Privacy Policy

Effective date: 3 May 2026

This Privacy Policy describes how we collect, use, store, and safeguard personal information when you use our websites, mobile applications, and related services (together, the “Platform”). The Platform delivers online educational content and assessments for MBBS students and related healthcare learners.

Who we are

We operate the Platform as the data controller responsible for deciding how your personal information is handled. Replace this sentence with your legal entity name, registered office, and contact email if you publish a separate imprint.

Information we collect

• Account and profile data: name, email address, mobile number (if collected), institutional or college affiliation, course or cohort identifiers, qualification details you choose to supply, username or unique ID, avatar or profile photo if you upload one.
• Authentication and security: encrypted password credentials, OTP or verification tokens, login timestamps, technical session tokens where applicable.
• Learning activity: video watch progress, downloads where permitted by your plan, question attempts, quiz and exam submissions, scores, time spent in modules, bookmarks or notes saved within the app.
• Purchases: subscription plan identifiers, invoicing identifiers, masked payment confirmations. Payment processing may be handled by independent payment gateways; we do not store full card numbers on our servers.
• Communications: support tickets, chats, emails, or in-app feedback you send to us.
• Devices and diagnostics: device type and model, operating system version, approximate app version, anonymised crash logs where enabled, generic network information useful for diagnosing performance issues.
• Optional permissions: if you grant them, notifications (FCM/APNs identifiers), accessibility settings, calendar reminders for scheduled live classes.

How we use your information

• Provide access to subscribed courses, live sessions, downloadable resources, exams, analytics dashboards, certificates, or similar Platform features.
• Maintain account security and prevent fraud including credential abuse.
• Communicate service updates, transactional notices such as receipts, security alerts, and—where lawful—promotional announcements you can unsubscribe from.
• Analyse aggregated usage to improve curricula, pacing, instructional design, accessibility, reliability, and product roadmap decisions.
• Meet legal obligations (including tax records, auditing, lawful requests).

Legal bases – India

Where Indian law applies, processing is justified by your consent where required (for marketing or optional profiling), contractual necessity where you enrol in paid programmes, legitimate interests balancing your rights against our obligation to safeguard the Platform—such as moderation, abuse detection, aggregated analytics—or legal obligations we must uphold.

Sharing of information

• Authorised tutors, moderation staff, accountants, auditors, counsellors, or IT subcontractors under confidentiality terms.
• Hosting, email delivery, push notification gateways, CRM, ticketing, videoconferencing, payment aggregators strictly on a need-to-know basis.
• Government regulators, courts, or law enforcement agencies when mandated by lawful order.

We do not sell your personal information to unrelated data brokers.

International transfers

If components of our infrastructure reside outside India, appropriate safeguards apply such as contractual clauses mandated by prevailing regulations unless an adequacy determination exists.

Retention

We keep information only as long as needed to deliver services, resolve disputes, enforce agreements, and satisfy accounting or regulatory duties. Exam records and academic integrity logs may be retained longer where academic fraud investigations require an audit trail.

Security

We apply industry-standard measures including encryption in transit, access controls, staff training, and periodic reviews. No online system is perfectly secure; please protect your password and report suspected incidents promptly.

Your rights

Subject to applicable law you may request access, correction, deletion, restriction, portability, or withdraw consent for processing that is optional. To exercise rights or raise concerns contact us at the address below. You may also complain to the relevant supervisory authority.

Children and minors

The Platform is intended for higher-education medical students aged eighteen or older, or minors using institutional supervision as permitted locally. Parents or guardians who believe underage enrolment occurred without consent should contact us promptly.

Third-party links

External integrations (textbooks portals, conferencing tools, social logins if offered) operate under separate policies—we encourage you to review them.

Changes

Updates will be reflected with a revised effective date inside the Platform and, where materially significant and required, through email or banners.

Contact

For privacy enquiries email: cortisoledu@gmail.com