Privacy Policy

1. Introduction

Welcome to MDCAT Prep Pakistan ("we", "our", "us"), operated at mdcatprep.com. We are committed to protecting your privacy and being transparent about how we handle your data. This Privacy Policy explains what information we collect, how we use it, how we protect it, and your rights regarding your data when you use our website and services.

By using our website, you agree to the collection and use of information as described in this policy. If you do not agree, please discontinue use of our website.

2. Information We Collect

We collect information in two ways: automatically from all visitors, and directly from users who choose to create an account.

a) Information collected automatically (all visitors):

IP address
Browser type, version, and language
Operating system and device type
Pages visited, time spent on each page, and click interactions
Referring URLs (the website you came from)
Approximate geographic location (country/city level, derived from IP address)

This data is collected through Google Analytics and advertising technologies described below.

b) Information collected from registered users:

You may optionally sign in using your Google account via Google Identity Services (Google Sign-In). When you do, we receive and store:

Your name (as provided by your Google account)
Your email address
Your Google profile picture URL
A unique user identifier

When you are signed in, we also collect and store:

Practice test results (scores, time taken, subject breakdown)
Incorrectly answered questions for review
Subscription and payment status

c) Local storage data:

We use your browser's local storage (similar to cookies) to store:

Quiz progress and session data
Previously seen question IDs (to avoid repeating questions across tests)
Flashcard data and user preferences

This data remains on your device and is not transmitted to our servers unless you are signed in.

3. How We Use Your Information

We use collected information for the following purposes:

To provide and operate our MCQ practice tests and study tools
To track your test history and performance (signed-in users)
To personalize your experience (e.g., avoiding repeated questions)
To process premium subscriptions and payments
To analyze website usage and improve our services via Google Analytics
To display relevant advertisements via Google AdSense
To communicate important updates about our services

4. Google Analytics

We use Google Analytics (measurement ID: G-GNG63DJK7Z) to understand how visitors interact with our website. Google Analytics collects data such as your IP address, browser type, pages visited, and session duration using cookies.

Google Analytics data is processed by Google LLC in accordance with their Privacy Policy.
We have enabled IP anonymization where available.
You can opt out of Google Analytics by installing the Google Analytics Opt-Out Browser Add-on.

5. Google AdSense & Advertising

We use Google AdSense to display advertisements on our website. Google AdSense and its partners use cookies and similar tracking technologies (including web beacons and JavaScript) to serve ads based on your prior visits to this and other websites.

Google uses the DoubleClick cookie to serve interest-based (personalized) ads.
Third-party ad vendors may use cookies to serve ads based on your visits to this and other websites.
These third parties automatically receive your IP address when ads are served. This is necessary for delivering ads and measuring their effectiveness.

Your choices regarding personalized ads:

Opt out of Google's personalized advertising at Google Ad Settings.
Opt out of third-party vendor ads at aboutads.info.
Visit NAI opt-out page for additional opt-out options.
European users can manage consent at youronlinechoices.eu.

We do not have access to or control over cookies used by third-party advertisers. This Privacy Policy covers only cookies used by our website and does not cover the use of cookies by any advertisers.

6. Cookies & Local Storage

Our website uses cookies and browser local storage to improve your experience. Cookies are small text files stored on your device by your web browser.

Types of cookies we use:

Essential cookies: Required for authentication (Google Sign-In session) and basic website functionality
Analytics cookies: Set by Google Analytics to understand how visitors use our site
Advertising cookies: Set by Google AdSense and its partners for ad personalization and measurement
Functional cookies: To remember your preferences and quiz progress within a session

Cookie consent: When you first visit our website, you will be presented with a cookie consent banner. You may accept or decline non-essential cookies. You can also change your cookie preferences at any time through your browser settings.

Managing cookies: You can control and delete cookies through your browser settings. Note that disabling cookies may affect the functionality of certain features such as sign-in and quiz progress tracking. For more information about cookies, visit allaboutcookies.org.

7. Google Sign-In & Authentication

We offer optional sign-in via Google Identity Services (Google Sign-In). When you sign in with Google:

We receive your name, email address, and profile picture from your Google account
We store this information securely on our servers to identify your account
We use your email address solely for account identification and service-related communication
We do not access your Google contacts, files, or any other Google data
You can revoke our access at any time through your Google Account permissions

Sign-in is optional. You can use our free features (Quick Test, subject MCQs, past papers) without creating an account.

8. Payment Processing

For premium subscriptions, payments are processed through third-party payment processors. We do not directly collect, store, or have access to your full credit/debit card numbers or bank account details.

Payment data is handled securely by our payment processor in compliance with PCI-DSS standards
We only store your subscription status, order ID, and payment confirmation on our servers
For refund and cancellation, please refer to our Refund Policy

9. Data Sharing & Third-Party Services

We do not sell, trade, or rent your personal information to any third parties. We share data only with the following service providers who assist in operating our website:

Google LLC — for authentication (Google Sign-In), analytics (Google Analytics), and advertising (Google AdSense)
Payment processors — for processing premium subscription payments
Hosting provider — our website is hosted on infrastructure that may process server logs containing IP addresses

These third parties are obligated to protect your data and may only use it for the specific services they provide to us.

We may also disclose your information if required by law, legal process, or government request, or to protect the rights, property, or safety of our users or the public.

10. Data Retention

Account data: Your name, email, and profile data are retained for as long as your account is active
Test results and history: Retained for as long as your account is active so you can track your progress
Analytics data: Retained by Google Analytics according to their default retention settings (14 months)
Local storage data: Stored on your device until you clear your browser data

When you request account deletion, we will remove your personal data from our servers within 30 days.

11. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

Right to access: Request a copy of the personal data we hold about you
Right to correction: Request correction of inaccurate personal data
Right to deletion: Request deletion of your account and associated data
Right to data portability: Request your data in a machine-readable format
Right to withdraw consent: Withdraw consent for data processing at any time
Right to opt out: Opt out of personalized advertising (see Section 5)

To exercise any of these rights, please contact us at the email address below. We will respond to your request within 30 days.

For users in the European Economic Area (EEA) / GDPR:

Our legal basis for processing your data is: (a) your consent (for cookies and optional sign-in), (b) performance of a contract (for premium subscription services), and (c) legitimate interests (for website analytics and improvement). You may withdraw consent at any time without affecting the lawfulness of processing based on consent before withdrawal.

For users in California (CCPA):

You have the right to know what personal information we collect, request deletion of your data, and opt out of the sale of personal information. We do not sell your personal information. To make a request, contact us at the email address below.

12. Data Security

We take reasonable measures to protect your personal information from unauthorized access, alteration, disclosure, or destruction. These measures include:

All data transmitted between your browser and our servers is encrypted using HTTPS/TLS
Authentication is handled through Google's secure OAuth 2.0 protocol
We do not store passwords — authentication is managed entirely by Google
Server access is restricted to authorized personnel only

While we strive to protect your data, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security but will notify affected users in the event of a data breach.

13. Children's Privacy

Our website is intended for students aged 16 and above preparing for the MDCAT examination. We do not knowingly collect personal information from children under the age of 13 (or under 16 in the EEA).

If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately at the email address below. We will take steps to delete such information from our servers within 30 days.

14. Links to External Sites

Our website may contain links to external websites that are not operated by us. We are not responsible for the privacy practices or content of those third-party sites. We strongly encourage you to review the privacy policy of every site you visit.

15. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal, operational, or regulatory reasons. Changes will be posted on this page with an updated "Last updated" date.

We encourage you to review this policy periodically. Your continued use of the website after any changes constitutes your acceptance of the updated policy. For significant changes, we may notify registered users via email.

16. Contact Us

If you have any questions about this Privacy Policy, wish to exercise your data rights, or have concerns about how your data is handled, please contact us at:

Data Controller: MDCAT Prep Pakistan
Email: azeemzafar527@gmail.com
Website: mdcatprep.com
Response time: We aim to respond to all privacy-related inquiries within 30 days.