Privacy Policy

2.1 Information You Provide to Us

We collect information that you provide directly to us when you:

• Create an Account: When you register for an account, we collect email address, password (encrypted and stored securely), display name (optional), and profile picture (optional, if you choose to upload one).
• Use the Service: We collect quiz answers and responses, learning progress and course completion data, subscription preferences and payment information (processed through third-party payment processors), feedback and support requests, and user preferences and settings.

2.2 Information Automatically Collected

When you use our Service, we automatically collect certain information about your device and usage patterns:

• Device Information: Device unique identifier (device ID), device name, model, and manufacturer, operating system and version, app version, and platform type (iOS, Android, Web, etc.).
• Session Information: Login timestamps, last active time, session duration, and device sessions and concurrent login tracking.
• Usage Data: Features accessed and used, time spent on different sections, quiz attempts and results, course progress and completion rates, and error logs and crash reports.
• Network Information: IP address, network connectivity status, and connection type.

2.3 Information from Third-Party Services

We may receive information from third-party services that you connect to our Service:

• Firebase Services: Authentication, database, storage, and analytics data
• Payment Processors: Transaction information (processed securely through Lenco payment gateway)
• AI Services: Quiz evaluation data processed through Google Gemini AI

3.1 Service Provision

To create and manage your account, provide access to courses, quizzes, and learning materials, track your learning progress and personalize your experience, process payments and manage subscriptions, enforce device and session limits based on your subscription plan, and evaluate quiz answers using AI-powered assessment tools.

3.2 Communication

To send you important updates about the Service, respond to your support requests and inquiries, send email verification messages, and notify you about subscription changes or payment confirmations.

3.3 Security and Fraud Prevention

To detect and prevent fraudulent activity, monitor for suspicious login patterns, enforce security policies and prevent unauthorized access, and protect against account sharing and credential misuse.

3.4 Analytics and Improvement

To analyze usage patterns and improve our Service, understand how users interact with our content, identify and fix technical issues, and develop new features and enhance existing ones.

3.5 Legal Compliance

To comply with applicable laws and regulations, respond to legal requests and protect our rights, and enforce our Terms of Service.

4.1 Data Storage

Your information is stored using the following methods:

• Cloud Storage: User data, progress, and content are stored securely in Firebase Cloud Firestore
• File Storage: Profile pictures and uploaded images are stored in Firebase Storage
• Local Storage: Device identifiers and preferences are stored locally on your device using secure storage mechanisms
• Analytics Data: Aggregated usage analytics are stored in Firebase Analytics

4.2 Security Measures

We implement industry-standard security measures to protect your information:

• Encryption: All data transmitted between your device and our servers is encrypted using SSL/TLS
• Authentication: Secure authentication through Firebase Authentication
• Access Controls: Limited access to personal data on a need-to-know basis
• Secure Storage: Sensitive data stored using Flutter Secure Storage
• Session Management: Active monitoring and management of user sessions
• Device Fingerprinting: Unique device identification to prevent unauthorized access

4.3 Data Retention

We retain your information for as long as necessary to provide the Service and fulfill the purposes outlined in this Privacy Policy:

• Account Data: Retained while your account is active and for a reasonable period after account deletion
• Session Data: Retained for up to 90 days of inactivity, then automatically cleaned up
• Activity Logs: Retained for up to 90 days for security and troubleshooting purposes
• Payment Records: Retained as required by law and payment processor requirements
• Analytics Data: Aggregated and anonymized data may be retained longer for statistical purposes

6.1 Device Limits

To prevent unauthorized account sharing and ensure fair usage, we implement device limits based on your subscription plan:

• Free Tier: Limited device access
• Premium Tiers: Increased device limits as specified in your subscription plan

6.2 Device Fingerprinting

We use device fingerprinting technology to:

• Create a unique identifier for each device
• Track device sessions and prevent unauthorized access
• Enforce subscription-based device limits
• Detect suspicious activity patterns

Device identifiers are generated using device hardware information (where available), secure storage mechanisms, and platform-specific identifiers (Android ID, iOS identifierForVendor, etc.).

6.3 Session Management

We actively monitor and manage user sessions to:

• Prevent concurrent session abuse
• Detect and prevent credential sharing
• Ensure security and compliance with subscription terms
• Automatically expire inactive sessions

7.1 Access and Correction

You have the right to access your personal information, correct inaccurate or incomplete information, and update your profile and preferences through the app settings.

7.2 Data Deletion

You can request deletion of your account and associated data by using the account deletion feature in the app settings or contacting us at medicalphysiologyhub@gmail.com.

Upon account deletion: your account will be permanently deleted, your personal data will be removed from our active databases, some information may be retained as required by law or for legitimate business purposes, and aggregated and anonymized data may be retained.

7.3 Data Portability

You can request a copy of your data in a portable format by contacting us at medicalphysiologyhub@gmail.com.

7.4 Opt-Out Options

You can disable analytics collection through app settings (where available), unsubscribe from marketing emails (if applicable), and manage notification preferences in device settings.

Note: Some data collection is necessary for the Service to function properly and cannot be opted out of.

7.5 Device Management

You can view your active devices in the app settings, remove devices from your account, and manage device limits based on your subscription.