Privacy Policy

Last updated: 31 May 2026

What we collect

When you create an account we collect: your name, email, password (hashed), and optionally your photo, degree, specialty, school, years of experience, gender, bio, and medical license information you submit for verification.

As you use the Service we store: daily check-ins, journal entries, Bubble posts, comments, direct messages, and your privacy/notification preferences.

How we use your data

• To operate the Service (show you your check-ins, deliver messages, etc.)
• To verify medical credentials when you submit them
• To match you with another member each month if you opt into Droplet
• To improve and secure the Service

What we do NOT do

• We do not sell your data.
• We do not share your journal entries or direct messages with other members.
• We do not display your email address on your public profile unless you turn that on.

Verification lookups

When you submit a 10-digit NPI for physician verification we query the public CMS NPI Registry. We do not share your account info with CMS — only the NPI you provided.

Your rights

You can edit or delete journal entries, posts, comments, and your account at any time. To request a full export or permanent deletion, email info@themedbubble.com.

Children

The Service is not intended for anyone under 18.

Security

Passwords are stored using bcrypt hashing. Connections are encrypted with TLS. No system is perfectly secure — notify us immediately if you suspect a breach.

Changes

We may update this Policy from time to time. We will notify you of material changes.

Contact

Privacy questions? Email info@themedbubble.com.