MedicoStar is an independent educational platform for medical students. In this policy, “MedicoStar”, “we”, “us”, and “our” refer to the operator of the MedicoStar app and the website at medicostar.pxysio.top. We are the controller of the personal data described below.

Privacy contact: io.pxys@gmail.com

• Account information: your name, email address, phone number, password (stored only as a secure hash), role, and account dates.

• Enrollment information: the answers you submit in an enrollment request, the course or question bank you request, and any documents or images you upload to support the request.

• Learning information: courses and lessons you open, watch progress and completion, quiz and question-bank answers, study agenda items, certificates, downloads, and annotations.

• Communications: messages you send and receive in the app, lesson comments, reports you submit, and support requests you send us.

• Device and technical information: a persistent app-install identifier, device type, platform, app version, IP address, request timestamps, and basic server logs used for security and troubleshooting.

We do not collect payment card numbers in the app. We do not use third-party advertising networks or track you across other companies’ apps or websites.

We use personal data to:

• create and secure your account and keep you signed in;

• provide courses, lessons, videos, quizzes, question banks, and certificates;

• review enrollment requests and grant access to restricted content;

• show your progress, continue-watching list, agenda, and other learning records;

• deliver messages, comments, reports, and support responses;

• investigate abuse, enforce our rules, protect users, and maintain the security of the service;

• diagnose crashes, fix bugs, and improve the app; and

• comply with legal obligations and respond to lawful requests.

Where data protection law requires a legal basis, we rely on: performance of our contract with you (providing your account and learning services); our legitimate interests (security, abuse prevention, service improvement, and responding to support requests); your consent where we ask for it (for example, optional uploads); and compliance with legal obligations. You can withdraw consent at any time without affecting processing that already happened.

We share personal data only as needed to run MedicoStar:

• Service providers: hosting, storage, build and update delivery (including Expo Application Services), and technical support providers acting on our instructions.

• Instructors and administrators: they can see enrollment requests and the learning information needed to run their courses. They do not receive your password.

• Other users: they can see messages and comments you choose to send, and your display name. They cannot see your email or phone number unless you share it.

• Legal and safety: we may disclose data if required by law or if necessary to protect the rights, safety, or security of MedicoStar, our users, or the public.

We do not sell personal data. We do not share it for cross-context behavioral advertising.

We keep account and learning data while your account is active. If you delete your account, we delete or anonymize the personal data described in section 7. Server logs are kept for a limited period for security and troubleshooting, then deleted or overwritten. Backup copies are retained only for a limited rotation period and are not used for normal operations. We may retain anonymized records that no longer identify you.

You can delete your account in the app: Profile > Delete Account. You will be asked for your password and must type DELETE to confirm. This removes your profile, messages, enrollment requests and uploaded documents, course and question-bank access, learning records, certificates, devices, and app-install records. We keep an anonymized account record only where needed to preserve moderation, security, or legal records; it no longer contains your name, email, phone number, or credentials.

If you cannot sign in, email io.pxys@gmail.com from the address on the account and ask us to delete it. We may ask for information to verify that the account belongs to you.

We use HTTPS for data in transit, hash passwords, limit administrative access, and keep software updated. No method of transmission or storage is completely secure, so we cannot promise absolute security. If you believe your account is compromised, contact us immediately.

Our service providers may process data in countries other than yours. Where required, we use appropriate safeguards for those transfers, such as standard contractual clauses.

Depending on where you live, you may have the right to access, correct, delete, or export your personal data, to restrict or object to certain processing, and to withdraw consent. You can exercise these rights by emailing io.pxys@gmail.com. We may need to verify your identity first. We aim to respond within 30 days, or within the period required by local law.

You may also complain to your local data protection authority. We would appreciate the chance to address your concern first.

MedicoStar is intended for higher-education and medical-education users and is not directed to children under 16. We do not knowingly collect personal data from children under 16. If you believe a child has created an account, contact us and we will delete it.

The web app uses local storage and the mobile app uses secure device storage for sign-in tokens, theme choice, downloads, and the app-install identifier. These are needed for the service to work. We do not use advertising cookies or third-party cross-site trackers.

We may update this policy when the service or the law changes. We will post the new version here with a new effective date. If a change materially affects your rights, we will provide a prominent notice in the app or by email.

Questions, requests, or complaints about privacy can be sent to:

For help using the app, see the support page.