This Privacy Policy applies to the MediGyaan mobile application and related online services provided by MEDIGYAN LLP ("we", "us", or "our"). We are committed to safeguarding the privacy and security of medical students, healthcare practitioners, and users of our platform. This policy outlines how we collect, handle, store, and protect user data in strict adherence to the Google Play Developer Distribution Agreement and User Data Policy.
1. Information We Collect
We only collect data necessary to provide and enhance our educational services:
A. User-Provided Information
- Account Credentials: Full name, email address, phone number, medical specialty, and optional profile avatar provided during sign-up or Google Sign-In.
- Study & Academic Data: Quiz attempts, flashcard performance, study notes, bookmarked resources, and academic progress tracking.
- User Communications: Feedback, queries, and support correspondence sent to our team.
B. Device & Diagnostic Data
- Device Specifications: Device model, Android OS version, IP address, and unique Firebase Cloud Messaging (FCM) tokens required to deliver push notifications.
- App Performance & Crash Analytics: Anonymous crash reports and operational diagnostics used to improve app stability.
2. Device Permissions and Data Usage
MediGyaan requests specific Android permissions strictly to support interactive features, each requested with explicit runtime user consent:
- Camera (
android.permission.CAMERA): Used when you capture photos for your profile, scan clinical notes or textbook passages for OCR text recognition, or engage in real-time WebRTC video calls. The camera is never accessed in the background.
- Microphone (
android.permission.RECORD_AUDIO): Used exclusively for LiveKit WebRTC peer study discussions and audio consultations. Audio streams are encrypted in transit and are not recorded or archived without prior permission.
- Location (
ACCESS_FINE_LOCATION, ACCESS_COARSE_LOCATION): Used optionally to present relevant regional medical workshops, academic seminar timings, and prevent account credential abuse. Continuous background location tracking is not performed.
- Contacts (
android.permission.READ_CONTACTS): Used strictly when you choose to connect with fellow classmates or invite medical colleagues to collaborative study groups. Contact data is never sold, leased, or used for third-party advertising.
- Storage / Media Files: Used on applicable Android versions to download, cache, and open medical reference manuals, PDFs, and study diagrams.
- Notifications (
POST_NOTIFICATIONS): Used to notify you of incoming audio/video study calls, revision schedules, and discussion replies.
3. In-App Purchases and Payment Processing
- Google Play Billing: In-app digital subscriptions and educational content unlocks are processed directly and securely by Google Play In-App Billing.
- Payment Gateways (Cashfree): Fee payments or web purchases are managed via PCI-DSS compliant payment gateways. We never store or hold credit card, debit card, or banking authentication credentials on our servers.
4. Third-Party Service Providers
We partner with reputable infrastructure providers under strict privacy and security standards:
- Google Play Services: Core platform connectivity and authentication.
- Google Firebase: Secure authentication, cloud database (Firestore), file storage, and push notifications.
- LiveKit: Real-time, low-latency WebRTC audio and video communication infrastructure.
- Cashfree Payments: Encrypted payment gateway processing.
5. Data Sharing Policy
Zero Data Selling: MEDIGYAN LLP does NOT sell, rent, monetize, or disclose your personal data to commercial advertisers or data brokers.
6. Data Retention, Account Deletion & User Rights
In accordance with Google Play's User Data and Account Deletion policy:
- Data Retention: We keep your data only as long as your account remains active or as needed to maintain academic records and transaction receipts.
- Account & Data Deletion Mechanism:
- Inside the App: Go to Settings → Account → Delete Account to instantly initiate account closure.
- Direct Request: Email us anytime at support@medigyaan.com with the subject line "Account and Data Deletion Request" from your registered email.
- All associated profile data, study records, and uploaded materials are completely and permanently purged within 30 days of the request.
7. Security Safeguards
All data exchanged between the MediGyaan app and our servers is protected using TLS 1.2 / TLS 1.3 encryption (HTTPS). We implement secure database access rules, restricted administrative access, and regular vulnerability checks.
8. Children's Privacy
MediGyaan is intended for medical students, doctors, and adult learners. We do not knowingly collect personal data from individuals under 13 years of age. Any inadvertently collected data will be deleted immediately upon discovery.
9. Updates to this Policy
We may update this policy periodically. Changes will be reflected at this URL with an updated effective date.
10. Contact Us