Privacy Policy

1. Introduction

Welcome to Flint Medical ("we", "our", or "us"). We respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, and safeguard your information when you visit our application and use our medical examination preparation services.

2. Data We Collect

We may collect and process the following data about you:

• Identity Data: First name, last name, username or similar identifier.
• Contact Data: Email address, phone number, billing address, and academic institution.
• Performance Data: Quiz scores, interaction times, selected answers, and clinical heatmaps.
• Technical Data: IP address, browser type, device information, and diagnostic cookies.

3. Payment Security & PayFast Data Handling

All payment transactions are processed securely through our authorized payment gateway partner, PayFast (APPs PayFast Pvt Ltd).

• We use 256-bit SSL (Secure Sockets Layer) encryption to transmit all transaction data.
• Flint does NOT store, process, or retain sensitive card numbers, CVVs, or bank PINs on our servers.
• All payment credentials are entered directly into PayFast's PCI-DSS compliant payment checkout interface.

4. How We Use Your Data

We use your data to:

• Provide, maintain, and improve our medical examination preparation platform.
• Generate your personal "Weakness Heatmap" and clinical performance analytics.
• Process your registration, subscription billing, and verify discount vouchers.
• Comply with statutory regulatory and tax obligations.

5. Google OAuth Data Access

When you sign in to Flint using your Google account, we request the following Google OAuth scopes to sync your study progress across devices:

• Google Profile & Email — to create and identify your Flint account.
• Google Drive file access (drive.file) — to save your study data, weak-area heatmaps, and mock exam results in a private Flint folder in your Google Drive. This allows seamless syncing between your Windows desktop and Android app.
• Google Drive appdata access (drive.appdata) — to store internal app configuration that persists across device reinstalls.

Flint never reads, modifies, or deletes any files in your Google Drive that do not belong to Flint. Your data remains in your own Google Drive account under your control. You may revoke Google's access at any time through your Google Account security settings.

6. Data Protection Rights

Under applicable data protection laws, you have the right to request access to, correction of, or deletion of your personal data held by Flint. You may contact our Data Protection Officer at any time.

7. Local Office & Contact Us