Privacy Policy

This Privacy Policy explains how FRACP MCQ ("we", "us", or "our") collects, uses, and protects your personal information when you use our website and mobile application (the "Service").

1. Information We Collect

Account Information: When you create an account, we collect your email address, password (encrypted), display name, training level, and country.

Study Data: We collect your quiz answers, scores, study progress, flashcard data, mock exam results, analytics data, and learning preferences to personalise your study experience.

Profile Information: You may optionally provide a display name, avatar, and subspecialty preferences for leaderboards and study group features.

Usage Data: We automatically collect information about how you interact with the Service, including device type, browser, pages visited, timestamps, and session duration.

User-Generated Content: If you submit feedback, flag questions, participate in study groups, or contribute to the community question bank, we store that content along with your account identifier.

2. How We Use Your Information

• To create and manage your account and authenticate your identity
• To generate AI-powered exam questions tailored to your study needs and weak areas
• To track your study progress, quiz history, and exam performance
• To display leaderboards and gamification features (with your consent)
• To facilitate study groups, peer review, and community features
• To improve question quality through aggregated analytics and feedback synthesis
• To send service-related notifications (e.g., exam reminders, achievement notifications)
• To monitor for security threats, fraud, and abuse
• To comply with legal obligations

3. AI-Generated Content

Our Service uses artificial intelligence to generate practice questions. These questions are sourced from peer-reviewed medical journals and the RACP curriculum. While we employ automated quality checks and peer review, AI-generated content may occasionally contain errors. We do not guarantee the clinical accuracy of any question and remind users that the Service is for educational purposes only and is not a substitute for professional medical advice.

4. Third-Party Services

We use the following third-party services that may process your data:

• Google: For authentication (Sign in with Google/Apple), analytics, and cloud hosting
• Base44: For backend infrastructure, database hosting, and AI model access
• PubMed/NLM: For sourcing medical evidence used in question generation (no personal data shared)

Each third-party service has its own privacy policy governing how they handle your data. We encourage you to review their policies.

5. Data Retention

We retain your data for as long as your account is active. When you delete your account (see below), we permanently erase all associated data including quiz history, study plans, flashcards, achievements, and profile information within 30 days. Some anonymised, aggregated data may be retained for analytics purposes.

6. Your Privacy Rights

You have the following rights regarding your personal data:

• Access: Request a copy of your personal data
• Rectification: Correct inaccurate or incomplete data
• Deletion: Delete your account and all associated data at any time via Settings → Delete Account
• Restriction: Request that we limit the processing of your data
• Portability: Request your data in a machine-readable format
• Withdrawal of Consent: Withdraw consent for data processing at any time

To exercise these rights, use the in-app Delete Account feature or contact us at fracpmcq@gmail.com.

7. Data Security

We implement industry-standard security measures to protect your data, including HTTPS encryption (TLS 1.3), Content Security Policy headers, brute-force protection on authentication, role-based access controls, and regular security audits. However, no method of transmission over the internet is 100% secure.

8. Cookies

We use cookies and local storage for authentication, theme preferences, and analytics. We ask for your consent before setting non-essential cookies via our cookie consent banner. You can manage your preferences in Settings at any time.

9. Children's Privacy

Our Service is not directed to children under 16. We do not knowingly collect personal information from children under 16. If you believe we have collected information from a child, please contact us and we will delete it immediately.

10. International Data Transfers

Your data may be transferred to and processed in countries other than your country of residence (including Australia, the United States, and European Union countries). We ensure appropriate safeguards are in place for such transfers in accordance with applicable data protection laws.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting the updated policy on this page and updating the "Last updated" date. We encourage you to review this page periodically.

12. No Affiliation

FRACP MCQ is not affiliated with, endorsed by, or connected to the Royal Australasian College of Physicians (RACP). "RACP" and "FRACP" are trademarks of their respective owners and are used here for descriptive educational purposes only.