Medcue · Policies

Privacy policy

How Medcue handles your personal information, written to the Australian Privacy Principles (APPs). We collect the minimum we need to run the platform, and we don’t sell your data.

Last reviewed 9 July 2026 · Medcue is a trading name of ANAMO PTY LTD · ABN pending

01Scope

This policy applies to personal information ANAMO PTY LTD collects through the Medcue website and platform. “Personal information” has the meaning given in the Privacy Act 1988 (Cth).

02What we collect

  • 01 · Account

    Account details

    Your name, email address and a securely hashed password. Student is available without enrolment verification, so subscription checkout does not require enrolment evidence.

  • 02 · Study

    Study & performance evidence

    Your attempts, answers, confidence ratings, scores, timing, flags, saved questions, viva marks, Verdict inputs and reports, private notes and issue reports. This is the core of the product.

  • 03 · Voice

    AI-Examiner voice data

    If you use an AI assessor feature when available, the audio of your spoken answer and its text transcript (see section 3).

  • 04 · Billing

    Subscription & payment data

    Handled by our payment provider, Stripe. We receive a customer and subscription reference and a transaction record; we do not store your full card number.

  • 05 · Partners

    Partner practice

    Invitation-based Arena and Viva activity, including room or session references and shared practice state. The current product has no public partner-listing board.

  • 06 · Outcomes

    Exam outcomes you share

    An official result you choose to provide with a support or offer claim. Sharing an exam result for product research is optional; current progress reports have not been validated against examination outcomes.

  • 07 · Technical

    Technical data

    Your IP address, browser/device type, and essential cookies used to keep you signed in and to protect forms.

  • 08 · Messages

    Communications

    Messages you send us — for example, support, cancellation or refund requests.

We don’t ask for, and you must not submit, any real patient information.

03Your AI-Examiner voice data

  • When an AI assessor feature is used, we may use a disclosed third-party AI/speech provider to transcribe and evaluate your answer. Your audio and transcript would be sent only for that processing.
  • Your recordings and transcripts are used to give you feedback and to let you review past attempts. We do not sell them and do not use them to train third-party AI models for their own purposes.
  • You can delete individual station attempts, and deleting your account removes your recordings and transcripts (see sections 10 and 11).
  • Speak only about the practice scenario — never include real patient details or identifying information about real people.

04How we use it

  • to provide the platform — deliver questions, save progress, run Viva stations and invitation-based partner practice, and process an AI assessor attempt when that feature is available and requested;
  • to produce your evidence log and Readiness Verdict (see section 5);
  • to process subscription payments, apply discounts, and administer your membership, renewals and cancellations;
  • to keep the service secure and prevent misuse (for example, rate-limiting and fraud checks);
  • to respond to you and send essential service messages such as password resets and account-security notices;
  • to meet our legal obligations.

We rely on your consent and our legitimate business need to operate the service. We don’t use your data for third-party advertising.

05Study progress and AI assistance

Progress uses your submitted answers, practice coverage and recency to describe activity inside Medcue. Reports can show an internal practice range above or below a reference, or say that more practice data is needed. These are not official scores, validated pass predictions or guarantees; they do not set your membership price or decide when you should book an exam.

When you use the text AI assistant, your request and the relevant study context identified by the interface are sent to the configured AI service to produce a response. Conversations, generated notes and credit use may be stored to provide the feature and your history. Review generated material against the underlying study sources and do not submit real patient information.

The current Viva tools use self-marking or a study partner. They do not provide automated AI Viva assessment. The conditional voice-processing commitments in section 3 remain applicable if you choose an available voice-assessment feature.

For an explanation of your progress inputs or the provider processing an AI request, contact support. Sharing official results for research is optional and does not change your access or price. Any outcome research uses de-identified, aggregate results to measure and publish how practice reports relate to outcomes. The current reports have not been validated against examination outcomes.

06Cookies

We use essential cookies to keep you signed in and protect forms. A valid affiliate referral also sets a first-party attribution cookie for 30 days; the last valid referral before signup is used to attribute eligible commissions. Display preferences and some learning drafts may use browser storage. We don’t use third-party advertising or cross-site tracking cookies. Blocking essential cookies will stop you being able to sign in.

07Who we share it with

We share personal information only with service providers who help us run Medcue, and only as needed:

  • 01 · Payments

    Stripe

    Subscription billing and payments.

  • 02 · AI/Speech

    Our AI / speech provider

    To generate responses and notes when you use the text AI assistant; voice processing applies only to a separately available voice feature that you choose to use. Contact support for the provider currently processing your requests.

  • 03 · Email

    Our email provider

    To send transactional emails such as password resets and account-security notices.

  • 04 · Hosting

    Our cloud hosting provider

    To run the application and database (see section 8).

We may also disclose information where required by law. We don’t sell your personal information.

08Where your data is hosted

Medcue runs on cloud infrastructure. Depending on the provider and region, your personal information may be stored and processed on servers located in Australia and/or the United States. Where information is handled overseas, we take reasonable steps to ensure it is protected consistently with the Australian Privacy Principles (APP 8). By using Medcue you consent to this cross-border handling.

09Security & breach response

We protect your information with measures including password hashing (bcrypt), encrypted connections (HTTPS), signed session cookies, CSRF protection and access controls. No system is perfectly secure, but we work to keep your data safe.

If a data breach is likely to result in serious harm, we will act under the Notifiable Data Breaches scheme: contain and assess the incident, notify affected individuals and the Office of the Australian Information Commissioner (OAIC) as required, and tell you what steps you can take to protect yourself.

10Retention

We keep your personal information while your account is active and for as long as needed to provide the service, meet legal and tax obligations, and resolve disputes. When you delete your account we deactivate it immediately and remove or de-identify your personal information — including your AI-Examiner recordings and transcripts and any partner-board listing — within a reasonable period, except where we must retain limited records (for example, transaction records) by law.

11Access, correction & deletion

Under APPs 12 and 13 you can:

  • Access the personal information we hold about you;
  • Correct anything inaccurate — much of this you can update in your account settings;
  • Delete your account and personal information, including your voice recordings and transcripts. You can start this from your account page, or ask us to do it.

Email support@medcue.com.au and we’ll action your request, usually within 30 days.

12Complaints

If you think we’ve mishandled your personal information, contact us first and we’ll try to put it right. If you’re not satisfied, you can complain to the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.

13Children

Medcue is for tertiary students and graduates and is not directed to anyone under 18. We don’t knowingly collect personal information from children.

14Contact

Privacy questions or requests? Email support@medcue.com.au. Medcue is a trading name of ANAMO PTY LTD (ABN pending), Australia.

Minimum collection · automated scoring and voice processing disclosed · we never sell your data