Privacy policy

This page explains exactly what data we collect from you when you use the platform, why we collect it, who sees it, and what rights you have over it. It is written in plain language, without hedging.

The data we collect

1) Account data — entered by you

• Your name, email address, mobile number, and medical department/specialty if you chose one.
• Your password is stored with one-way encryption (hashing) — no one on our side can read or recover it.
• If you sign in with a Google account, we receive only your name, email, account identifier and profile picture from Google.
• A profile picture if you upload one, and a short bio if you write one.

2) Learning data

• The courses you are enrolled in and your progress in each one.
• The lessons you have completed, watch time, and the last point you reached in each video — so you can resume where you left off.
• Quiz attempts: your answers, your scores and the time you took.
• The reviews and comments you write.

3) Technical data about your browsing

On every visit we record your IP address, your browser, device type and operating system, the pages you opened and when, the site you came from, and the advertising campaign details if you arrived from an ad. This data is linked to your account as soon as you sign in — including the browsing you did on the same device before you registered.

We want to be upfront with you: the IP address is stored as is, not anonymised, and we use it for visit statistics and to detect abuse and account sharing.

4) Browser notifications

If you enable notifications, we store the address the notification is delivered to, its encryption keys and your browser type. You can turn them off from your browser settings at any time, and sending stops immediately.

5) Payment data

• We never see or store your card number, its expiry date or the CVV. The payment page itself opens at the payment gateway (Paymob / Kashier), and your card details go to them directly without passing through us at all.
• What we record: the amount, currency, transaction status, date and the gateway’s reference number, plus the gateway’s response as we received it. That response may include the last four digits of the card and its type (Visa/Mastercard/wallet), and the name, email and mobile number we sent to the gateway to complete the transaction.
• If you request a withdrawal from your referral wallet, we store the details of the account it will be transferred to (a wallet number or bank account) and the account holder’s name — for the transfer only and nothing else.

6) Cookies

• Session cookie: keeps you signed in; by default it lasts two hours from your last activity.
• Device identifier: a random number placed in your browser so we can recognise repeat visits and the source of a registration; it lasts one year.
• Referral cookie: set if you arrive through a friend’s invitation link so the referral is credited to them; it lasts 30 days and is deleted once you register.
• Third-party measurement tools (Google Analytics, Google Tag Manager and Meta Pixel) run only if the platform owner enables them from the control panel; they set their own cookies and send your browsing data to Google or Meta.

You can block or delete cookies from your browser settings at any time — but features such as “stay signed in” will then stop working.

Why we collect this data

• To create your account and give you access to the courses you paid for.
• To save your progress, show it to you, and grade your quizzes.
• To complete payments, verify them and prevent fraud.
• To reply to your questions and send you important notices about your account and subscription.
• To understand what works on the platform and improve it, and to measure the results of our advertising.
• To protect the content: to detect account sharing, copying attempts and abusive use.

Who sees your data

We do not sell or rent your data to anyone. We share it only to the extent necessary with:

• Payment gateways (Paymob / Kashier): your name, email, mobile number and the transaction amount, so the payment can be completed.
• Our hosting provider: the servers the platform and its database run on.
• Google: if you sign in with a Google account, or if the measurement tools are enabled.
• Meta (Facebook): if the measurement pixel is enabled from the control panel.
• Browser notification services (Google, Mozilla, Microsoft, Apple) so that notifications reach your device.
• The email delivery service we use to send confirmation and password-reset messages.
• Official authorities if there is a binding legal request.

Our administration team can see account and subscription data from the control panel; access to the panel is restricted by permissions and limited to a small number of administrators.

How long we keep data

• Your account data and learning record are kept for as long as your account is active.
• Payment records are kept for the period required by accounting rules and Egyptian law, even if you delete your account.
• To be frank: visit and activity logs (IP address, pages and devices) currently have no automatic deletion date — they stay stored until you ask for them to be deleted or until we decide we no longer need them. If we set a specific deletion period, we will state it on this page.

Your rights

• To see a copy of the data we hold about you.
• To correct any inaccurate data — you can edit most of it yourself from your account page.
• To ask us to delete your account and data, except what the law requires us to keep, such as payment records.
• To object to the use of your data for measurement and advertising.
• To stop browser notifications and marketing messages at any time.

To exercise any of these rights, contact us at the email or WhatsApp number shown on this page, preferably from the email registered on your account. We may ask for simple proof that you own the account before acting, and we reply within 30 days at most.

Users under 18

The platform is intended for medical students, doctors and healthcare practitioners, and is not intended for anyone under 18. If we learn that an account belongs to someone under that age, we close it and delete its data.

Keeping your data secure

• The whole site runs over an encrypted connection (HTTPS).
• Passwords are stored encrypted in a way that cannot be reversed to the original.
• Keys for sensitive services are stored encrypted in the database.
• Access to the control panel is restricted by permissions and to a small number of administrators.

As with any online service, no system is 100% guaranteed. If a breach affects your data, we will notify those affected as quickly as possible.

Changes to this policy

We may update this page if the way we work or the law changes. The date of the last update is shown above, and if a change is significant we will notify you on the site or by email.

Contact

For any question about your privacy, or to request a copy of your data or its deletion — contact us using the details on this page and we will get back to you.