Privacy Policy

At Dumqa, we are committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our preparation and learning application.

Updated: 30 September 2026. This policy describes our data practices; it does not replace any permission or consent required for optional processing.

1. Information We Collect

We collect information that you provide directly to us, including:

Account information: email address, username, and profile information you choose to provide.

Learning data: your learning goals, assessment results, lesson progress, and preferences.

Device information: device tokens for push notifications, device type, and operating system information.

Usage data: information about how you use the Service, including features accessed and interactions with the application.

2. How We Use Your Information

We use the information we collect to:

Provide, maintain, and improve our learning services.

Generate personalized prep plans, lessons, and assessments tailored to your goals.

Send you notifications about your learning progress, achievements, and other relevant updates.

Personalize your experience and provide recommendations based on your learning patterns.

Communicate with you about the Service, including customer support and important updates.

3. Data Storage and Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction.

Your learning data and personal information are stored securely on our servers. We retain your data for as long as necessary to provide you with our services and as required by law.

4. Data Sharing and Disclosure

We use service providers for hosting, sign-in, AI, notifications, analytics, subscriptions and advertising measurement, as described below. We may also disclose information:

With your explicit consent.

To comply with legal obligations or respond to lawful requests from authorities.

To protect our rights, privacy, safety, or property, or that of our users.

In connection with a business transfer, such as a merger or acquisition.

5. Artificial Intelligence Services

Our Service uses artificial intelligence to generate personalized learning content. When you provide a learning goal or topic, this information is sent to our AI provider to create lessons, tests, and learning plans tailored to your needs.

OpenAI or Microsoft Azure OpenAI receives relevant goals, clarification answers, interview messages and assessment context to generate content and feedback. We do not add your account name or email to prompts, but information you include in your own text may be processed.

6. Your Rights

You have the right to: access and receive a copy of your personal data; correct inaccurate or incomplete information; request deletion of your personal data, subject to legal obligations; object to or restrict certain processing of your data; withdraw consent at any time where processing is based on consent. To request access, correction or erasure, contact [email protected]. You can close your account in Profile → Settings → Delete Account. Closing an account does not immediately erase all records held by us or our providers, or cancel an App Store/Google Play subscription; contact us for a data-erasure request and manage subscriptions in the store.

7. Children's Privacy

Our Service is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13.

8. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page.

9. Contact Us

Email: [email protected]

10. Subscriptions, analytics and advertising measurement

RevenueCat processes app user IDs, purchase receipts/transaction identifiers, products, prices, currencies and subscription events to validate access and analyse subscriptions. We associate its customer record with the AppsFlyer installation ID and send subscription events and revenue to AppsFlyer. We do not receive your full payment-card details from mobile store purchases.

Google Analytics for Firebase receives app interactions, account/device identifiers, subscription status and learning-event parameters, including goals, levels, content identifiers and test results. AppsFlyer receives installation and usage events, IP/device information and available advertising identifiers. AppsFlyer can send attributed app opens, trials, purchases and renewals to Meta and TikTok to measure and optimise Dumqa advertising. Our AppsFlyer event calls do not include email, goal text or interview answers.

On iOS, the system tracking permission controls access to the advertising identifier; you can change it in device settings. Android advertising controls are also in device settings. Denying tracking does not disable all service analytics or subscription processing. You can separately revoke notifications, location and microphone permissions. Location is used through the device geocoding service to determine your country; Dumqa receives the country code. Optional dictation may process audio through the device's speech provider; Dumqa receives the text you submit, not an uploaded audio recording.

Our providers may process data outside your country. For information about recipients, applicable transfer safeguards, retention or exercising privacy rights, contact [email protected]. Advertising partners process data under their own privacy policies as well.