Privacy Policy

1. Information We Collect

When you register and use Medarro, we collect:

• Account Data: Your name, email address, medical college, course track (MBBS, NEET PG, BDS, AYUSH), and academic year.
• Academic Study Data: Your diagnostic quiz answers, bookmarked flashcards, personal study notes, and search queries within the AI Study engine.
• Transaction Data: Razorpay payment ID, subscription status, and billing cycle. We do NOT store your credit/debit card numbers or UPI PINs on our servers; all payment data is processed directly by PCI-DSS compliant payment gateway Razorpay.

2. How We Use Your Information

We use your data solely to:

• Deliver syllabus-aligned diagnostic recommendations, flashcards, and spaced repetition scheduling.
• Process subscription activations and generate invoices via Razorpay.
• Improve platform performance and AI retrieval accuracy.

3. Data Security & Storage

Your data is stored securely in encrypted PostgreSQL databases utilizing PostgreSQL Row-Level Security (RLS) to ensure strict tenant isolation. Only you can access your personal vault documents and saved answers.

4. Third-Party Disclosures

We do not sell, rent, or trade your personal data to third-party advertisers. We share information only with trusted service providers essential to operating our service (Supabase for authentication/database, Razorpay for payment processing, and Vercel for hosting).

5. Your Rights & Data Access

You have the right to request access to your stored academic data, review what personal information we hold, or export your saved notes. You may contact our privacy team at privacy@medarro.com.

6. User Account & Data Deletion Policy

In compliance with Google Play Store User Data policies and global privacy standards, you have the full right to request permanent deletion of your Medarro account and all associated data:

• In-App Session Termination: You can initiate account deletion by navigating to Profile / Settings, scrolling to Danger Zone, and confirming Delete Account, which immediately signs out your active session.
• Web Deletion Portal: You can submit a deletion request via our public request portal at medarro.com/delete-account.
• Direct Email Verification: You can email our support team directly from your registered email address at supportmedarro@gmail.com.

To protect student accounts against unauthorized deletion, requests are verified and processed manually by our data protection team. Upon confirmation, user auth credentials, profile attributes, quiz attempts, study streak records, uploaded notes, and personal data are permanently deleted. Anonymized transaction receipts are preserved solely as required by statutory taxation and banking regulations.