Privacy policy

What SpecialityMCQs is

SpecialityMCQs is a question bank for the UK royal college written exams, by Al Daim Digital. The product runs at app.specialitymcqs.com, and its API runs at api.specialitymcqs.com. This page explains what we store about you, why, and what happens when you delete your account.

Data we store

Everything below is keyed to your account.

• Your email address, used to sign you in. Sign-in works by a one-time code sent by email, or by Google sign-in, which shares only your email and basic profile with us through OpenID. We never store a password.
• Your exam settings: chosen exam and daily goal.
• How you first reached us: campaign and post identifiers in a link, its source and medium, the first page you opened, and the referring site's host and path when available. A link may also carry a Google or Facebook click identifier. We keep these details with a new account to understand which resources lead to signups and product use. Referrer query strings and fragments are not collected.
• Your study reminder email preference. Reminders are on only if you leave them on, every email carries a one-click unsubscribe, and the choice can be changed any time in Settings.
• Study activity: question attempts, spaced-repetition review scheduling, bookmarks, private notes, streak history, XP events, daily quest progress, per-subject ability estimates, and practice session records.
• Subscription records if you subscribe: the plan, its period, and identifiers from the payment provider. Card details never reach SpecialityMCQs. Payments are processed by Stripe on the web, or Google Play in the Android app.
• A session token, kept server-side with an expiry, and stored in your browser's local storage on your device.
• Short-lived rate-limit counters that protect the service from abuse. These contain no content.

Aggregate statistics

A nightly job computes cohort-level aggregates, for example average accuracy across all candidates, used for the paid comparison feature. These aggregates cannot be traced back to an individual.

Deleting your account

Deleting your account, from Settings, Delete account, does the following immediately and permanently, in one operation:

• If you have an active Stripe subscription, it is cancelled first.
• These records are erased: question attempts, spaced-repetition state, bookmarks, notes, streaks, XP events, quest progress, ability estimates, subscription records, practice sessions, mock exam papers and their results, question difficulty ratings, campaign attribution, and the account itself.
• Your sign-in session is revoked.

One exception, stated plainly: if you reported a problem with a question, the report is kept but permanently unlinked from you. Reports are moderation records about a question, not about a person.

Processors

These are the only third parties that touch your data:

• Cloudflare: hosting and databases.
• Resend: sends the sign-in code emails and, if you opted in, study reminder emails.
• Stripe: payments on the web.
• Google: sign-in, and Google Play billing in the Android app.

No third-party advertising or analytics trackers, and no sale of data.

Cookies

SpecialityMCQs itself sets no tracking cookies. Your sign-in token lives in your browser's local storage. Campaign details are kept in session storage while you browse and carried between our website and app in links, so they can be saved once when you create an account. No new tracking cookie is used. Stripe and Google may set their own cookies during checkout or sign-in on their own pages.

Contact

Email us at support@specialitymcqs.co.uk, or reach us through Al Daim Digital at aldaim-digital.co.uk.