• Account: email address, password (stored hashed by our auth provider), the country you chose at sign-up, and the date you accepted these Terms
• Profile: name, photo, age, gender, whether you are here for romance or to connect with colleagues, who you are looking for, specialty, hospital, country, bio and tags
• Credentials you enter (STR/NIM, alma mater, class year): stored privately and never shown to other users
• Verification documents, only if you request the badge: a photo of your ID (KTP or passport, you may cover the NIK and address) and your medical license or student card. We never ask for a selfie holding your ID. Stored in a private bucket only our reviewers can open, and deleted after the decision. Your ID is specific personal data under UU PDP and is used only to verify you
• Up to 4 profile photos, your Super Likes and the people who Super Liked you
• Approximate location: only when you tap Radar, rounded to about 1 km. Other users never see it, only a distance
• EMR threads, replies, photos and likes you post
• Messages, photos and stickers you send, swipes, matches, blocks and reports, including any screenshots you attach to a report and a copy of the reported conversation
• Technical data needed for security, such as CAPTCHA results and sign-in records

To run the app (show profiles, deliver messages, compute distances), keep it safe (CAPTCHA, verification, reports, blocks, automatic hiding of phone numbers in chat, abuse prevention), manage VIP, and comply with the law. We do not sell your personal data.

Other members see your public profile and your EMR posts (except people you blocked or who blocked you). Only the person you are chatting with sees your messages and chat photos. Our service providers (Supabase for hosting and database, Cloudflare for CAPTCHA) process data on our behalf. We may disclose data when required by law or to protect someone's safety.

Matches where nobody writes within 24 hours are deleted, conversations are deleted after 30 days without a message, or immediately when you use Delete chat or Unmatch. Reports, their screenshots and the conversation copy are kept as long as needed to investigate and keep the community safe. EMR posts stay until you delete them. When you delete your account (Passport > Settings), your profile, photos, matches, messages and EMR posts are deleted right away.

Under Indonesia's Personal Data Protection Law (UU No. 27 Tahun 2022) you can ask to access, correct or delete your data, and withdraw consent. Edit most data in Passport, or email safety@purebloodmd.com.

We use access controls on every table, private storage for chat photos, coarse location and encrypted connections. No system is perfectly secure, so please follow the advice in the Terms about not sharing sensitive information.