Privacy Policy

This Privacy Policy explains what information MedPrepa ("we", "us", "our") collects when you use our platform, how we use it, and the choices you have. MedPrepa is an exam-preparation service operated by Ahmed Eshaji, based in Morocco. By using MedPrepa, you agree to this policy.

1. Information we collect

• Account information — your name, email address, and the password you set when you register. Authentication (including password storage) is handled by our provider, Supabase; we never store your password in plain text.
• Learning activity — data generated as you study, such as which questions you answered correctly, your selected answers, exam and lesson progress, your study checklist, saved questions, and your spaced-repetition review schedule. We use this to track your progress across your devices.
• Payment confirmation — when you pay by CIH bank transfer and contact us to confirm (for example on WhatsApp), you may share your name, email, the amount, and a transfer reference. We use this only to verify your payment and activate your access. We do not collect or process your card or bank login details — the transfer happens entirely through your own bank.
• Technical data — a session cookie that keeps you signed in, and basic technical information needed to operate and secure the service.

2. How we use your information

• To create and manage your account and keep you signed in.
• To provide the service and remember your progress across devices.
• To verify payments and grant or manage your access.
• To respond to your messages and provide support.
• To maintain security, prevent abuse, and improve the platform.

We do not sell your personal information, and we do not use it for third-party advertising.

3. Where your data is stored

Your account and learning data are stored using Supabase (our database, authentication, and hosting provider). Access to your data is protected by row-level security, so each user can only read and write their own records. Your data may be processed on servers located outside Morocco, wherever our providers operate.

4. Service providers we rely on

• Supabase — database, authentication, and hosting.
• WhatsApp / Meta — if you contact our support number, your message is handled under WhatsApp's own privacy terms.
• Instagram / Meta — if you reach us through our Instagram page.

5. Cookies

We use a small number of cookies that are strictly necessary to run the service — mainly to keep your session signed in. We do not use advertising or cross-site tracking cookies.

6. Data retention

We keep your account and learning data for as long as your account exists. If you ask us to delete your account, we will remove your personal data, except where we need to keep limited records to comply with the law or resolve disputes.

7. Your rights

You can ask to access, correct, or delete your personal data, or to close your account. To exercise any of these rights, contact us using the details below. You can also update your name from your account and stop using the service at any time.

8. Children

MedPrepa is intended for students preparing for the medical-school entrance exam. It is not directed at children under 16. If you are a minor, please use MedPrepa only with the agreement of a parent or guardian.

9. Changes to this policy

We may update this policy from time to time. When we make material changes, we will update the "Last updated" date above. Continued use of MedPrepa after a change means you accept the updated policy.

10. Contact

For any privacy question or request, reach us on WhatsApp at +212 787-041197 or on Instagram @eshaji__ahmed.