Privacy notice

What we collect

Your name and email address from your Google sign-in, the training stage and level you choose, and what you do in the service: your progress, answers, notes and bookmarks. We do not ask for patient information; please never type any into notes or forms.

Why we use it

To run your account, show your progress, keep the service secure and, when you choose Pro, to manage your subscription. We use the service's own counts to improve content and to control costs.

Legal basis

Providing the service you asked for (contract), our legitimate interest in running and securing it, and your consent where the law requires it.

Who processes it

Our hosting and database providers process data on our behalf: the application is hosted on Vercel and the database is on Supabase in Singapore. Email is sent through Resend. Payment, when it opens, is handled by a payment provider that receives only what it needs to charge you. We do not sell your data and show no advertising.

Transfers outside your country

Because our providers operate internationally, your data may be processed outside Saudi Arabia and outside your own country. We rely on the safeguards required by the Saudi Personal Data Protection Law and, for people in Europe, by the GDPR.

How long we keep it

We keep your account data while your account exists. You can ask us to delete it.

Your rights

You may ask to see, correct, export or delete your data, to object to some uses, and to withdraw consent. Use the contact page; we answer within a reasonable time.

Cookies

We use only the cookies the service needs: your sign-in session and your language choice. We do not use advertising or tracking cookies.

Children

The service is for healthcare professionals and trainees and is not directed at children.