1Introduction
GulfMedExams (“we”, “our”, or “us”) is committed to protecting your personal information. This Privacy Policy explains what data we collect, how we use it, and your rights regarding that data when you use our Gulf medical licensing exam preparation platform.
2Information We Collect
2.1 Information You Provide
- Name and email address (on account registration)
- Profile information you choose to provide
2.2 Information We Collect Automatically
- Exam session progress and accuracy scores
- Study patterns and usage analytics
- Device type, browser, and IP address
- Session timestamps and page interactions
2.3 Anonymous Usage
If you use the platform without signing in, we assign a temporary anonymous identifier (stored in your browser) to track your session progress locally. No personally identifiable information is collected for anonymous users.
3How We Use Your Information
We use your information to:
- Provide and improve the exam preparation service
- Save and restore your practice progress across devices
- Track subject-level accuracy for personalised insights
- Respond to support requests and account queries
- Detect and prevent fraud or abuse
- Comply with legal obligations
We do not use your data for advertising or sell it to third parties.
4Information Sharing and Disclosure
We do not sell your personal information. We may share it only in these circumstances:
- Service providers — third-party tools we use to operate the platform (authentication, database, analytics)
- Legal requirement — if required by law, court order, or regulatory authority
- Business transfer — in the event of a merger, acquisition, or asset sale
- With your consent — for any other purpose at your direction
5Third-Party Services
Our platform uses the following third-party services that may process your data:
- Clerk — user authentication and account management
- MongoDB Atlas — cloud database for progress and session storage
- Google Analytics — aggregate, anonymised usage statistics
Each provider operates under its own privacy policy. We encourage you to review them.
6Data Security
We implement appropriate technical and organisational security measures to protect your personal information. All data is transmitted over HTTPS. No method of Internet transmission is 100% secure; while we take all reasonable steps, we cannot guarantee absolute security.
7Data Retention
We retain your personal information for as long as your account is active or as needed to provide our services. When you delete your account, we will delete or anonymise your personal data within 30 days, except where retention is required by law.
8Your Rights
You have the right to:
- Access a copy of the personal data we hold about you
- Correct or update inaccurate information
- Delete your account and associated personal data
- Object to or restrict processing in certain circumstances
- Export your data in a portable format
- Withdraw consent where processing is based on consent
To exercise any of these rights, contact us at the address below.
9Cookies and Tracking
We use cookies and localStorage to maintain your session, remember preferences, and collect anonymised usage statistics via Google Analytics. You can disable cookies in your browser settings, though some functionality may be affected. We do not use advertising cookies or cross-site tracking.
10Children's Privacy
GulfMedExams is intended for medical professionals and students aged 18 and over. We do not knowingly collect personal information from anyone under 18. If you believe we have inadvertently collected such data, please contact us and we will delete it promptly.
11International Data Transfers
Your information may be stored and processed in countries outside your country of residence (including the United States and European Union) via our cloud service providers. We ensure appropriate safeguards are in place in accordance with applicable data protection law.
12Changes to This Policy
We may update this Privacy Policy periodically. Material changes will be communicated by updating the “Last updated” date and, where appropriate, by direct notification. Continued use of the Service after changes constitutes acceptance of the updated policy.