Privacy Policy
Last updated: June 2026
What we collect
When you create an account, we collect your email address. If you sign in with Google, we receive your name and email from Google. We store the portfolio evidence you upload — text entries, files, and metadata you provide.
How we use it
Your data is used solely to provide MedPortfolio to you. We do not sell personal data. We do not share your data with third parties except as required to run the service (Supabase for authentication and database storage, Vercel for hosting).
Data storage and security
Your data is stored on Supabase infrastructure (PostgreSQL database and file storage). Connections are encrypted in transit. Each account's data is isolated by row-level security — no user can access another user's data.
What you must not upload
Do not upload patient-identifiable information. MedPortfolio is for professional portfolio evidence only — certificates, feedback forms, audit reports, teaching records and similar professional documents. Uploading patient records or any patient-identifiable data is a violation of these terms and potentially of data protection law.
Your rights
You may request a copy of your data or deletion of your account at any time by emailing hello@medportfolio.co.uk. Account deletion removes all associated portfolio data.
Cookies
MedPortfolio uses session cookies for authentication only. No advertising or tracking cookies are used.
Contact
Questions about this policy: hello@medportfolio.co.uk