# MediTest Privacy Policy Effective date: June 14, 2026 This Privacy Policy explains how MediTest Prep, also shown in the app as MediTest ("MediTest", "we", "us", or "our"), collects, uses, stores, and shares information when you use the MediTest iOS application and related services. MediTest is an educational study tool for medical exam preparation. It is not a medical advice, diagnosis, treatment, or patient-care service. ## 1. Who Is Responsible for Your Information Controller / developer: Maxim Novikov Contact email: maxim.novikov.dev@gmail.com Public policy URL: https://gobrrr.io/docs/privacy_policy.md ## 2. Information We Collect MediTest is designed to collect only the information needed to provide study features, authentication, progress tracking, and AI-assisted explanations. ### Device and Authentication Information The app generates or reads a device-based identifier and sends it to the MediTest server to create or refresh an app session. The server returns an authorization token and a user ID. The app stores the token and user ID in the iOS Keychain. ### Study Activity and Progress When you use the app, we may process information about your study activity, including: - topics and question sets you open; - answers you submit; - whether your answers are correct; - favorite questions; - progress statistics; - weak-topic insights; - progress reset requests. This information is used to provide quizzes, progress tracking, favorites, and review features. ### AI Chat Messages If you use AI-assisted question explanations or chat features, the app sends the message you type, the relevant question ID, and related chat context to the MediTest server so a response can be generated. Do not include personal health information, patient information, confidential information, or other sensitive personal data in AI chat messages. ### Purchase and Entitlement Information If MediTest Plus or other paid access is enabled, the app may process product selection, purchase or restore state, and local entitlement status. App Store purchases are processed by Apple under Apple's own terms and privacy practices. MediTest does not receive full payment card numbers from Apple. ### Local Cache and App State The app may store encrypted local cache files for catalog and progress responses so the app can load data efficiently. The app also stores premium-access state in the iOS Keychain. Debug-only network settings may be stored locally during development builds. ### Information We Do Not Intentionally Collect Based on the current app implementation, MediTest does not request access to your precise location, contacts, photos, camera, microphone, HealthKit data, or advertising identifier. The app does not appear to include third-party advertising or analytics SDKs. ## 3. How We Use Information We use information to: - authenticate the app session; - provide questions, topic lists, batches, favorites, quizzes, explanations, AI chat, and progress features; - save and display your study history and progress; - identify weak topics and recommend review; - provide, restore, or manage paid access when available; - maintain security, prevent abuse, and protect the service; - debug, maintain, and improve the app and backend services; - comply with legal obligations and enforce our Terms of Use. We do not sell your personal information. ## 4. Sharing of Information We may share information in the following limited situations: - Service providers. We may use hosting, infrastructure, AI-processing, security, customer-support, or payment-related providers that help operate MediTest. - Apple. If you make purchases through the App Store, Apple processes payment and subscription information under Apple's own terms and privacy policy. - Legal and safety reasons. We may disclose information if required by law, court order, legal process, or to protect rights, safety, security, or the integrity of MediTest. - Business transfers. If MediTest is involved in a merger, acquisition, financing, reorganization, or sale of assets, information may be transferred as part of that transaction. ## 5. AI Features AI-generated explanations and chat responses may be incomplete, inaccurate, or outdated. AI features are provided for educational support only. They are not medical advice and must not be used for diagnosis, treatment, patient care, emergency decisions, or as a substitute for authoritative educational sources or qualified professionals. Messages sent to AI features may be processed by the MediTest server and service providers used to generate responses. Avoid entering personal health information, patient records, identifying details, or confidential information. ## 6. Retention We retain information for as long as needed to provide MediTest, maintain your progress and favorites, comply with legal obligations, resolve disputes, enforce agreements, and protect the service. Local app data can be removed by deleting the app from your device. Some server-side information, such as study progress and account/session records, may remain unless you request deletion and we are able to verify and process the request. ## 7. Your Choices and Rights Depending on your location, you may have rights to request access, correction, deletion, restriction, portability, or objection to certain processing of your personal information. To make a request, contact us at maxim.novikov.dev@gmail.com. We may need information to verify your request. Some information may be retained where required by law, for fraud prevention, security, backup integrity, dispute resolution, or legitimate service operation. ## 8. Security MediTest uses HTTPS, certificate pinning for its configured backend host, iOS Keychain storage for tokens and entitlement data, and encrypted local response caching for certain app data. No system is perfectly secure, and we cannot guarantee that information will never be accessed, disclosed, altered, or destroyed. ## 9. International Transfers MediTest may process information in countries other than where you live. Data protection laws in those countries may differ from those in your jurisdiction. Where required, we will use appropriate safeguards for international transfers. ## 10. Children MediTest is intended for medical students, graduates, and adults preparing for medical exams. It is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided personal information, contact us so we can take appropriate action. ## 11. Changes to This Policy We may update this Privacy Policy from time to time. If changes are material, we will provide notice as required by law, such as by updating the effective date, posting the updated policy, or providing an in-app notice. ## 12. Contact Questions or requests about this Privacy Policy can be sent to: Maxim Novikov maxim.novikov.dev@gmail.com Mailing address: Not provided. Please contact us by email.