Privacy Policy for PrepX

This Privacy Policy explains how ScalpelXLab ("we," "us," "our") collects, uses, discloses, and protects information in connection with the PrepX Android application ("App," "PrepX").

PrepX is designed for medical students and surgical trainees (18 years of age and older) preparing for postgraduate surgical examinations. By downloading, installing, or using PrepX, you agree to the terms of this Privacy Policy.

Contents

1. Information We Collect
2. Third-Party Services We Use
3. How We Use Your Information
4. Data Sharing and Disclosure
5. Data Retention, Deletion, and Your Choices
6. Data Security
7. Children's Privacy
8. Changes to This Policy
9. Contact Us

1. Information We Collect

We collect the following categories of personal data when you use PrepX:

We do not directly collect payment card details. All purchase and billing information is processed and stored by Google Play Billing, not by PrepX or ScalpelXLab.

2. Third-Party Services We Use

PrepX relies on the following third-party services, each governed by its own privacy policy:

• Google Play Services — core platform services required for the App to function on Android.
• Google Firebase Authentication — manages user sign-in via Google Sign-In and Email/Password.
• Google Firebase Realtime Database — securely stores and syncs your reading progress and bookmarks across your devices.
• Google AdMob — serves banner advertisements to users on the free tier, using advertising identifiers.
• Google Play Billing — processes in-app purchases and subscription payments.

You can review Google's privacy practices at policies.google.com/privacy.

3. How We Use Your Information

• Account management & cross-device sync: Your email address, UID, reading progress, and bookmarks are used exclusively to authenticate your account and keep your study progress synchronized across the devices you use.
• Subscription management: Your PRO status and Google Play transaction tokens are used to verify and unlock premium features you've purchased.
• Advertising: For free-tier users, your Advertising ID, IP address, and device model are shared with Google AdMob to serve relevant banner ads and measure ad performance. Premium (PRO) users are not shown ads and this data is not collected for ad purposes once upgraded.
• App functionality and reliability: Technical identifiers may be used to diagnose issues and maintain the stability of the App.

4. Data Sharing and Disclosure

Data is shared only as follows:

• With Google Firebase for authentication and cloud data storage/sync.
• With Google AdMob, strictly for the purpose of serving and measuring banner advertisements.
• With Google Play Billing, to process and validate purchases and subscriptions.
• If required by law, regulation, legal process, or governmental request.
• To protect the rights, property, or safety of ScalpelXLab, our users, or the public, as permitted by law.

5. Data Retention, Deletion, and Your Choices

• Reset in-app data: You can clear your reading progress and bookmarks at any time via Settings → Reset Data within the App.
• Full account deletion: To request complete deletion of your account and all associated personal data, email us at admin@scalpelxlab.com. We will process deletion requests within a reasonable timeframe and confirm once complete.
• Retention: We retain your data for as long as your account remains active, or as needed to provide the App's features, comply with legal obligations, or resolve disputes.

6. Data Security

• All data transmitted between the App and our servers is encrypted in transit via SSL/HTTPS.
• Data stored in Firebase is protected using Firebase Security Rules that restrict access to authorized, authenticated users only.
• While we take reasonable measures to protect your information, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

7. Children's Privacy

PrepX is intended for medical students and surgical trainees aged 18 and older.

The App is not directed at children under 18, and we do not knowingly collect personal data from anyone under 18.

If we become aware that we have inadvertently collected such data, we will take steps to delete it promptly.

8. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements.

Any changes will be posted on this page with an updated "Last updated" date.

Continued use of the App after changes are posted constitutes acceptance of the revised policy.

9. Contact Us