Privacy Policy

1. Who we are

MLA Prep ("the app", "we", "us") is an educational study aid for candidates preparing for the UK Medical Licensing Assessment (UKMLA). This Privacy Policy explains what information we collect, how it is used, and what rights you have.

For any privacy question or request, email golukicoding@gmail.com.

2. What we collect

We deliberately minimise what the app collects. In normal use:

• Study progress — your question attempts, flashcard reviews, notes read, flagged questions, streaks, mock-exam scores, onboarding answers (pathway, exam date, daily goal), and app preferences. This data is stored locally in a SQLite database on your device. It is not transmitted to us.
• No account, no login. The app does not ask for your name, email, phone number, address, medical records, or any identifying information.
• No contact or photo access. The app does not request access to contacts, camera, microphone, photos, location, health data, or biometrics.

3. In-app purchases

Premium features are unlocked through in-app purchases. Payment is handled entirely by Apple (App Store) or Google (Google Play) under their own terms and privacy policies. We do not receive, store, or have access to your payment details.

To determine whether you have an active premium entitlement, the app uses RevenueCat, a subscription-management service. RevenueCat processes a pseudonymous user identifier generated on your device, along with Apple/Google purchase receipts, in order to validate and restore purchases. RevenueCat's handling of this data is governed by its own Privacy Policy at revenuecat.com/privacy.

4. App store data

The Apple App Store and Google Play may collect diagnostic information, crash reports, and aggregated usage metrics from your device. This collection is controlled by Apple and Google under their own policies, and you can usually manage it in your device settings. We do not receive individual device-level reports from these channels.

5. Notifications

If you enable study reminders, notifications are scheduled locally on your device by the operating system. No push-notification server is involved. You can disable notifications at any time in your device settings.

6. Content sources and third-party references

Clinical reference numbers shown in notes and explanations (for example NICE or BNF codes) are pointers to externally published guidance. The app does not contact those services on your behalf; they are shown only as reading references. If you follow a link to an external site, that site's privacy policy applies.

7. Children

MLA Prep is intended for adult learners preparing for a professional medical examination. It is not directed to children under 16 and we do not knowingly collect data from them.

8. Data retention and deletion

Because your progress is stored on your device, you can delete all of it at any time using Settings → Reset All Progress inside the app, or by uninstalling the app. For subscription or purchase records, use the "Manage Subscriptions" flow in your Apple ID or Google Account; to request deletion of RevenueCat-held purchase data, contact RevenueCat directly or email us and we will assist.

9. Security

Local data is stored in your device's protected app sandbox. Because data never leaves your device during normal use, there is no server for us to breach. For purchase metadata handled by RevenueCat and the app stores, we rely on those providers' industry-standard security controls.

10. Your rights

Depending on where you live (for example, under UK GDPR, EU GDPR, or the CCPA), you may have the right to access, correct, delete, or object to processing of your personal data. Given that MLA Prep stores progress only on your device and holds no user account, most of these rights are satisfied by the built-in reset/uninstall controls described above. For purchase-related records, contact us at golukicoding@gmail.com and we will work with our payment processor to respond within applicable statutory timeframes.

11. International transfers

No personal data is transferred by the app itself. Where purchase metadata is processed by RevenueCat or the app stores, those providers may transfer data internationally under their own safeguards (typically Standard Contractual Clauses or equivalent).

12. Changes to this policy

We may update this policy to reflect changes to the app or applicable law. Material changes will be indicated by an updated date at the top of this page. Continued use of the app after an update constitutes acceptance of the revised policy.

13. Contact

For any privacy question, data request, or correction, please email golukicoding@gmail.com. We aim to respond within 7 days.