Privacy Policy

MyoScan IQ operates the MyoScan IQ educational platform (the "Platform"), a Cardiac MRI learning resource available as a web application, iOS app, and Android app.

Legal business name: James Davies trading as MyoScan IQ
Business address: 64 Phoenix Way, Birchgrove, Cardiff, CF14 4PQ
Jurisdiction: England and Wales

Contact email: myoscaniqsupport@gmail.com

Data protection contact: myoscaniqsupport@gmail.com

This Privacy Policy explains what personal information we collect, why we collect it, the legal basis for each type of processing, and the rights you have over your data.

Account information

When you create an account, we collect:

• Your email address (required to create an account)
• A password — stored as a hashed value by our platform provider; we do not see or store your plain-text password
• Your name, if provided through your Google account or your profile
• A unique internal user identifier
• The date your account was created

If you sign in with Google, Google shares your email address and basic profile information with us as part of the authentication process.

Purchase and entitlement information

When you purchase Full Access, we record:

• Your entitlement status (active)
• The purchase source (Stripe)
• A Stripe session identifier (used to link the payment to your account)
• The purchase date and time
• The product identifier

Learning activity

We store your learning activity to provide progress tracking and personalised features:

• Learning progress — content type, content identifier, status, and progress percentage
• Quiz scores and attempt counts
• Weekly Question participation — which option you selected
• Saved protocols (name, sequences, and notes you choose to save)
• Learning path progress
• Timestamps of when you last accessed content

CMR logbook entries

The CMR Logbook allows you to record exams you have performed for your own continuing professional development (CPD). We store:

• Scanner manufacturer, field strength, exam type, and indication
• Sequences performed, your role, and any exam issues
• The date and time of the entry

Simulator data

If you use the Slice Positioner simulator, we store:

• Generated series and prescription data
• Slice and display configuration

Technical information

Our platform provider automatically collects and processes:

• IP address — for security and service operation
• Browser and device information (user agent) — collected automatically by the hosting infrastructure
• Authentication session tokens — stored in your browser's local storage to keep you signed in
• Server security logs — for security and fraud prevention

We process each category of personal data for specific purposes, relying on the following lawful bases under UK data protection law:

Provision of your account, purchase, and learning data is necessary to provide the service you have requested. If you do not provide this information, you will not be able to create an account or use the Platform's features.

For processing based on legitimate interests, we have assessed that these purposes do not override your rights and freedoms. You have the right to object to processing based on legitimate interests (see "Your rights" below).

We use the following service providers to operate the Platform:

Base44

Our hosting, backend, database, authentication, and file storage provider. Base44 processes your account information, learning data, logbook entries, anatomy annotations, simulator data, and technical data to provide the Platform's infrastructure. Base44 also provides the email delivery service for the contact form and authentication emails.

Stripe

Our payment processor. Stripe processes your payment card information and transaction data. MyoScan IQ receives only the Stripe session identifier and payment status. Stripe is responsible for the security of your card information under Stripe's own privacy policy.

Google

Provides Google Sign-In for authentication. If you choose to sign in with Google, Google shares your email address and basic profile information with us. Google also provides the fonts loaded on the Platform via its content delivery network.

Apple App Store and Google Play

Distribute the iOS and Android versions of MyoScan IQ. When you click a download link, you are taken to Apple's or Google's website. These services do not receive your MyoScan IQ account or learning data through the web application.

Your information may be processed by our service providers outside the United Kingdom. Each provider is responsible for its own international-transfer arrangements:

• Base44 states that app data is stored in the United States by default. Base44's Data Processing Agreement (DPA) addresses international data transfers and provides for lawful transfer mechanisms. A copy of the DPA is available from Base44 (base44.com/dpa).
• Stripe may process data outside the UK and documents its international-transfer safeguards in its privacy policy. See Stripe's privacy policy for details.
• Google may process data outside the UK and documents its international-transfer safeguards in its privacy policy. See Google's privacy policy for details.

When you use the iOS or Android apps, Apple and Google may also process data in accordance with their own privacy policies and applicable transfer mechanisms.

We rely on the transfer mechanisms documented by each provider. We have not independently verified that a specific UK transfer mechanism applies to your data; if you require further information about the safeguards that apply, please contact us or consult the relevant provider's privacy policy and DPA.

We retain your information for the following periods:

If you close your account or request deletion, we will delete or anonymise your personal data, except where we are legally required to retain certain records (such as financial records related to your purchase).

Under UK data protection law, you have the following rights:

• Right of access — you can request a copy of the personal data we hold about you
• Right to rectification — you can ask us to correct inaccurate or incomplete data
• Right to erasure — you can ask us to delete your personal data in certain circumstances
• Right to restriction — you can ask us to restrict processing of your data in certain circumstances
• Right to object — you can object to processing based on legitimate interests or for direct marketing
• Right to data portability — you can request a copy of your data in a structured, machine-readable format
• Right to withdraw consent — where processing relies on consent, you can withdraw it at any time

These rights are not absolute and may depend on the lawful basis for processing and the circumstances of your request. We will respond to your request within one month, though this may be extended in complex cases.

To exercise any of these rights, contact us at myoscaniqsupport@gmail.com.

If you have a question about how we handle your personal data or wish to make a data protection complaint, please contact us at:

Email: myoscaniqsupport@gmail.com

We will acknowledge receipt of your data protection complaint within 30 days. We will investigate and respond to your complaint appropriately and without undue delay, keep you informed of progress where appropriate, and communicate the outcome to you without undue delay.

You also have the right to complain to the UK Information Commissioner's Office (ICO) if you are unhappy with how we have handled your personal data. You do not need to complain to us before contacting the ICO.

ICO website: https://ico.org.uk
ICO phone: 0303 123 1113

Currently, there is no self-service account deletion feature within MyoScan IQ. You can sign out of your account at any time.

To request deletion of your account and associated personal data, please contact us at myoscaniqsupport@gmail.com.

When you request account deletion, we will:

• Delete your learning progress, saved protocols, and logbook entries
• Delete or anonymise your account information
• Retain entitlement and payment records where required for legal or financial record-keeping

We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page indicates when the policy was last revised. Material changes will be communicated through the Platform or by email where appropriate.