Privacy Policy and Data Processing
ultima actualizacion: 19 Of Agosto, 2026
At MedMaster AIPrivacy, transparency, and ethical data handling are fundamental pillars. This Privacy Policy describes how we collect, use, store, and protect your personal information under applicable privacy regulations.Ley N° 21.719 About Proteccion Of Datos Personales).Ley N° 19.628 About Proteccion of the Vida Privada.
1. Responsable of the Treatment Of Datos
The responsable of the treatment of the datos personales recopilados a traves of the plataforma MedMaster AI esAurora Digital Labs SpA (In adelante, "The Empresa").
- Razon Social: Aurora Digital Labs SpA
- Domicilio Legal: Santiago, Chile
- Correo Of Contacto General: soporte@medmasterai.com
- Canal Oficial of privacy and Derechos of Datos: privacidad@medmasterai.com
2. Datos Tratados, Finalidades, Bases Legales and Conservacion
Below we detail categories of personal data processed by MedMaster AI, technical purposes, legal bases, and retention criteria:
| Dato / Categoria | Finalidad Especifica | Base Legal (Ley 21.719) | Destinatarios / Encargados | Retention Period |
|---|---|---|---|---|
| Datos of account Nombre, email, Google UID, foto Of perfil | Account creation, user authentication, session management, and essential service notifications. | execution of the contrato Of servicio. | Firebase Authentication / Google Cloud Platform (EE.UU.). | While the user account remains active + legal statutory retention period. |
| Materiales and Documentos PDFs, PPTX, lecture audios, video links | Automated processing and generation of academic notes and flashcards using AI. | execution of the servicio a solicitud expresa of the usuario. | Google Cloud Storage (almacenamiento) and Google Gemini API (analysis and transcripcion). | Retained in account storage as long as the user keeps the note or until they choose to delete it. |
| Academic History Generated notes, FSRS reviews, quiz answers | Study calendar scheduling, formative progress estimation, and spaced repetition queue management. | execution of the servicio educativo. | Google Firestore (Google Cloud Platform). | During active account lifecycle or until deletion requested by the user. |
| Datos of payment Transaction ID, country, date, plan type | Subscription and billing processing.(MedMaster not almacena numeros Of card ni CVV). | execution Of contrato and cumplimiento tributario (SII). | dLocal Go | Statutory legal accounting and tax retention periods required by Chilean law (up to 6 years). |
| Cookies and Analitica UTMs, Meta Pixel, Google Analytics | Medicion Of performance publicitario and analitica Of navegacion web. | Consentimiento previo e informado of the titular via banner Of cookies. | Meta Platforms Inc. and Google LLC. | Sujeto a The expiracion of the cookie or to the revocacion Of consentimiento By The usuario. |
3. Inteligencia Artificial, Algoritmos Pedagogicos and Estimacion Of Dominio
MedMaster AI utilizes automated algorithms (such as the FSRS spaced repetition algorithm and Bayesian estimation models) to analyze your study patterns and recall performance, solely to suggest optimal review intervals and focus areas.
Scope Notice: Estimates and scores generated by the platform are formative and pedagogical tools. They do not constitute formal medical diagnoses, binding academic certifications, or automated legal decisions.
4. Transferencias Internacionales Of Datos
for prestar their servicios, MedMaster AI utiliza infraestructura Of computacion In The nube and modelos Of procesamiento Of datos operados By proveedores Of primer nivel internacional:
- Google Cloud Platform & Firebase: Almacenamiento seguro, autenticacion and base Of datos With centros Of datos principales In The Estados Unidos Of America.
- Google Gemini API: Natural language processing and medical note extraction.
- dLocal Go Pasarela global for procesamiento seguro Of transacciones monetarias.
These transfers are necessary for technical service delivery and are carried out under security standards with encryption in transit (TLS 1.3) and at rest (AES-256).
5. Derechos of the Titular Of Datos Personales
In accordance with personal data protection laws of the Republic of Chile (including Law No. 21.719), personal data subjects may exercise the following rights at any time:
- Acceso: Know what personal data we have stored and how it is processed.
- Rectificacion: Solicitar The correccion or actualizacion Of datos inexactos or desactualizados.
- Supresion: Request permanent deletion of your personal data when no longer necessary for the purpose for which it was collected.
- Oposicion: Oponerse to the treatment Of Your datos for finalidades especificas (By ejemplo, comunicaciones comerciales or analitica).
- Portabilidad: Solicitar The entrega Of Your datos personales In A formato electronico estructurado and Of uso comun.
- Bloqueo: Solicitar The suspension temporal Of cualquier operacion Of treatment About Your datos In The cases previstos By The ley.
Procedimiento for Ejercer Your Derechos:
To exercise any of your privacy rights, send an email toprivacidad@medmasterai.com indicating your name, email associated with your account, and the specific right you wish to exercise. We will respond within established legal timeframes.
6. Seguridad of the Informacion
Implementamos salvaguardas tecnicas, administrativas and organizativas for proteger The confidencialidad e integridad Of Your datos personales frente a accesos not autorizados, perdidas accidentales, divulgaciones or modificaciones ilicitas.
7. Updates to this Policy
We may periodically update this Privacy Policy to reflect platform enhancements or regulatory changes. Any substantial modification will be communicated through the platform or via email to the address registered in your account.