Privacy Policy
Effective 25 September 2026
The short version
- We collect only what the app needs: your sign-in email, your study progress, your subscription status and crash reports.
- We don't show ads, we don't sell your data, and we don't track you across other apps or websites.
- Payments go through Apple or Google. We never see your card details.
- You can delete your account and all your study data from inside the app at any time.
1. Who we are
SMLE Brain is an exam-preparation app for the Saudi Medical Licensing Exam, available on iOS and Android, together with this website, smlebrain.com. It is made by Ahmed Dilli, an independent developer based in Riyadh, Saudi Arabia (“SMLE Brain”, “we”, “us”). We are responsible for the personal data described in this policy.
If you have any question about your privacy, email ahmedaldilli@gmail.com.
2. What we collect
Your account
You sign in with Apple or Google. From them we receive a unique user ID and your email address. If you choose Apple’s “Hide My Email”, we receive a private relay address instead of your real one. We store your email in your account record. We never receive or store your Apple or Google password.
Your study data
To save your progress and sync it between your devices, we store the answers you choose, which questions you got right or wrong, your bookmarks, your notes, and your saved and in-progress quizzes. This data is linked to your account.
Your subscription
Subscriptions are sold and billed by the Apple App Store or Google Play. They handle your payment details; we never see them. To check whether your subscription is active, we use RevenueCat, which receives your purchase receipts and your in-app user ID. We can see which plan you have, when it started and when it renews or ends.
Crash reports
If the app crashes or hits an error, Firebase Crashlytics sends us a report so we can fix it. A report includes technical details such as your device model, operating system and app version, the time, and what the app was doing when it failed. Reports are linked to your in-app user ID so we can investigate problems you report to us. They do not include your study notes or answers.
Things that stay on your device
Some things are stored only on your phone or tablet: your appearance setting (light, dark or system), your recent searches, and cached copies of questions so the app loads quickly and works with a weak connection. They are removed when you delete the app.
This website
smlebrain.com uses no cookies, no analytics and no advertising trackers. The site is hosted on Firebase Hosting, which keeps standard server logs (such as your IP address and browser type) for security and to keep the site running. The site’s fonts are loaded from Google Fonts, so your browser connects to Google’s servers when you open a page.
When you contact us
If you email us or message us on Telegram, we receive your message and whatever contact details you use, and we use them only to reply to you.
3. What we don't collect or do
- No advertising and no advertising IDs.
- No selling or renting of personal data, to anyone.
- No tracking of you across other companies’ apps or websites.
- No location, contacts, photos, camera or microphone access.
4. How we use your information
- To run the app: sign you in, save your progress and sync it across your devices. This is needed to provide the service you asked for.
- To give you what you paid for: check your subscription and unlock the paid question banks.
- To keep the app working: find and fix crashes and bugs, and protect the service against abuse. We do this in our legitimate interest in providing a reliable app.
- To answer you: reply to your emails and messages.
- To meet legal duties: for example, when the law requires us to keep or disclose certain information.
5. Who we share it with
We share data only with the service providers that run parts of SMLE Brain for us. Each one may use it only to provide its service.
| Provider | What it does | Data involved |
|---|---|---|
| Google Firebase (Authentication, Cloud Firestore, Cloud Storage, Crashlytics, Hosting) | Sign-in, storing your account and study data, serving question images, crash reports, hosting this website | User ID, email, study data, crash reports, server logs |
| RevenueCat | Checking subscription status | User ID, purchase receipts |
| Apple and Google | Sign in with Apple, Google Sign-In, app stores, payments, Google Fonts | What you share with them under their own privacy policies |
We may also disclose information if the law requires it, or to protect the rights and safety of our users or of SMLE Brain.
These providers may process data on servers outside Saudi Arabia, including in the United States. They are large, established providers that protect data with encryption and contractual safeguards.
6. How long we keep it
- Account and study data: for as long as your account exists. When you delete your account, we delete it.
- Crash reports: kept by Firebase Crashlytics for up to 90 days.
- Purchase records: Apple, Google and RevenueCat keep transaction records as tax and accounting rules require, even after you delete your account.
- Emails and messages: for as long as needed to help you, then deleted.
7. Your rights and choices
You can ask to see, correct, copy or delete your personal data, and ask how it is used. You can:
- Delete your account in the app: open the side menu and tap Delete account. This removes your account and all your study data. Deleting your account does not cancel a subscription; cancel that in your App Store or Google Play settings.
- Clear parts of your data: the app lets you clear your bookmarks, notes and answers separately.
- Email us at ahmedaldilli@gmail.com for any other request. We reply within 30 days.
If you are in Saudi Arabia, your data is protected by the Personal Data Protection Law, and you can complain to the Saudi Data and Artificial Intelligence Authority (SDAIA). If you are elsewhere, you can contact your local data protection authority. We would appreciate the chance to fix your concern first.
8. Security
All data travels over encrypted connections. Your account data can be read only by your own signed-in account, and access to our systems is limited to the developer. No system is perfectly secure, but we work to protect your information and will tell you if a breach affects you, as the law requires.
9. Children
SMLE Brain is meant for medical students and doctors preparing for a professional exam. It is not directed at children, and we do not knowingly collect data from anyone under 13. If you believe a child has given us personal data, email us and we will delete it.
10. Changes to this policy
If we change this policy, we will post the new version on this page and update the date at the top. If the change is significant, we will also tell you in the app.
11. Contact
Ahmed Dilli, SMLE Brain, Riyadh, Saudi Arabia
Email: ahmedaldilli@gmail.com
Telegram: t.me/smlebrain