Privacy Policy

We collect the following categories of information:

• Account details — your name, email address, phone number, target exam (Step 1 or Step 2 CK), and target exam date, provided when you sign up or update your account.
• Study activity — schedules, focus and Pomodoro sessions, flashcard reviews, error-log entries, progress, streaks, and leaderboard participation generated as you use the portal.
• Payment information — when you pay by card or PayPal, the payment is handled by PayPal. We receive the order and transaction IDs, the plan, amount, currency, status, any discount applied, and the email and payer ID of the PayPal account used. We never receive or store your full card number. For EGP payments we receive the transfer receipt you send us.
• Subscription details — your plan, trial dates, and when your access starts and ends.
• Presence— when you were last active in the portal, and whether a focus session is running (used for the study room and "studying now" indicators).
• Community and profile content — messages you post in the community channels, your public name, photo and bio, and reviews or ratings you submit.
• Telegram (optional) — if you connect Telegram for study reminders, we store your Telegram chat ID so we can message you.
• Files you upload — such as a profile photo or score reports. These are stored privately.
• Communications — messages you send through the mentorship application, support requests, or contact forms.
• Technical data — basic device, browser, and usage information collected through analytics on our public marketing pages. See our Cookie Policy for details.

We use your data to:

• authenticate you and keep your account secure;
• build and tailor your study schedule and content to your exam and target date;
• track your progress and power your dashboard, analytics, and reviews;
• process payments, switch on the access you paid for, apply offers, and handle refunds and disputes;
• send the reminders you turn on (by Telegram);
• provide mentorship, respond to support requests, and contact you about your account;
• protect the platform from bots, spam, and abuse;
• improve the service and meet our legal obligations.

We do not sell your personal data, and we do not use it for third-party advertising.

What other students can see. Your public name, photo and bio, your community messages, your place on the leaderboard (you can hide your name there in your account settings), and whether you are studying right now in the study room. Your email, phone number, payments and private notes are never shown to other students.

We rely on a small number of trusted infrastructure providers to operate the platform. They process data only on our behalf and for the purposes below:

• Supabase — hosts your account, authentication, study data, and uploaded files.
• Cloudflare — content delivery, file storage (R2), and bot protection (Turnstile) on our sign-up and contact forms.
• Vercel — hosts the website and runs the application.
• PayPal — processes card and PayPal payments and refunds. PayPal handles your card details under its own privacy policy.
• Telegram — delivers study reminders, only if you connect it.
• WhatsApp — used if you contact us there or send an EGP payment receipt.
• Formspree — delivers mentorship and contact-form submissions to us by email.
• Google Analytics — anonymous, aggregated traffic statistics on our public marketing pages (not inside the logged-in portal).

We may also disclose information where required by law or to protect the rights, safety, and security of our users and the platform.

Your data is stored with the providers listed above and protected by access controls and encryption in transit. Some providers process data outside your country (including the United States and the EU); we rely on their standard safeguards for those transfers.

We keep your information for as long as your account is active and as needed to provide the service and meet legal or operational requirements. When you ask us to delete your account we remove your data within a reasonable period, though residual copies may persist briefly in backups before being overwritten. Payment records are kept for as long as accounting, tax and fraud-prevention rules require, even after an account is deleted. No system is completely immune to risk, but we take reasonable steps to safeguard your information.

You can:

• view and edit your profile information at any time from your account page;
• request a copy of your data, or ask us to correct or delete it;
• opt out of analytics on public pages through your browser settings or the Google Analytics opt-out (see our Cookie Policy).

To exercise any of these rights, contact us at the email below. We may need to verify your identity before acting on a request.

The portal is intended for medical students and graduates and is not directed to anyone under 18. If you are under 18, you may use it only with the consent of a parent or guardian.

We may update this Privacy Policy from time to time. When we make material changes we will update the date at the top of this page. Continued use of the portal after changes take effect means you accept the updated policy.