1. Who we are
MCIQ (“we”, “us”, or “our”) provides a medical education platform for students and physicians, including courses, question banks, mock exams, OSCE practice, study planning, notifications, and community features through our mobile app and website.
Website:
https://academy.mci.med.sa
Support email:
support@medicalacademy.com
2. Scope of this policy
This Privacy Policy applies to:
- The MCIQ mobile application (Android package com.medicalacademy.app)
- Our API services used by the mobile app
- Related account, learning, payment, and support services
- Public pages such as account deletion requests
By creating an account or using the app, you agree to the collection and use of information as described in this policy.
3. Information we collect
We collect only the information needed to operate MCIQ and deliver the features available in the mobile app.
3.1 Account and identity information
- Full name
- Email address
- Phone number and country/dial code
- Password (stored in hashed form; we never store plain-text passwords)
- Primary exam interest and speciality (collected during registration)
- Email verification and login verification codes
3.2 Profile information
- Profile title, education year, and institution
- Optional profile photo/avatar uploaded from your device
- Membership or role labels shown in the app
3.3 Learning and activity data
- Course enrollments, lesson progress, and quiz attempts
- Q-Bank / mock exam attempts, answers, scores, and review status
- OSCE station attempts and scores
- Study planner plans, tasks, and goals
- Dashboard progress and performance summaries
3.4 Community content
- Posts, comments, reactions, bookmarks, and reports you submit
- Group membership and group chat messages
- Expert follows and event registrations
- Images or media you choose to upload to community features
3.5 Preferences and settings
- Language preference (English / Arabic)
- Theme preference (light / dark)
- Notification preferences (push, email, study reminders, marketing)
- Privacy preferences (private profile, activity status, personalized recommendations)
- Time format and unit preferences
3.6 Device, app, and technical data
- Device name used for secure login sessions
- Authentication tokens for signed-in sessions
- Push notification tokens (when notifications are enabled)
- App language / Accept-Language headers
- IP address, request logs, and basic diagnostics needed for security and support
- Locally stored progress snapshots on your device (for example, in-progress quiz/exam state)
3.7 Payment and purchase data
- Course purchase and enrollment records
- Transaction identifiers, amount, currency, and payment status
- Invoice/receipt references
Card details and sensitive payment credentials are processed by our payment provider(s). MCIQ does not store full card numbers on our servers.
3.8 Support and account deletion requests
- Messages you send to support
- Account deletion request details (name, email, optional reason, and request status)
3.9 Information we do not intentionally collect
- Precise GPS location tracking for advertising
- Contacts, SMS, or call logs
- Health/medical records beyond educational learning activity
- Biometric templates (if your device uses biometrics for unlocking, that data stays on your device)
4. How we use your information
We use personal data to:
- Create and secure your account, including email and login verification
- Provide courses, quizzes, mock exams, OSCE practice, and study planning
- Save and sync learning progress across sessions
- Enable community features and moderation (including reports)
- Process course purchases and deliver paid content access
- Send service notifications, study reminders, and (if enabled) marketing messages
- Personalize recommendations and display language/theme preferences
- Provide customer support and respond to deletion or privacy requests
- Detect fraud, abuse, and unauthorized access
- Improve app reliability, performance, and educational content quality
- Comply with legal, regulatory, and store-policy requirements (including Google Play)
5. Legal bases for processing
Depending on applicable law, we process personal data based on:
- Contract — to provide the app features you request
- Consent — for optional items such as marketing notifications, photo uploads, and certain preferences
- Legitimate interests — to secure the platform, prevent abuse, and improve services
- Legal obligation — where we must retain records for accounting, disputes, or regulatory compliance
7. Payments and purchases
When you buy a course or other paid feature in the app, payment is handled by our payment gateway partner(s). We receive confirmation of payment status, amount, currency, and transaction references so we can unlock content and issue invoices where applicable.
Please also review the privacy policy of the payment provider used at checkout, as they process payment credentials under their own terms.
8. Storage, local data, and security
- Account and learning data are stored on our servers and transmitted over HTTPS.
- Authentication tokens and session data are stored securely on your device for signed-in access.
- Temporary quiz/exam progress may be cached locally on your device to prevent data loss if the app is interrupted.
- Language and theme preferences may be stored locally and synced with your account settings.
- We use access controls, encrypted transport, hashed passwords, and operational monitoring to protect your data.
No method of transmission or storage is 100% secure. Please keep your login credentials confidential and enable device security features.
9. Data retention
We retain personal data only as long as needed for the purposes described above, including:
- While your account remains active
- For as long as needed to provide learning history and purchased content access
- For a limited period after deletion requests to complete review and removal
- Longer where required for legal, tax, fraud-prevention, or dispute-resolution reasons
Account deletion requests submitted through the app or our web form are typically reviewed and processed within 7 business days.
10. Your rights and choices
Depending on your location and applicable law, you may have the right to:
- Access the personal data we hold about you
- Correct inaccurate profile information in Settings
- Export certain account data from the app (Settings → Export, where available)
- Control notification, language, theme, and privacy preferences
- Request deletion of your account and associated personal data
- Withdraw consent for optional processing (for example marketing notifications)
How to delete your account
- In the mobile app: Profile / Settings → Delete Account
- Or use our web form: https://academy.mci.med.sa/delete-account
- Or email support@medicalacademy.com from your registered email address
11. Children’s privacy
MCIQ is designed for medical students, interns, residents, and physicians. It is not directed to children under 13 (or the minimum age required in your country). We do not knowingly collect personal information from children. If you believe a child has provided personal data, contact us and we will take appropriate steps to delete it.
12. International users and transfers
MCIQ serves learners in Saudi Arabia and the wider MENA region and may process data on servers or through service providers located in other countries. Where data is transferred internationally, we take reasonable steps to ensure appropriate safeguards consistent with applicable privacy requirements.
13. Changes to this policy
We may update this Privacy Policy from time to time to reflect product, legal, or operational changes. The “Last updated” date at the top of this page will change when we publish revisions. Continued use of the app after an update means you acknowledge the revised policy.
14. Contact us
If you have questions about this Privacy Policy, your data, or your privacy rights, contact us:
MCIQ
Email: support@medicalacademy.com
Account deletion: https://academy.mci.med.sa/delete-account
Google Play listing package name: com.medicalacademy.app