Privacy Policy

1. Who we are

League of Doctor is an educational medical simulation game operated from Türkiye and available worldwide through the Apple App Store. For any privacy question or request, contact [email protected].

2. Data we collect

• Account: email address, username, password (stored only as a salted hash).
• Profile (optional): display name, country, profession, bio, profile photo.
• Social sign-in: if you sign in with Apple or Google, we receive a unique user identifier and your email address from that provider. We never receive your password.
• Gameplay: scores, MMR, league, match and tournament history, streaks, case transcripts, library bookmarks.
• My Patients notebook (optional): if you use this feature, your patient notes, appointments, favourites and any photos you add reach our servers already encrypted on your device. We only store an encrypted blob we cannot read (see section 3).
• AI Assistant chats (premium): the messages you write to the assistant, its replies and any lab photos or PDF files you upload are stored against your account (see section 4).
• Notifications: if you allow push notifications, your device token.
• Subscription status: whether your premium subscription is active, from Apple. We never receive your card or payment details.
• Technical: IP address and basic request logs, kept for security and abuse prevention.

We do not use advertising identifiers, we do not track you across other apps or websites, and we do not run third-party advertising or analytics SDKs in the app.

3. My Patients — an end-to-end encrypted notebook

The My Patients section of the app is for your own patient notes, appointments and favourites. It is end-to-end encrypted and works differently from the rest of your data:

• The encryption key is derived on your device from the notebook password you choose and never leaves it. We do not know your password.
• Our servers carry only an unreadable encrypted blob. Neither we, nor our hosting provider, nor anyone with database access can see the content.
• For the same reason there is no server-side search, filtering or reporting; search runs on your device.
• Photos you attach are encrypted on your device too; storage holds anonymous, unreadable files that are served only to you.
• If you forget your password, the recovery code shown to you once during setup is your only way in. We do not hold that code either — if you lose both, nobody can restore your notebook. That is what end-to-end encryption means.
• Backup files you export are encrypted as well and open only with your password.

You are the data controller for anything you enter here; your obligations towards your patients (informing them, consent, retention periods) remain yours. Do not use the app as a patient record system or as an official medical record.

4. AI features

AI patient dialogue: questions you type to the AI patient inside a case are sent to our AI provider (Anthropic) to generate a response, and are stored in your account as game transcripts.

AI Assistant (premium): the messages you write and any lab photos or PDF files you upload are sent to Anthropic so that a reply can be generated; your chat history and attachments are stored against your account. Attachments are never served over public links — they are delivered to you only after authentication. You can delete chats and their attachments from inside the app.

Our AI provider does not use this data to train its models.

Do not enter real patient data or anyone's identifying or health information into the AI features. Redact names, ID numbers and similar details from documents before uploading them.

5. How we use data

• Providing the game experience (matchmaking, leaderboards, tournaments, friends, presence).
• Account security, email verification and abuse prevention.
• Subscription entitlement management via the App Store.
• Aggregated, anonymous statistics to improve the service.

Our legal bases under GDPR are performance of the contract (providing the service), legitimate interest (security and abuse prevention) and consent (push notifications).

6. Sharing

Your data is never sold. It is shared only with the service providers required to operate the product: hosting (Netcup, Germany), network and delivery (Cloudflare), email delivery (Resend), AI generation (Anthropic), object storage for profile photos (Amazon S3), and Apple for purchases and push notifications. Data may also be disclosed where required by law.

7. Retention

Account and gameplay data is kept while your account exists. When you delete your account, personal data is removed and any remaining statistics are anonymised. Backups are rotated and expire within 14 days. Request logs are kept for a short period for security purposes. Your My Patients notebook and AI Assistant chats are kept (encrypted, in the notebook's case) until you delete them or close your account; you can reset the notebook completely from inside the app.

8. Your rights

Under GDPR and Turkish KVKK you may access, correct, export or delete your data, and object to certain processing. You can delete your account and all associated data directly in the app: Profile → Delete account. You may also write to [email protected] and we will respond within 30 days.

9. Children

The service is intended for medical students and healthcare professionals and is not directed at children under 13. We do not knowingly collect data from them.

10. Changes

If this policy changes materially, we will update this page and, where appropriate, notify you in the app. The date at the top always reflects the current version.

11. Disclaimer

League of Doctor is an educational simulation. Its cases, library content and AI output are not medical advice and must not be used as a source for real clinical decisions.