Privacy Policy

ApexBeat.ai ("we", "us", "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our AI-powered medical exam preparation platform. ApexBeat.ai is a product of iSoft Group, a UK-registered technology company with 20+ years of enterprise cybersecurity experience.

1. Information We Collect

1.1 Personal Information

• Name and Contact: Full name, email address, WhatsApp number, and phone number
• Academic Information: Medical college/university, year of study, intended exam (NLE, MBBS, FCPS)
• Payment Information: Processed securely by Stripe. We do not store your card details.
• Study Data: Diagnostic results, quiz answers, weak topics, study progress, and AI tutor interactions

1.2 Automatically Collected Information

• Device Information: IP address, browser type, operating system, device type
• Usage Data: Pages visited, time spent, features used, click patterns
• Cookies: See our Cookie Policy for details

2. How We Use Your Information

• Personalization: Create customized study plans, identify weak topics, and predict high-yield exam topics
• AI Tutor: Provide curriculum-aligned explanations in English and Roman Urdu
• Communication: Send daily MCQs, study reminders, exam alerts, and account updates via WhatsApp and email
• Improvement: Analyze usage patterns to improve MCQ quality, AI accuracy, and platform features
• Security: Prevent fraud, detect abuse, and protect account integrity

3. How We Store and Protect Your Data

Encryption: All data is encrypted at rest using AES-256 and in transit using TLS 1.3.

Infrastructure: Our servers are hosted on ISO 27001 certified cloud infrastructure with 99.9% uptime.

Access Controls: Only authorized personnel can access user data. All access is logged and audited.

Data Retention: We retain your study data for as long as your account is active. After account deletion, data is purged within 30 days.

Backups: Encrypted backups are stored in geographically distributed locations for disaster recovery.

4. Third-Party Services

We use the following trusted third-party services:

• Stripe: Payment processing. Stripe is PCI DSS Level 1 certified. Stripe Privacy Policy
• Google Analytics 4: Usage analytics (anonymized IP). Google Privacy Policy
• Meta (Facebook) Pixel: Ad conversion tracking (anonymized). Meta Privacy Policy
• Cloudflare: CDN and DDoS protection. Cloudflare Privacy Policy

5. Cookies and Tracking

We use cookies to:

• Keep you logged in (essential cookies)
• Remember your study preferences (functional cookies)
• Analyze how you use the platform (analytics cookies)
• Show relevant ads (marketing cookies, only with consent)

You can manage cookie preferences in your browser settings. For details, see our Cookie Policy.

6. Your Rights

You have the right to:

• Access: Request a copy of all data we hold about you
• Correct: Update or correct inaccurate information
• Delete: Request complete deletion of your account and data (30-day purge)
• Export: Download your study data in JSON or CSV format
• Opt-out: Unsubscribe from marketing emails and WhatsApp messages at any time
• Restrict: Limit how we use your data for analytics and marketing

7. Children's Privacy

ApexBeat is designed for medical students (typically 18+). We do not knowingly collect data from children under 13. If you believe a child under 13 has provided us with personal information, contact us immediately.

8. Data Transfers

iSoft Group is headquartered in the UK. Your data may be processed on servers in the UK, EU, and US. All transfers comply with GDPR adequacy decisions and Standard Contractual Clauses.

9. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you via email and WhatsApp of significant changes. The "Last Updated" date at the top indicates the most recent revision.