Privacy Policy

1. Information We Collect

Account and identity information

When you create or use an account, we may collect your email address, first name, last name, authentication provider, and account verification status. If you sign in with Apple, we may also receive your Apple user identifier and, where provided by Apple, your email address, which may be a private relay address. If you sign in with Google, we may receive your email address and basic profile data such as your given name and family name.

If you register using email and password, we process your password during sign-up and login, but we store only a password hash rather than the plain-text password.

Study and app usage information

We collect the information needed to provide the educational service, such as:

• selected exam modes, sessions, and practice progress;
• submitted answers and test results;
• saved questions, bookmarks, and personal notes;
• aggregated study statistics and activity history;
• language and profile settings you choose to save.

Subscription and purchase information

Subscriptions are managed through the Apple App Store and RevenueCat. We may receive subscription metadata needed to unlock paid features, including product identifiers, entitlement status, billing status, renewal state, cancellation state, and subscription expiration dates. Payment card details are processed by Apple and its payment partners, not stored on our servers.

Technical, device, and diagnostic information

We and our service providers may collect technical data that helps us operate and secure the service, including IP address, request logs, app version, device or installation level identifiers used by third-party SDKs, crash reports, performance diagnostics, and information required to deliver app updates.

Support and communication information

If you contact us or use account recovery flows, we may process your email address, the content of your message, and records related to password reset or email verification.

2. How We Use Information

We use personal information to:

• create and maintain your account;
• authenticate users and protect account security;
• provide educational content, progress tracking, and saved materials;
• enable and restore subscriptions and premium access;
• send transactional communications such as verification and password reset emails;
• monitor reliability, troubleshoot errors, and improve the service;
• prevent abuse, fraud, unauthorized access, and security incidents;
• comply with legal obligations and enforce our terms.

3. Legal Bases

Where applicable law requires a legal basis, we generally rely on:

• performance of a contract to provide the app and paid features you request;
• legitimate interests to secure, maintain, and improve the service;
• consent where required by law for specific processing activities;
• legal obligations where we must retain or disclose data under applicable law.

4. How We Share Information

We do not sell personal information. We may share information with service providers acting on our behalf and only as needed to operate the service, including:

• hosting and infrastructure providers supporting our backend and database;
• Apple for Sign in with Apple, App Store billing, and subscription platform operations;
• Google for Google sign-in flows;
• RevenueCat for subscription management and entitlement synchronization;
• Sentry for crash reporting and app diagnostics;
• Resend or similar email delivery providers for verification and password reset emails;
• Expo and related delivery infrastructure to distribute app updates and runtime assets.

We may also disclose information if required by law, court order, or a valid request from public authorities, or when necessary to protect rights, users, or the security of the service.

5. International Transfers

Some service providers may process data outside your country. When that happens, we use reasonable steps designed to ensure an appropriate level of protection, including contractual safeguards where required.

6. Data Retention

We keep account and study data for as long as your account is active or as needed to provide the service and maintain legitimate business records. When you delete your account, we remove core account and study records from active systems, subject to limited retention in backups, logs, fraud prevention records, and other data that must be kept for legal, security, or disaster recovery reasons.

7. Your Rights and Choices

Depending on your location, you may have rights to access, correct, delete, restrict, object to, or export certain personal information. You may also have the right to withdraw consent where consent is the basis for processing.

You can:

• update profile details in the app;
• manage or cancel subscriptions in your Apple account subscription settings;
• request help or exercise privacy rights by contacting support@lekmentor.pl.

8. Account Deletion

You can delete your account directly in the app from the profile screen. You can also email support@lekmentor.pl to request deletion. Deleting your account removes access to your saved study data and cannot be undone.

9. Security

We use reasonable technical and organizational measures designed to protect personal information. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. Authentication tokens and app preferences may also be stored on your device using platform-provided secure storage.

10. Children

LEK Mentor is intended for adult students and medical graduates. It is not directed to children under the age required by applicable law to consent independently to data processing.

11. Changes to This Policy

We may update this Privacy Policy from time to time. The latest version will be posted at this URL with an updated "Last updated" date. Material changes may also be communicated through the app or by other appropriate means.

12. Contact Us

For privacy questions, support requests, or data rights requests, contact: support@lekmentor.pl