Privacy Policy

This Privacy Policy explains what personal information Anaesthesia Viva (“we”, “us”) collects, why, and how it is handled. Anaesthesia Viva is a private study site for anaesthesia examination preparation, operated by AN Langley Med Pty Ltd. You can contact us about privacy at support@anaesthesia-viva.com.

Information we collect

• Account information — your name and email address. This site has no passwords at all: you sign in with a one-time link emailed to you, or with a passkey. For a passkey we store only its public key and device label — the private key never leaves your device.
• Registration details — what you tell us when you apply for access: your current role, your medical registration number and the register it appears on (if you provide them), and the reason you give for wanting access, together with the IP address and browser user-agent of the registration request.
• Usage and progress data — which vivas, SAQs and pages you view and when, which model answers you have unlocked, your token balance and token history, and your purchase history. This is what powers your progress tracking.
• Technical data — your IP address and browser user-agent, recorded with sign-in sessions and content requests for security and to enforce fair-use limits.

How we use it

• To check that applicants are medical practitioners, or medical students, preparing for anaesthesia examinations, and to decide whether to approve a registration. This may include checking a registration number you provide against the public register you name (for example AHPRA’s Register of Practitioners).
• To provide the service, authenticate you, and remember your progress.
• To operate the token economy (crediting purchases, spending tokens to unlock answers).
• To protect the content — a fair-use limit temporarily suspends accounts that download more than 30 items in an hour.
• To send you essential emails (sign-in links, approval notice, membership reminders).

Service providers we share data with

We do not sell your personal information. We share the minimum necessary with the providers that run the service:

• Polar — our payment processor and merchant of record. When you make a purchase, Polar collects and processes your payment details directly; we never see or store your card information. See Polar’s privacy policy at polar.sh/legal/privacy.
• Cloudflare Turnstile — an invisible bot-protection check on our sign-in and registration forms. Your use of Turnstile on this site is subject to the Cloudflare Turnstile Privacy Policy Addendum. Turnstile does not require solving a puzzle and is used only to distinguish humans from bots.
• Neon — our database host (Postgres), where account, usage and purchase records are stored.
• Resend — our email delivery provider, used to send the essential account emails described above from noreply@anaesthesia-viva.com.
• OpenAI — powers the voice viva examiner. During a live voice viva your speech is streamed to OpenAI’s realtime API so the examiner can hear and reply, and the text of your answers is sent to OpenAI models to mark them and write your report. OpenAI processes this under its API data-usage terms (API inputs are not used to train its models). See openai.com/policies/privacy-policy.

Voice viva

We keep no audio and no transcript of a voice viva. Once your report has been written, the spoken turns are erased from our records; what remains is the marked report (scores, the points you covered with short evidence phrases, and the narrative), which is saved to your vault. A session that ends before it is marked is erased within a few hours. Where a voice viva costs tokens, the charge and any automatic refund appear in your token history.

Data retention

We keep your account and associated records while your account exists. If you ask us to delete your account, we will remove your personal data, subject to any records we are required to retain for legal, tax or accounting purposes (for example, purchase records held by our payment processor).

Registration details submitted with an application that is never completed (the sign-in link is not clicked) are deleted after 30 days. For accounts, registration details are kept while the account exists and are deleted when the account is closed.

Your rights

You may request access to, correction of, or deletion of your personal information by emailing support@anaesthesia-viva.com. Depending on where you live, you may have additional rights under local privacy law (for example the Australian Privacy Principles or the GDPR).

Security

Access to content is gated behind authentication, sign-in is passwordless (so there is no password to steal or reuse), content is served only through an authenticated handler (never a public CDN), and transport is encrypted with HTTPS. No system is perfectly secure, but we take reasonable steps to protect your data.

Changes

We may update this policy from time to time. Material changes will be reflected by the “last updated” date above. Continued use of the site after a change constitutes acceptance of the updated policy.

See also our Terms & Refund Policy and Disclaimer.