Privacy Policy

CBME Elective Logbook — a multi-tenant, NMC-compliant elective logbook for MBBS students.

Last updated: 7 July 2026

The CBME Elective Logbook ("the App", "we", "us") is a digital logbook platform used by medical institutions to manage MBBS student elective postings in accordance with the National Medical Commission (NMC) Competency-Based Medical Education (CBME) framework. The platform is multi-tenant: each participating institution's data is kept logically separate. This policy explains what information we collect, how it is used, and how it is protected.

1. Data We Collect

We collect only the information needed to operate an elective logbook:

• Student personal information (PII): full name, email address, and roll number.
• Academic records: activity logs, reflective entries, attendance records, assessments, and grades generated during elective postings.
• Digital signatures: electronic verification records created when students, preceptors, HODs, and coordinators sign or approve logbook entries.

2. How We Use Your Data

Collected data is used solely for elective logbook management, including:

• recording and verifying student activity logs, reflections, and attendance;
• conducting and storing assessments and computing grades;
• maintaining the approval workflow between students, preceptors, HODs, and coordinators;
• generating logbook records and reports for the student's institution.

We do not use your data for advertising, profiling, or any purpose unrelated to the elective logbook. The App contains no advertising.

3. Storage & Security

• Data is stored on our own private virtual server (VPS); it is not hosted with third-party analytics or advertising platforms.
• All data transmitted between your device and our servers is encrypted in transit using HTTPS (TLS).
• Access is restricted by role (student, preceptor, HOD, coordinator) and, within each institution, is limited to that institution's own records.
• Sensitive actions are protected by signature PINs and recorded with digital signatures and audit logs.

4. No Third-Party Sharing

We do not sell, rent, or share your personal information with third parties, advertisers, or data brokers. Data is accessible only to authorised users within your own institution and to the platform administrators who operate and maintain the service. We disclose data outside of this only where required by law.

5. Data Retention

Academic records form part of a student's official elective logbook and are retained for as long as the institution requires them for academic, regulatory, and NMC-compliance purposes. When records are no longer required, or upon a valid deletion request, they are removed from our systems.

6. Your Rights — Access, Correction & Deletion

You have the right to request access to, correction of, and deletion of your personal data. You may submit such requests either:

• through your institution's elective coordinator, who can action them within the platform or escalate them to us on your behalf; or
• directly to us by email at pinaka@cbmeelective.online.

Requests will be actioned as required by applicable law. Note that certain academic records may need to be retained by your institution for regulatory and NMC-compliance purposes (see Section 5).

7. Governing Law & Legal Basis

Your personal data is processed in accordance with the laws of India, including the Digital Personal Data Protection Act, 2023 (DPDP Act). We process your data on the basis of the consent provided by you and/or your institution, and for the legitimate educational purpose of administering MBBS elective postings and maintaining the associated logbook records.

8. Children

The CBME Elective Logbook is intended for use by adult medical students and healthcare professionals. It is not directed to, or intended for, anyone under the age of 18, and we do not knowingly collect personal data from minors.

9. Security Limitations & Data Breach

We employ reasonable technical and organisational safeguards to protect your data, including HTTPS/TLS encryption in transit, role-based access controls, signature PINs, and audit logging. However, no method of electronic storage or transmission is completely secure, and we cannot guarantee absolute security. In the event of a data breach affecting personal data, we will notify the affected institution(s) and take remedial action as required by applicable law.

10. Contact Us

For questions about this Privacy Policy or your data, contact:
Email: pinaka@cbmeelective.online