Privacy and data retention

Patient names, MRNs, national identifiers, clinical images, and other patient-identifiable information must not be entered into questions, comments, imports, support evidence, or test fixtures.

• Your Internet Identity principal and profile name.
• Study sessions, attempts, bookmarks, and progress.
• Student comments for moderation.
• Payment submissions and entitlements.
• Privileged audit events for security and accountability.
• Temporary CSV previews for administrator imports (removed after 24 hours or on completion/cancellation).

Study history is retained until account deletion or the approved activity rule, whichever occurs first. Question content and its correction history are retained for the life of the content. Payment and audit records follow the owner-approved Saudi finance/legal schedule, and automated destruction is prohibited until that schedule is signed.

You can request a machine-readable export of your profile, study attempts, bookmarks, comments, payment records, and relevant audit references. Deletion is a two-step, idempotent workflow that shows impact and retained legal records before confirmation. These controls are available from your account page after sign-in.

Internet Identity authenticates accounts, Caffeine/ICP hosts the application, and Moyasar processes configured payments. Merchant secrets never enter source, browser logs, screenshots, exports, or support diagnostics.

For privacy or data requests, see the support page.