Privacy Policy

We collect only what we need to run the platform and show you your progress:

• Account details — your name and email when you register, and either a password or, if you use Google sign-in, your Google account identifier.
• Practice data you generate — quiz attempts, answers, scores, bookmarks, streaks, and the analytics we derive from them.
• Technical & device info — basic request data such as your IP address, browser and device type. At sign-up and sign-in we derive an approximate location (city / country) from your IP to help flag suspicious logins. We do not track precise GPS location.

• Run your account and show your analytics, history and progress.
• Keep you signed in and secure the service, including spotting unusual sign-ins.
• Send essential emails — address verification, password reset and account notices.
• Improve the questions, explanations and overall experience.

We do not sell your personal data, and we don’t use it for third-party advertising.

Documents uploaded by administrators for question extraction may be processed by third-party AI services (OCR and large language models) to read and structure MCQs. These files are kept only as long as needed to process them, are not used to train third-party models, and are not shared beyond these processing steps. This does not involve anything you submit as a student.

Local wallet payments (JazzCash, Easypaisa or bank transfer) are confirmed from a receipt you upload, which we store only to verify the payment and activate your subscription.

We use a single essential cookie — a secure, HTTP-only token that keeps you signed in. Without it, logging in wouldn’t work. We do not use advertising or cross-site tracking cookies.

For usage measurement we use privacy-friendly, cookieless analytics (Vercel Analytics and Speed Insights) that count aggregate page views and page-loading performance. They do not set cookies, do not track you across other sites, and do not build a personal profile of you.

We share data only with the service providers that make the platform work, and only as much as each needs: our email provider, AI / OCR providers (for administrator uploads), and cookieless analytics. We may disclose information if required by law or to protect the service and its users. We never sell your data.

We keep your account and practice data while your account is active so your history and analytics stay available. Uploaded source documents are deleted once processed. If you delete your account, we remove your personal data — except anything we’re required to keep for legal or accounting reasons, such as payment records.

We protect your account with hashed passwords, encrypted connections (HTTPS) and access controls. No system is ever perfectly secure, so please use a strong, unique password and keep it private.

You can view and update your profile in Settings, and request an export or deletion of your account data at any time by contacting support. You can also unsubscribe from non-essential emails. These rights are governed alongside our Terms of Service.

MDCATify is intended for students preparing for the MDCAT. It is not directed at children under 13, and we don’t knowingly collect their data. If you believe a child has given us personal information, contact us and we’ll remove it.

We may update this policy as the platform evolves. We’ll change the “last updated” date above, and for significant changes we’ll give a clearer notice.