Last updated: September 7, 2026

Privacy Policy

This is a working draft written to close the gap where no policy existed at all — members were asked to agree to one that could not be read. It has not been reviewed by a lawyer. Have counsel review it against your actual data practices, applicable law in the jurisdictions your members and verification documents come from, and any healthcare-specific regulation before treating it as final.

1. Who this applies to

This policy covers HMD (“HMD,” “we,” “us”) and the HMD Campus platform, including iQbank, iConnect, Journal Club, Research Collaboration groups, and ResumePro. HMD is a platform for physicians, residents, fellows, and medical students. It does not collect or store patient health information; any medical content shared by members (case discussions, research, educational material) must not identify real patients.

2. Information we collect

Account and profile information

Name, email address, and password (or OAuth identity via Google or LinkedIn)
Profession, specialty, institution, and country
Profile photo, if you upload one

Verification information

To confirm you are a healthcare professional or student, we collect a verification method (e.g. license number or document upload) and, where applicable, the document itself. Verification documents are reviewed by HMD administrators and are not shared outside HMD except as required by law.

Content you create

Posts, comments, reactions, messages, uploaded files, journal club proposals, research group activity, and CV/resume content you create or upload through the platform.

Usage and technical data

iQbank activity (questions attempted, scores, time spent) to power your own progress dashboard
Log data such as IP address, browser type, and device information
Cookies and local browser storage used to keep you signed in and remember preferences

3. How we use information

To provide and maintain the platform and your account
To verify professional status before granting access to member-only features
To personalize your dashboard, progress tracking, and content
To operate community features (iConnect posts, comments, groups, Journal Club sessions)
To communicate with you about your account, verification status, or platform changes
To maintain platform integrity and security, including detecting abuse

We do not sell member data to third parties.

4. Who we share information with

HMD uses a small number of service providers to operate the platform, each acting as a data processor on our behalf:

Supabase — database, authentication, and file storage
Vercel — application hosting
Google and LinkedIn — optional sign-in (OAuth); we receive only the profile information you authorize
Microsoft (Teams) — hosts Journal Club video sessions you register for

Other members can see your profile, posts, and comments as intended by the platform’s design. Administrators can see verification documents and, for support and moderation purposes, account and content data.

5. Data retention

We retain account and content data for as long as your account is active. If you delete your account, we remove or anonymize personal data within a reasonable period, except where retention is required for legal, security, or audit purposes (for example, records of administrator verification decisions).

6. Your rights

You can review and update most of your profile information directly in your account settings. You may request a copy of your data or request deletion of your account by contacting us at the address below. Depending on your location, you may have additional rights under laws such as the GDPR or similar regulations.

7. Security

We use industry-standard measures — including encrypted connections, access controls, and verification gating on member-only content — to protect your information. No system is completely secure, and we cannot guarantee absolute security of data transmitted to or from the platform.

8. Children’s privacy

HMD is intended for healthcare professionals and students and is not directed at children. We do not knowingly collect information from anyone under 16.

9. Changes to this policy

We may update this policy as the platform evolves. Material changes will be reflected by updating the date at the top of this page.

10. Contact

Questions about this policy or your data can be sent to privacy@hmd.com.co.