Privacy Policy

Effective Date: September 17, 2026

1. Educational Scope & Medical Non-Clinical Notice

MedFlicks provides digital medical education, university lecture series, high-yield clinical curricula, interactive multiple-choice questions (MCQs), and annotated study workbooks designed for medical students, doctors, and exam aspirants.

Important Clarification on Health Data:MedFlicks is strictly a medical education platform. We do not collect, track, solicit, or store personal health records, patient medical data, clinical health metrics, or diagnostic information from any user. Any clinical case vignettes and scenarios presented within course materials are purely pedagogical educational aids.

2. Information We Collect

To manage your account, authenticate sessions, and synchronize your academic progress across devices, we collect the following categories of data:

•Personal Information: Full name, email address, mobile phone number (for OTP verification), unique user identifier, and target exam preferences (e.g., NEET-PG, INICET, MBBS University exams).
•App Activity & Learning Progress: Course enrollments, video lecture watch time and playback resume positions, completed lesson indicators, MCQ practice attempts, recall accuracy statistics, bookmarks, and study notes.
•Device Identifiers & Diagnostics: Device model, operating system version, and Firebase Cloud Messaging (FCM) device installation tokens used exclusively to deliver transactional notifications and course updates.

3. Payment Processing & Mobile App Architecture

The MedFlicks Android mobile application operates as a reader and streaming client. The mobile app does not perform in-app checkout or collect payment card credentials.

Course enrollments and subscriptions are purchased via the official MedFlicks Web Portal or platform licenses. Online web payments are processed securely by Razorpay, a PCI-DSS certified payment gateway. MedFlicks never stores, logs, or has access to your credit/debit card numbers, CVVs, net banking credentials, or UPI PINs.

4. How We Use Your Data

We process your information exclusively for legitimate educational and service purposes:

Authenticating user sessions and validating course entitlement permissions.
Synchronizing video playback progress and MCQ performance statistics across web and mobile readers.
Delivering transactional notifications, lecture updates, and security alerts via FCM.
Providing technical assistance, bug resolution, and user support.
Fulfilling statutory accounting, tax (GST), and audit compliance obligations for course purchases.

5. Third-Party Infrastructure & Service Providers

We partner with trusted technical infrastructure providers who process data strictly on our behalf:

•Google Firebase: Used for secure mobile phone OTP authentication and Cloud Messaging (push notifications).
•Vimeo: Used for secure embedded medical lecture video hosting and playback streaming.
•Cloud Hosting & Database: Secure PostgreSQL database and backend services hosted in modern cloud data center environments with restricted access controls.
•Razorpay: Facilitates web checkout transactions with PCI-DSS compliant processing.
•Resend: Transactional email delivery. We use Resend to send service-related emails such as password-reset and purchase-confirmation messages. Resend may process the recipient's name, email address, message content, and email-delivery metadata on our behalf for the purpose of delivering and monitoring these transactional communications.

We do not sell, rent, or trade your personal information to third-party data brokers or advertising networks.

6. Data Security Practices

We employ reasonable and industry-standard technical safeguards to protect your personal information against unauthorized access, alteration, or disclosure. All network transmissions are encrypted in transit using HTTPS/TLS. Account credentials are protected using cryptographic hashing (bcrypt), and mobile session tokens are stored in secure local storage on the client device. While we strive to maintain robust security measures, no digital system can guarantee absolute invulnerability against all possible security incidents.

7. Data Retention, Account Deletion & User Rights

You retain full control over your personal data. You have the right to access, rectify, or permanently delete your account at any time.

You can initiate permanent account deletion directly within the mobile application under Account > You > Delete Account or by visiting our dedicated Account Deletion Page without having the mobile app installed.

• What is erased: Your name, email address, phone number and password are removed from the MedFlicks account record, along with your video watch history, MCQ attempt metrics, bookmarks, notifications, course access entitlements and FCM device tokens. If you signed up with a phone one-time code, the linked Firebase phone sign-in identity is deleted as well.

• Retained transaction records: Certain transaction and payment records may be retained where required for tax, legal, audit, reconciliation, fraud-prevention or similar legitimate obligations (e.g. GST compliance). An internal account reference and the payment processor's own identifiers may remain attached to those records. They are not used to restore normal account access.

• Processors and logs: Our hosting, email and payment providers may keep limited records or routine system logs for a short period where they are required to by law, security practice or contract. We cannot guarantee erasure from every provider log.

8. Contact & Privacy Inquiries

If you have questions regarding this Privacy Policy, your data rights, or account verification, please email us directly at contactmedflicks@gmail.com, message our support team on WhatsApp at +91 84457 86514, or reach out through the in-app Help section (Account > Help in the mobile app). For account deletion requests, please use our dedicated Account Deletion Page.