Privacy policy

1. Data controller

The data controller is Ssm Buddy Şirketi, Napoli, Italia. Email: info@ssmbuddy.com.

This policy applies to the SSM Buddy app (iPhone, Android and web) and to this website.

2. What data we process

• Account: email address and password (the password is stored only in encrypted form and nobody can read it).
• Exam data: the ranking position and score you enter.
• Your choices (ordered list of schools and cities) and the simulation results calculated for you.
• Technical data: sign-up and last access dates, server logs.
• If you write to us: your email address and the content of your message.

We do not ask for your name, tax code or any documents. We use no advertising, profiling or tracking tools.

3. Data that stays only on your phone

Study sessions, daily goal, exam date, quiz answers and favourites are saved only on your device. They are not sent to us and are deleted when you uninstall the app.

4. Why we process it and on what legal basis

• To provide the service: account, assignment simulation and probability estimates (performance of a contract, Art. 6(1)(b) GDPR).
• To protect the service and other users from false data: each position can belong to one account only, and the consistency between position and score is compared with other users; anomalies are reported to the administrator (legitimate interest, Art. 6(1)(f) GDPR).
• To answer your messages (Art. 6(1)(b) and 6(1)(f) GDPR).
• To comply with legal obligations, such as tax rules (Art. 6(1)(c) GDPR).

5. Who can see your data

• Other users never see your email. In the queues of each school your position and whether you are assigned in the simulation may appear, anonymously.
• The service administrator can see email, position, score and number of choices in order to check data and handle reports.
• Providers processing data on our behalf: Supabase Inc. (database and authentication, data centre in Frankfurt, EU) and the hosting provider of this website. Internal security notifications to the administrator go through Telegram and contain only positions, scores and counts, never emails.
• In-app purchases are handled by Apple or Google under their own policies: we never receive your card details.
• We do not sell or share your data with third parties.

6. Transfers outside the EU

Data is stored in the EU. Some providers are based outside the EU and may access it for technical support; in that case the transfer is covered by GDPR safeguards (adequacy decisions or standard contractual clauses).

7. How long we keep it

• As long as your account exists. If you delete it, data is removed from the database immediately; backups are overwritten within 30 days.
• Support messages: up to 24 months after the request is closed.
• Server logs: only as long as strictly necessary for security.
• Payment-related data: for the period required by tax law.

8. Your rights

You have the right of access, rectification, erasure, restriction, portability and objection (Arts. 15–22 GDPR).

In the app you can change your position and score, download your data (Profilo → Scarica i miei dati) and delete your account (Profilo → Elimina account). For other requests write to info@ssmbuddy.com: we reply within 30 days.

You can also lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it).

9. Minimum age

The service is meant for medical graduates taking the SSM exam. You must be at least 18 to sign up.

10. This website

This website uses no cookies, no analytics and loads nothing from other websites (even the fonts are on our server). The hosting provider records technical data such as your IP address for security and operation. Details on the Cookies page.

11. Changes

If we change this policy in a significant way we will tell you in the app. The current version is always on this page and in the app's Profilo section.