Privacy Policy

This policy explains how Ali Kaser A. (“we”, “our” or “us”), operator of PharmaFledge, collects and uses your personal data, and your rights under UK data protection law (the UK GDPR and the Data Protection Act 2018). We are the data controller. You can reach us at support@pharmafledge.co.uk.

• Account information — your name and email address, collected when you create an account (including via Google sign-in).
• Usage and progress data — the questions you attempt, your answers, accuracy and topic progress, used to power practice and tracking.
• Payment information — when you buy a paid plan, payment is processed by Stripe. We receive confirmation of payment and limited details (such as the last four digits and your customer reference), but we do not store your full card number.
• Support correspondence — any messages you send us.
• Technical data — cookies and similar technologies needed to run the Service (see section 9).

We use your data to:

• Provide, maintain and personalise the Service (lawful basis: performance of our contract with you).
• Process payments and manage your access (performance of our contract).
• Track your progress and improve our content and features (legitimate interests in running and improving the Service).
• Communicate with you about your account, purchases and support requests (performance of our contract / legitimate interests).
• Comply with our legal obligations and protect the Service against fraud and misuse (legal obligation / legitimate interests).

We do not sell your personal data. We share it only with trusted service providers who process it on our behalf, and only as needed to run the Service:

• Supabase — authentication and database hosting (account and progress data).
• Stripe — payment processing.
• Google — when you choose to sign in with Google.
• Our hosting provider — to serve the application.

We may also disclose data where required by law, to protect our rights or safety, or in connection with a merger, acquisition or sale of assets.

Some of our service providers may process data outside the UK. Where they do, we rely on appropriate safeguards (such as UK adequacy regulations or standard contractual clauses) to ensure your data remains protected.

We keep your personal data for as long as your account is active and for as long as necessary to provide the Service, meet our legal and accounting obligations, and resolve disputes. You can ask us to delete your account, after which we will erase or anonymise your data unless we are required to retain it.

We use appropriate technical and organisational measures to protect your data, including encryption in transit, access controls, and PCI-compliant payment processing through Stripe. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

Under UK data protection law you have the right to:

• Access — request a copy of the personal data we hold about you.
• Rectification — ask us to correct inaccurate or incomplete data.
• Erasure — ask us to delete your data, subject to legal requirements.
• Restriction and objection — limit or object to certain processing.
• Portability — receive your data in a structured, machine-readable format.
• Withdraw consent — where processing is based on consent, withdraw it at any time.

To exercise any of these rights, email support@pharmafledge.co.uk. You also have the right to complain to the Information Commissioner’s Office (ICO) at ico.org.uk if you are unhappy with how we handle your data.

We use cookies and similar technologies to run the Service. For details, see our Cookie Policy.

The Service is intended for users aged 16 and over. We do not knowingly collect data from children under 16. If you believe a child has provided us with personal data, please contact us and we will delete it.

We may update this policy from time to time. We will revise the “last updated” date above and, where changes are significant, take reasonable steps to notify you.

For any privacy questions or to exercise your rights, email support@pharmafledge.co.uk.