Privacy Policy

This Privacy Policy explains what information UnivCore / UCMS ("we", "us", "our") collects through UCMS Learn — our exam-preparation platform for NCLEX, MDCAT and USMLE learners — and how we use, store, and protect it. By creating an account or using the app, you agree to this policy.

Information We Collect

• Account information: full name, email address, phone number, and (optionally) CNIC / national ID, provided at signup.
• Learning activity: MCQ attempts, mock exam scores, flashcard reviews, study streaks, and weak-area analytics — used to power your dashboard and recommendations.
• Device identifiers: a Firebase Cloud Messaging (FCM) push token, used only to deliver study reminders and result notifications.
• Crash & performance diagnostics: collected via Firebase Crashlytics / Performance Monitoring to help us fix bugs and keep the app stable.
• Payment status (read-only): your current subscription/plan state. The app does not process card or bank details directly.

How We Use Your Information

• To create and secure your account, and authenticate you (login, token refresh).
• To generate your personalised dashboard, weak-area analytics, and study recommendations.
• To sync your offline quiz/mock-exam activity once you reconnect to the internet.
• To send push notifications (results, reminders, announcements) — you may disable these in device Settings.
• To diagnose crashes and improve app stability and performance.

Data Sharing

We do not sell your personal information. We share limited data only with:

• Google Firebase — for crash reporting (Crashlytics), performance monitoring, and push notifications (FCM). Data is encrypted in transit.
• Institutional/university administrators, where you are enrolled through an institutional program that requires progress reporting.

Data Security

All data is encrypted in transit (HTTPS/TLS). Authentication tokens on the mobile app are stored in the device's secure/encrypted storage (flutter_secure_storage), never in plain text. Access to production data is restricted to authorised UCMS engineering staff.

Account Deletion

You can request deletion of your account and personal data at any time from Profile → Settings → Delete Account inside the app, or via our public web deletion page: univcore.com/account/delete/. See that page for full details on what is deleted and the retention timeline.

Children's Privacy

UCMS Learn is intended for exam candidates (NCLEX / MDCAT / USMLE preparation) and is not directed at children under 13. We do not knowingly collect data from children under 13.

Changes to This Policy

We may update this policy from time to time. Material changes will be reflected by updating the "Last updated" date above. Continued use of the app after changes constitutes acceptance of the revised policy.

Contact Us

Questions about this policy or your data? Email us at [email protected].