Legal
Privacy Policy
What we collect, why we collect it, and what control you have over it.
Last updated: 8 September 2026
This policy explains what PharmaPrep Pakistan does with your information. It is written to be read, not to be skimmed past — if anything here is unclear, ask us and we will explain it.
Note for the operator: this document describes how the application actually handles data, but it is not legal advice. Have it reviewed against Pakistani data-protection requirements, and add your registered business name and address, before you launch commercially.
1. What we collect
We collect only what the platform needs in order to work:
- Account details — your name, email address and password. Passwords are hashed by our authentication provider; we never see or store them in readable form.
- Profile details you choose to give — education level, university, graduation year and preparation goal. These are optional and used to tailor the content shown to you.
- Practice activity — the questions you attempt, the options you select, whether they were correct, how long you took, your test attempts, scores, bookmarks, XP and streaks.
- Messages you send us — the name, email and content of anything submitted through the contact form.
- Newsletter email — only if you subscribe.
We do not collect payment card details. When payment processing is connected, card data will be handled by the payment provider and will never reach our servers.
2. Why we use it
- To give you an account and keep you signed in.
- To mark your answers, calculate your score, accuracy, XP and streak, and show your progress over time.
- To identify your weak subjects and topics so the platform can recommend what to practise next.
- To answer the messages you send us.
- To keep the service working — diagnosing errors and preventing abuse.
3. Who can see your data
Your practice history, attempts, bookmarks and profile are private to you. This is enforced in the database itself through row-level security, not merely by hiding things in the interface — another signed-in user cannot read your rows even by querying the API directly.
- You — full access to your own data at any time from your dashboard.
- Our administrators — can see accounts and aggregate usage in order to run the platform and handle support requests.
- Other users — see nothing of yours, with one exception: if you opt in to the leaderboard, your display name and XP total become visible. Your email address is never shown on the leaderboard.
We do not sell your data, and we do not share it with advertisers. Data is stored with our hosting and database provider, who process it on our behalf.
5. How long we keep it
Account and practice data is kept while your account is open, because your progress analytics depend on your history. Contact messages are kept while the matter is open and for a reasonable period afterwards for reference. If you close your account, we delete your profile and the practice history attached to it.
6. Your choices
- Edit your profile details at any time from Settings.
- Turn leaderboard visibility on or off from Settings.
- Unsubscribe from the newsletter without affecting your account.
- Request a copy of your data, or ask us to delete your account entirely.
To request access or deletion, write to us from the contact form using your registered email address so we can verify the request.
7. Security
Traffic is encrypted in transit. Access to your rows is restricted at the database level, and every score, XP award and streak is computed on the server so it cannot be altered from the browser. No system is perfectly secure, but we treat a data-exposure bug as our highest priority — if you find one, please report it through the contact form immediately.
8. Children
The platform is intended for pharmacy students, graduates and professionals. It is not directed at children under 13, and we do not knowingly create accounts for them.
9. Changes to this policy
If we change how we handle your data in a way that materially affects you, we will update this page and change the date at the top. Continuing to use the platform after a change means you accept the updated policy.