Privacy Policy

This Privacy Policy explains how the Medical Academic Portal ("the App", "we", "our", or "us") collects, uses, stores, protects, and discloses information when authorized users access the mobile application and related services hosted through dramarpathology.in.

1. Information We Collect

Depending on the user's role and the functions used, we may collect or process the following information:

• Account and identity information: name, email address, username, roll number, student or staff identifier, role, institution, batch, and related account metadata.
• Authentication information: login credentials are used to authenticate the user. The mobile app does not intentionally store the user's password on the device. Authentication tokens and limited session information may be stored securely on the device to maintain a signed-in session.
• Academic information: timetable, attendance, examination results, internal assessment information, competencies, academic resources, course or subject information, and related academic records.
• Logbook and mentoring information: logbook entries, mentor assignments, meeting records, goals, progress notes, follow-up information, concerns submitted through authorized mentor workflows, and related academic or professional-development records.
• Files and documents: documents or academic resources uploaded through features available to authorized users.
• Technical information: basic server logs and security-related information such as request timestamps, IP address, failed login attempts, and information required to protect the service and diagnose technical problems.

2. Information We Do Not Intentionally Collect

The App does not currently require access to device location, contacts, SMS, call logs, microphone, camera, advertising identifiers, or financial information for its normal operation.

3. How We Use Information

We use information only as reasonably necessary to operate the App and related academic services, including to:

• authenticate users and maintain secure sessions;
• provide role-based access to student, teacher, administrator, and other authorized institutional functions;
• display and manage academic records such as attendance, timetable, results, competencies, resources, logbooks, and mentor activities;
• allow authorized academic and administrative workflows;
• maintain security, prevent unauthorized access, investigate abuse, and troubleshoot service problems;
• comply with applicable institutional, legal, regulatory, audit, and record-keeping requirements.

4. Legal and Institutional Basis for Processing

Information is processed for legitimate educational and institutional administration purposes, to provide requested services to authorized users, to protect the security of the platform, and where applicable to comply with legal, regulatory, academic, or institutional obligations.

5. How Information Is Shared

We do not sell personal information.

Information may be made available only when reasonably necessary to:

• authorized faculty, mentors, administrators, institutional officials, or staff according to assigned roles and permissions;
• service providers that support hosting, infrastructure, security, backup, or technical operation of the service, subject to appropriate confidentiality and security obligations;
• government, regulatory, accreditation, university, judicial, or law-enforcement authorities where disclosure is required by applicable law or a valid official process;
• protect the rights, safety, integrity, and security of users, the institution, or the service.

6. Data Security

We use reasonable technical and organizational safeguards designed to protect information against unauthorized access, disclosure, alteration, loss, or misuse. Production mobile connections are intended to use HTTPS. Authentication tokens and limited session routing information may be stored using secure device storage. Access to server-side data is restricted according to authenticated roles and permissions.

No internet-based service can guarantee absolute security. Users should keep their credentials confidential and promptly report suspected unauthorized access.

7. Data Retention

Information is retained only for as long as reasonably necessary for academic administration, institutional record-keeping, security, audit, legal, regulatory, accreditation, or educational requirements. Different categories of academic records may have different retention periods.

Where deletion is requested, some information may need to be retained if required by law, university rules, institutional policy, examination regulations, audit requirements, or other legitimate record-keeping obligations. When retention is no longer required, information will be deleted, anonymized, or otherwise securely disposed of where reasonably practicable.

8. Account and Data Deletion Requests

Users may request deletion of their account or personal data, subject to applicable academic, institutional, legal, and regulatory retention requirements.

Submit account or eligible data deletion requests through the Account & Data Deletion page on dramarpathology.in. Requests are verified before they are processed.

9. Children's Privacy and Intended Audience

The App is intended for medical students, faculty, staff, and institutional users. It is not designed for young children. Some legitimate medical students may be under 18 years of age. Where required, institutional procedures and applicable law govern the processing of information relating to minors.

10. Health and Medical Information

The App is primarily an academic and medical-education platform. It is not a medical device and does not provide patient-specific diagnosis, treatment, or emergency medical services.

If any feature is later introduced that collects personal health information, this Privacy Policy and the Google Play Data Safety declaration must be updated before that feature is released.

11. Third-Party Links and Resources

The App may provide links to external websites, documents, educational resources, or third-party services. Their privacy practices are governed by their own policies. Users should review those policies before providing information to external services.

12. Changes to This Privacy Policy

We may update this Privacy Policy when the App, legal requirements, institutional practices, or data-processing activities change. The revised version will be posted on this page with an updated effective date. Material changes should also be communicated through the App or appropriate institutional channels when required.

13. Contact Us

For privacy questions, account/data deletion requests, or complaints, contact:

Medical Academic Portal – Privacy Contact
Website: https://dramarpathology.in
Email: dramarshah26@gmail.com