constitutes acceptance of the updated policy.

12. Governing Law

This Privacy Policy is governed by the laws of New South Wales, Australia, and the Australian Privacy Act 1988 (Cth). Any disputes shall be subject to the exclusive jurisdiction of the courts of New South Wales.