Privacy policy

What we collect

• Account details (name, email)
• Bank account (encrypted)
• Payment records (amount, date, last 4 card digits)
• Verification evidence — kept for 7 days only, then deleted automatically

Health data

Only admins see a medical certificate; it is never published.