Privacy Policy
Last updated 12 August 2026
Who controls your data
Pharma-Edu-Aid is operated by Holistic Digital Solutions Limited, which acts as the data controller for the personal data described in this notice and decides how and why it is processed.
Information we collect
Account data (email address, username, display name), study preferences from onboarding (region, academic level, exam focus, language), study activity (quiz results, flashcard progress, streaks), support messages, and limited technical data such as device type, approximate country and IP address used for security and fraud prevention.
How we use it and our legal basis
We process account and study data to provide the service and your subscription (performance of a contract), technical and security data to keep accounts safe and prevent fraud (legitimate interests), support messages to reply to you (legitimate interests), aggregated analytics to improve the product (legitimate interests or consent where required), and marketing emails only with your consent. Some processing is required to meet legal and tax obligations.
AI tutor content
Questions asked in the Rx AI Assistant are sent to our AI provider only to generate an educational response. Answers are for study purposes and must never be used for clinical diagnosis or patient care decisions.
Payments and subscriptions
Payments are handled by Paddle.com, our Merchant of Record and reseller. Paddle collects and processes your billing details, address and tax information as an independent controller for payment processing, invoicing, tax compliance and fraud checks. We never see or store your card details; we store only your subscription status, plan and renewal date.
Who we share data with
Service providers acting on our behalf (hosting and database, email delivery, analytics, AI model providers), Paddle as Merchant of Record for sales, subscription management, payments, invoicing and tax, professional advisers such as legal and accounting, and authorities where required by law. We never sell your personal data.
Contact form data
When you send a message from pharmaeduaid.com/contact we store your name, email address, chosen topic and message so we can reply, and we email a copy to our support inbox. Submissions are checked for automated spam and duplicates are discarded.
Analytics and cookies
We use essential cookies to keep you signed in and privacy-conscious analytics cookies to count page views and key interactions. Analytics and marketing cookies are set only where you have accepted them in the cookie banner, and you can change your choice at any time.
Retention
Account and study data are kept while your account is active and deleted or anonymised when you delete your account. Support enquiries are kept for up to 24 months. Records required for tax and accounting are retained for the period the law requires.
Security
We apply appropriate technical and organisational measures, including encryption in transit, row-level database access controls, hashed credentials, optional two-factor authentication and restricted staff access.
Your rights
Depending on where you live you may request access, correction, erasure, restriction, portability, object to processing, or withdraw consent at any time, and you may complain to your data protection authority. You can reset preferences from Home, clear local study data from Profile, and permanently delete your account using Wipe My Data. We respond to requests within one month.
International transfers
Our providers may process data outside your country, including in the United States and the European Economic Area. Where required, transfers are covered by adequacy decisions or standard contractual clauses.
Contact
Questions about this notice can be sent to privacy@pharmaeduaid.com, or via the contact form at pharmaeduaid.com/contact.