Privacy Policy

Effective Date: [PUBLICATION DATE] Last Updated: [DATE]

1. Introduction#

Welcome to MedDrill: Medical MCQ Practice ("MedDrill", "we", "us", or "our").

MedDrill is developed and operated by QT LABS COMPANY LIMITED ("QT LABS"), a company registered in Vietnam.

We respect your privacy and are committed to protecting personal information processed in connection with your use of MedDrill.

This Privacy Policy explains what information we collect, how we use it, how it may be shared, and what choices and rights are available to you.

2. Information We Collect#

Depending on how you use MedDrill, we may process the following categories of information.

2.1 Account Information#

Email address.
Account identifier.
Profile information voluntarily provided by users, where supported.
Authentication and account security information.

Authentication credentials are processed to provide secure account access.

2.2 Learning and Activity Data#

Quiz participation and results.
Answers and learning progress.
Learning history.
Flashcard or document activity, where tracked by the application.
Other learning preferences or records generated when using available features.

2.3 Subscription Information#

When you purchase MedDrill Premium through Apple In-App Purchase, we may receive information necessary to verify and manage your subscription, including:

Subscription status.
Product identifiers.
Transaction or purchase identifiers.
Subscription activation and expiration information.

Payments made through Apple's In-App Purchase system are processed by Apple. MedDrill does not require users to provide payment card details directly to QT LABS for these purchases.

2.4 Technical Information#

Depending on the services and SDKs enabled in the application, technical information may include:

Device and operating system information.
App version.
Diagnostic and error logs.
Network or connection information.
Technical identifiers required for service functionality and security.

The specific information processed depends on the implementation and permissions of the services used.

3. How We Use Information#

We process information for purposes including:

Creating and managing user accounts.
Authenticating users and securing access.
Delivering quizzes, flashcards, and study materials.
Saving learning progress and history.
Verifying subscriptions and Premium access.
Responding to support requests.
Detecting misuse and protecting our services.
Diagnosing technical problems and improving reliability.
Complying with applicable legal obligations.

Where required by applicable law, we obtain consent or rely on another appropriate legal basis before processing personal information.

4. Third-Party Services#

MedDrill uses or may use third-party technology providers to deliver the application.

These may include:

Apple App Store and StoreKit — for in-app purchases, subscription transactions, and related purchase management.

RevenueCat — for subscription entitlement management and purchase status synchronization.

Hosting and infrastructure providers — for application hosting, database services, and secure data storage.

Authentication, diagnostics, or analytics providers — only where integrated into the released application.

Each provider may process certain information according to its role, contractual arrangements, and applicable privacy terms.

The final list of providers and data categories must reflect the actual production configuration of MedDrill.

We may share information with service providers only to the extent reasonably necessary to operate, secure, support, or improve MedDrill.

We may also disclose information where required by applicable law or a valid legal process.

We do not authorize service providers to use personal information for unrelated purposes except where permitted by applicable law and their applicable terms.

[CONFIRM WHETHER PERSONAL DATA IS SOLD OR SHARED FOR ADVERTISING BEFORE ADDING A SPECIFIC STATEMENT.]

6. Data Retention#

We retain personal information for as long as reasonably necessary to provide MedDrill, support account functions, fulfill legitimate operational needs, and comply with applicable legal obligations.

When an account is deleted, we delete or de-identify associated personal information unless retention is required or permitted by applicable law.

Certain transaction records, security records, or other legally required records may need to be retained for a longer period.

[INSERT VERIFIED RETENTION PERIODS OR CRITERIA FOR ACCOUNT DATA, LEARNING HISTORY, LOGS, BACKUPS, AND TRANSACTION RECORDS.]

7. Data Security#

We apply reasonable technical and organizational measures intended to protect personal information against unauthorized access, disclosure, alteration, or loss.

Such measures may include authentication controls, access restrictions, secure communication protocols, and operational security procedures.

However, no electronic system can guarantee absolute security.

8. Your Privacy Rights#

Depending on applicable law, you may have the right to:

Request access to your personal information.
Correct inaccurate information.
Request deletion of your account and associated data.
Withdraw consent where processing relies on consent.
Raise questions or complaints about personal data processing.

You may submit a privacy request using the contact information below.

You can also review our Account Deletion Policy.

9. Account Deletion#

MedDrill provides an account deletion process within the application.

Deleting a MedDrill account does not automatically cancel an Apple subscription. Users should manage active subscriptions separately through their Apple Account settings.

For more information, visit Delete Account.

10. Children's Privacy#

MedDrill is intended for users who meet the age requirements specified for the application and the laws applicable to their use.

[INSERT THE VERIFIED MINIMUM AGE, WHETHER MINORS ARE PERMITTED, AND ANY APPLICABLE PARENTAL CONSENT RULES.]

If you believe that personal information has been collected from a child in violation of applicable law, please contact us.

11. International Data Processing#

Depending on our service providers and hosting infrastructure, information may be processed or stored outside the country where the user resides.

Where applicable, we take steps required by relevant data protection laws in connection with international transfers.

[CONFIRM ACTUAL HOSTING LOCATIONS AND CROSS-BORDER DATA PROCESSING ARRANGEMENTS.]

12. Changes to This Policy#

We may update this Privacy Policy to reflect changes to our services, technology, or legal requirements.

The updated policy will be published on this page with a revised date. Where required, we will provide additional notice or obtain consent.

13. Contact Us#

QT LABS COMPANY LIMITED Website: https://meddrill.io.vn Privacy Email: [OFFICIAL PRIVACY EMAIL] Registered Address: [REGISTERED COMPANY ADDRESS] Country: Vietnam

For privacy-related questions or requests, please contact us using the details above.