1. Who we are
The AKMG app and the website medecon.online are operated by the Association of Kerala Medical Graduates ("AKMG", "we", "us") for its members and for delegates of the MEDECON World Congress and the AKMG International Conclave 2027. AKMG is the controller of the personal data described in this policy.
2. Data we collect
| Category | Examples | Source |
|---|---|---|
| Account | Name, email address, phone number, password (stored only as a one-way hash) | You, when you sign up |
| Profile | Date of birth, gender, medical specialty, medical college and graduation batch, postal address, profile photo | You, optionally |
| Membership | Membership plan, status, validity dates, membership ID | You and the AKMG secretariat |
| Event registrations | Events you register for, eligibility answers (for example whether you are a doctor or a member's spouse), guests you add, registration status | You |
| Payments | Amount, currency, payment status, transaction reference, and receipts you upload for manual payments | You and our payment processors |
| Attendance | Your QR entry pass and the time it is scanned at an event | Generated by us; scanned by event staff |
| Messages | Enquiries you send through the contact form or to the secretariat | You |
| Technical | IP address, device type, operating system, app version, and server logs of requests and sign-ins | Your device, automatically |
We do not collect your precise location, contacts, photos library (except a photo or receipt you choose to upload), or health information about you as a patient. We never receive your full card number: card payments are entered directly with the payment processor.
3. How we use your data
- To provide the service: create and secure your account, manage your membership, process event registrations and apply eligibility and pricing rules.
- To take payments and issue receipts and confirmations.
- To run the events: issue QR entry passes, check attendance, plan seating and catering, and prepare delegate badges.
- To communicate with you: registration confirmations, password resets, changes to the programme and important announcements. You can opt out of non-essential messages in your profile preferences.
- To keep the service secure: detect abuse, rate-limit requests, and keep audit logs of administrative actions.
- To meet legal obligations, such as keeping financial records.
Our legal bases are performance of our agreement with you (registration, membership and payments), our legitimate interests in running a secure association and congress, your consent where we ask for it, and compliance with law.
4. Who we share your data with
We share personal data only as needed to run the service:
- Payment processors (such as Stripe, Razorpay, Telr or PayTabs, depending on the payment method you choose), which process your payment under their own privacy policies.
- Hosting and infrastructure providers that store our servers and database on our behalf (currently Hostinger).
- Email delivery providers that send our transactional emails.
- AKMG council members, secretariat staff and event volunteers, who see only what they need for their role (for example, a door volunteer sees whether your pass is valid).
- Authorities, where the law requires it.
We do not sell or rent personal data, and we do not share it with advertisers or data brokers.
5. Data stored on your device
The app stores your sign-in session token in your device's secure storage (Keychain on iOS, Keystore-backed storage on Android), and keeps small preferences such as your theme. The website stores your theme choice in your browser. We do not use advertising cookies or cross-app tracking.
6. How long we keep data
- Account, profile and membership data: while your account is active.
- Event registration and attendance records: for the event and up to 3 years afterwards, for accreditation and planning.
- Payment and invoicing records: as long as required by accounting and tax law.
- Server and security logs: typically up to 12 months.
When you delete your account we delete or anonymise your data, except records we must keep by law.
7. Security
Data is sent over encrypted HTTPS connections. Passwords are hashed with bcrypt, payment gateway credentials are encrypted at rest, and access to administrative tools is restricted by role and logged. No system is perfectly secure, but we work to protect your data and will notify you and the relevant authorities of a breach where the law requires it.
8. Your rights
Depending on where you live, you may have the right to access your data, correct it, delete it, restrict or object to its processing, receive a copy in a portable format, and withdraw consent. You can view and edit most of your data directly in the app under your profile. For anything else, contact us using the details below. We will respond within 30 days. You may also complain to your local data protection authority.
9. Deleting your account
You can ask us to delete your account and associated data at any time on our account deletion page, or by emailing us from the address registered to your account. We complete deletion within 30 days and confirm by email.
10. Children
The app and website are intended for medical graduates, medical students, members and their families aged 16 and over. We do not knowingly collect data from children under 16. If you believe a child has given us data, contact us and we will delete it.
11. International transfers
AKMG members live in many countries, and our servers may be located outside your country. Where we transfer data internationally we rely on appropriate safeguards and only use providers that protect data to a comparable standard.
12. Changes to this policy
We may update this policy. We will change the effective date above and, for significant changes, notify you in the app or by email before they take effect.
13. Contact
Association of Kerala Medical Graduates, MEDECON World Congress Secretariat
Email: support@medecon.online
Website: medecon.online