Privacy Policy
PrepFCPS · com.micoders.prepfcps · last updated 5 October 2026
PrepFCPS is built and operated by Mi Coders (Gujrat, Punjab, Pakistan). This policy explains exactly what the app collects, why, how long we keep it and what you can do about it. It applies to the PrepFCPS Android and iOS apps and to this website.
the short version
- · No advertising and no ad SDKs — ever.
- · We never sell or rent your personal data.
- · We collect what the app needs to work, and say so below.
- · AI features send what you submit to named AI companies — only after you allow it.
- · You can delete your account and all its data at any time.
What we collect and why
| Data | Why | When |
|---|---|---|
| Phone number | Account creation and sign-in via WhatsApp OTP. It is your account identifier. | Required |
| Name | Shown in the app and on your results. | Required |
| City and hospital / institution | Lets us understand where our users train and prioritise content. | Optional |
| Exam track and specialty | Decides which Paper II syllabus and questions you are served. | Required |
| Practice activity | Answers, scores, timings and topic accuracy — this powers your readiness score, weak-area drills and spaced repetition. | Automatic |
| Device identifier | A random identifier generated on install (not a hardware ID). Used only to enforce the device limit on a subscription. | Automatic |
| Push token (FCM) | Delivers study reminders and account notifications. Turn notifications off and it stops being used. | Automatic |
| Payment submissions | Sender name, transaction number, amount and the screenshot you upload, so we can verify a manual payment and activate your subscription. | Only if you pay |
| What you submit to AI features | Typed questions, photos, voice recordings and written answers — sent to an AI provider to produce your answer. See “AI features” below. | Only if you allow it |
Biometric lock
You can optionally lock the app with your fingerprint or face. That check happens entirely on your device through the operating system's own biometric API. Your fingerprint or face data is never read by, sent to, or stored by PrepFCPS — we only receive a yes-or-no answer from the device.
Device limit on subscriptions
A subscription is for one doctor. To prevent one account being shared across many people, each install registers a randomly generated identifier and a subscription can be active on a limited number of devices. This identifier is created by the app, is not a hardware or advertising ID, and cannot be used to identify you outside PrepFCPS. Changing phones is fine — contact us and we will reset your devices.
AI features and third-party AI services
The AI tutor, AI Visual, voice, written-answer marking and weak-topic drills are powered by outside AI companies. Using one of these features sends what you submit to that company so it can produce your answer.
We ask before anything is sent.
The first time you use an AI feature, the app shows what will be sent and who receives it, and sends nothing unless you tap Allow. You can withdraw permission at any time in Profile → AI data sharing; AI features then ask again before sending anything. If you never allow it, AI features stay off and the rest of the app works as normal.
What is sent
- Questions you type to the AI tutor, with the earlier messages of that chat
- The MCQ or written case you ask about, including the option you chose
- Photos you add in AI Visual
- Voice recordings you make, and the answers sent back to be read aloud
- Written answers you submit for marking
- Topics you type for a weak-topic drill
Never sent: your name, phone number, payment details or device identifier. Do not include identifiable patient information — PrepFCPS is a study tool, not a clinical system.
Who receives it
| Company | Service | Used for |
|---|---|---|
| Anthropic | Claude models | AI tutor, AI Visual, written marking, weak-topic drills |
| OpenAI | GPT models | Same features, when we run them on a GPT model |
| Gemini models | Same features, when we run them on a Gemini model | |
| Alibaba Cloud | Qwen models | Same features, when we run them on a Qwen model |
| ElevenLabs | Speech AI | Voice: turns your recording into text and reads answers aloud |
Each text or image request goes to one of the first four, depending on the model we currently run that feature on; voice always goes to ElevenLabs.
How it is used and protected
What you submit is used only to generate your answer, marking or drill — never for advertising, and never sold. We use each provider through its business API, under terms that limit use of the data to providing that service and require it to be protected at least as well as this policy protects it. Providers may keep requests for a limited period for security and abuse monitoring, as their terms allow. Your AI tutor chats are stored on your phone, not on our servers.
Reporting an AI answer
Every AI answer has a Report option. A report sends the answer, the question that produced it and the reason you chose to PrepFCPS only — not to any AI company — so our team can review it and fix the cause. Reports are kept until they have been reviewed and are deleted with your account.
What we do NOT do
- No advertising, no ad SDKs, no ad identifiers (no AAID / IDFA).
- No selling or renting of personal data to third parties.
- No tracking you across other apps or websites.
- No access to your contacts, SMS, call log, or precise location.
Who we share data with
Only the service providers the app needs to function: our hosting and database provider, ImageKit for images you upload (such as payment screenshots), Firebase Cloud Messaging for notifications, WhatsApp for delivering your one-time sign-in code, and — only with your permission — the AI companies named above (Anthropic, OpenAI, Google, Alibaba Cloud and ElevenLabs). Each receives only what that specific function requires. We also disclose data where the law requires it.
How long we keep it
Account and practice data are kept while your account exists, so your progress and analytics survive between sessions. Payment records are retained as long as required for accounting. When you delete your account, personal data is removed; anonymised, non-identifying statistics (such as how difficult a question proved overall) may remain.
Security
Data is transmitted over HTTPS and stored on access-controlled infrastructure. Sign-in uses a one-time code sent to your phone rather than a stored password. No system is perfectly secure, but we limit what we collect precisely so there is less to lose.
Children
PrepFCPS is intended for medical graduates preparing for postgraduate entry examinations. It is not directed at children and we do not knowingly collect data from anyone under 16.
Your rights
You can view and correct your profile in the app, turn notifications off at the OS level, request a copy of your data, or delete your account outright. Deletion is self-service on our account deletion page, or email us and we will do it for you.
Changes to this policy
If we change what we collect or why, we will update this page and the date at the top, and — for anything material — tell you in the app.
Contact
Mi Coders · Gujrat, Punjab, Pakistan
info@micoders.com
+92 317 1755276