Privacy

Your account. Email address, and whatever you choose to add: name, nickname, university, which exam you are preparing for, study year, graduation year and preferred language.

Your studying. Every question you answer and what you chose, how long you spent, your notebook, your highlights and strike-throughs, your streak, XP, level and badges, and which days you were active.

Payments. The amount, the plan, the method, the date and the reference. Card numbers never reach Balto. They are entered on the payment provider’s own page, and we are told only whether the payment succeeded.

What you write to us. Bug reports and suggestions, with the page you were on, and your name and email if you give them. Messages you send to Dr. Balto.

Errors. When something crashes, the message, the page and the browser type, so it can be fixed.

Not your IP address. To stop one person flooding the sign-in or feedback forms we need to tell senders apart, so we store a salted one-way hash of the address rather than the address. It is enough to count, and not enough to identify you later.

• To run your account and keep you signed in.
• To choose which questions to show you and to not repeat ones you know.
• To show your progress, streak and place in the league, if you opted in.
• To take payment and give you the access you paid for.
• To send the emails you switched on, and nothing else.
• To fix what breaks.

Balto runs on other companies’ software, and they see the parts they need to do their job. We do not sell your data to anybody, and there is no advertising on Balto.

• Supabase stores the database and runs sign-in.
• Vercel hosts the site and sees ordinary web request logs.
• Paymob processes card, wallet and kiosk payments. Bank transfers over InstaPay go directly between your bank and ours.
• The AI provider behind Dr. Balto receives the question text and your message when you ask for help. It does not receive your name or email.
• An email provider delivers sign-in links and the notifications you enabled.
• If you sign in with Google, Facebook, LinkedIn or X, that company tells us your email address and name. We tell them nothing about your studying.

Take a copy. Settings has a button that downloads everything we hold about you as a file, straight away, without asking anybody.

Change or delete it. Most of it you can edit in Settings. To have the account and everything in it deleted, write to mahmohelgoh@gmail.com from the address you signed up with and it will be done.

Stay out of the league. It is a setting, and turning it off removes you from the table. Nicknames are shown there, never real names or email addresses.

Stop the emails. Each kind has its own switch in Settings, and a master switch above them.

Your account and study history stay until you ask us to delete them. Payment records are kept longer, because tax and accounting rules require it. Error reports are reviewed and cleared out.

Balto is built for medical students and doctors and is not intended for children. We do not knowingly collect data from anyone under 16.

If this page changes in a way that matters, the date at the top changes with it. Questions about any of it go to mahmohelgoh@gmail.com.