Privacy policy

Last updated: 5 November 2026 · Applies to the MedManzil app (Android, iOS, web at medmanzil.com/app) and the website medmanzil.com.

In short: we collect your email, name and study data to run your account and sync your progress. We do not sell your data and show no ads. You can delete your account and all its data at any time from the app or by following these steps.

1. Who we are

MedManzil is an online study platform for doctors and medical students preparing for postgraduate exams (MRCP, CPSP IMM, FCPS and others), with question banks, notes, courses and certificates. In this policy "MedManzil", "we" and "us" mean the MedManzil team that runs the app and this website.

2. Data we collect

Type	What exactly	Why
Account	Email address, the name you enter, your password (stored only as a secure hash by our sign-in provider) or your Google account email and name if you sign in with Google.	To create and secure your account and to put your name on certificates.
Study data	Questions answered and your answers, scores, exam and mock results, bookmarks, notes, highlights, lessons completed, quiz attempts, the course you study and your study plan.	To show your progress and sync it across your devices.
Plans and payments	Plan requests (course, duration, price quoted, any note you add, coupon or referral code), the plans you hold and when they end, referral rewards and wallet credit. Payments are made outside the app; we do not collect or store card or bank details.	To give you access to what you bought and to apply discounts and rewards.
Certificates	The certificates you earn: your name, course, score, issue and expiry dates and a certificate ID.	To issue certificates and let others verify them.
Devices	A device identifier and device name for each device you sign in on.	To keep your account secure and apply device limits of a plan.
Usage and diagnostics	In-app events such as app opened, screen or feature used, and short error messages when the app crashes, with the platform (Android, iOS, web) and time. These are linked to your account.	To fix problems and improve the courses.
Messages to us	What you send us on WhatsApp or through a question report in the app.	To answer you and correct content.

We do not collect your location, contacts, photos, microphone or camera, and we do not use advertising IDs. Some data (downloaded questions, settings, offline progress) is also kept on your device so the app works offline.

3. How we use your data

To run your account, sign you in and sync your study across devices.
To provide the courses and plans you have, and to process plan requests, coupons and referrals.
To issue and verify certificates.
To keep the service secure and prevent misuse of accounts.
To understand which features are used, fix errors and improve questions and notes.
To contact you about your account or a request you made.

We do not sell your personal data, do not use it for advertising and do not show ads.

We share data only with service providers that run the app for us, under their own security and privacy terms:

Supabase: database and sign-in (stores your account and study data).
Cloudflare: hosting of the website and web app, and storage of course media.
Google: only if you choose "Sign in with Google".
Google Play / Apple App Store: to deliver the app on your device.

We may disclose data if required by law or to protect our users and service. If MedManzil is ever transferred to a new owner, your data would move with it under this policy.

5. What other people can see

When you earn a certificate it gets a public verification link (medmanzil.com/verify/…), so an employer or institution can check it. That page shows your name, the course, the dates, the certificate ID and, only if you switch it on, your score. Anyone who has the link or the ID can view it. Nothing else about you is public. Our staff can see your account and study data to support you and manage plans.

6. Security

All data travels over encrypted connections (HTTPS). Access to your data in our database is limited to your own account by row-level security rules, and staff access is restricted and logged. Passwords are never stored in readable form. No system is perfectly secure, but we work to protect your data and will act promptly on any breach.

7. How long we keep it

Account, study, plan, referral, wallet and certificate data: for as long as your account exists.
When you delete your account, this data is deleted straight away from our live database; copies in encrypted backups are overwritten within about 30 days.
Question reports you sent are kept without your name, so content fixes are not lost.
Data on your device is removed when you sign out or uninstall the app.

8. Deleting your account and data

You can delete your account and all data linked to it at any time:

In the app: open Profile and choose Delete my account, then confirm.
Without the app: follow the steps on medmanzil.com/delete-account, either through the web app or by sending us a request.

Deletion removes your account, progress, notes, bookmarks, results, plans, referral code, wallet and certificates (their verification links stop working). A paid plan is not refunded. Staff accounts are removed by the owner instead.

9. Your choices and rights

See and correct your data: your name and study data are in the app; ask us for a copy of anything else.
Delete your data: see section 8.
Hide your score on a certificate: switch it off in Profile, Certificates.
Withdraw consent or object to a use: contact us and we will respond within 30 days.

10. Children

MedManzil is meant for medical students and doctors and is not directed at children under 13. We do not knowingly collect data from children under 13; if you believe a child has given us data, contact us and we will delete it.

11. App permissions

The Android app asks only for internet access, to download questions and sync your progress. It does not request location, contacts, camera, microphone or storage permissions.

12. Changes to this policy

If we change this policy we will update the date at the top and, for important changes, tell you in the app before they apply.

13. Contact

For any privacy question or request, message MedManzil on WhatsApp (+92 332 4263429).