Privacy Policy

1. What we collect

• Your email address — the only thing needed to create an account and send your one-time sign-in link.
• Study activity — the questions you attempt, your answers, test scores, timing and revision schedule. This is the product: it is what lets us show your progress and projection.
• Diagnostic details you give — your self-reported exam status, weakest subjects and study country from the diagnostic.
• Pass Pledge claim details — if you file a claim, the marks and scorecard reference you submit.
• Product analytics — a small record of in-app actions (for example starting a test or opening a feature) tied to your account or per-browser identifier, used only to understand which features are used and to improve the product. We do not use third-party advertising or tracking networks.
• Device & session information — when you sign in we store a coarse device label derived from your browser’s User-Agent (for example “Chrome on Android”) and when the session was last used, so you can see and manage your own signed-in devices and so we can enforce the one-person, limited-device fair use of a paid pass. This is a label, not a fingerprint, and is never used to identify you to anyone else.
• Technical data — a per-browser identifier and session cookie (to keep you signed in and to isolate your data), plus basic security and error logs.

We do not collect or store your card or payment details. Those are handled directly by our PCI-DSS-compliant payment partner.

2. Why we use it

• To provide the service and save your progress across devices.
• To work out your Cross-150 Pass Pledge eligibility and to review a claim.
• To keep the service secure and to answer your support requests.
• To send you your sign-in link and essential service messages.

Our basis for processing is your consent and the performance of our contract with you under the DPDP Act, 2023.

3. Who we share it with

Only the processors needed to run the service: our payment partner (to take payment) and our email provider (to send your sign-in link). We do not sell your data or use it for third-party advertising. We may disclose data where required by law.

4. Cookies

We use a sign-in session cookie and an anonymous per-browser id. Both are necessary for the service to work and to keep your data separate from other users. The per-browser id is also used for our own first-party product analytics — understanding which features are used so we can improve them. We do not use third-party advertising or tracking networks. You can clear these at any time in your browser, or ask us to delete the data tied to your id.

5. How long we keep it

We keep your data while your account is active. If you stop using OneFiftyMD, we delete or anonymise your personal data 24 months after your last activity, unless a longer period is required by law (for example, tax or payment records). You can ask us to delete your account and data sooner at any time.

6. Your rights

Under the DPDP Act you may ask us to:

• access the personal data we hold about you;
• correct or update inaccurate data;
• erase your data and close your account;
• withdraw consent (this may end your access to the service).

To exercise any of these, email [email protected].

7. Data fiduciary and grievance officer

OneFiftyMD is operated by ASHARAN AI Systems, a sole proprietorship, which is the Data Fiduciary for your personal data under the DPDP Act. As required by the Act, our Grievance Officer is reachable at [email protected]. We aim to respond within 15 days.

8. Children

OneFiftyMD is for medical graduates preparing for the FMGE and is intended only for users who are 18 years of age or older. It is not directed at children, we do not knowingly collect the personal data of anyone under 18, and we do not profile or serve targeted advertising to minors. If you believe a minor has given us data, contact our Grievance Officer and we will delete it.

9. Changes

If we change this policy we will update the date above. See also our Terms and Refund & Cancellation Policy.