KYRANKYRAN

Privacy Policy

Last updated: October 2026

This policy explains what personal data KYRAN MEDTECH (“KYRAN”, “we”) collects when you use kyranmedtech.com, why we collect it, who we share it with, how long we keep it and the choices you have. It works together with our Terms of Service.

1. What we collect

  • Account details — your name, email address and password (stored only as a secure hash, never in readable form). Optionally your medical school and year. If you sign in with Google, we receive your name and email address from Google.
  • Study activity — the quiz sessions you start, the answers you choose, time spent per question, questions you flag or bookmark, and your progress statistics.
  • Subscription details — your plan and when it expires. Payments are made through Telebirr; when you send us your payment confirmation (screenshot) on Telegram, we see the details shown on it. We do not receive or store your Telebirr PIN or card details.
  • Security and anti-piracy data — to protect our question bank and enforce the two-device limit, we record:
    • your IP address and browser/device type when you open questions;
    • a device fingerprint: a one-way code calculated from your browser, screen size, language, time zone and how your device draws graphics. It identifies the device, not you personally;
    • sign-in attempts (including failed ones), and signs of unusual use such as very fast answering or answer-sharing patterns.
  • Contributor content — if you write or upload questions or exam files, we keep what you submit, your name as author, review notes and payout records.
  • Basic usage events — for example, whether you saw or clicked the upgrade banner. This is recorded by KYRAN itself; we do not use advertising or third-party analytics trackers.
  • Messages you send us — on Telegram or by email.

2. Why we use it

  • To create and run your account and deliver the question bank, quizzes and statistics.
  • To activate and manage subscriptions and pay contributors.
  • To keep the service secure: stop account sharing, scraping and leaking of questions, and detect suspicious sign-ins (see Terms section 4 and 5).
  • To send you service emails, such as password resets and subscription reminders.
  • To find and fix errors and to improve KYRAN.

We do not sell your personal data and we do not show you advertising.

3. Who we share it with

We use trusted service providers to run KYRAN. They process data only to provide their service to us:

  • Supabase — database and file storage (servers in Frankfurt, Germany).
  • Vercel — website hosting.
  • Resend — sending emails.
  • Sentry — error reports so we can fix bugs (EU data centre).
  • Cloudflare Turnstile — the “are you human” check on sign-in and sign-up.
  • Google — only if you choose “Continue with Google”.
  • Telegram — payment confirmations you send us, and internal alerts to the KYRAN team about account activity (for example new sign-ups or security warnings).
  • Anthropic (Claude AI) — exam files uploaded by contributors are processed with AI to turn them into draft questions.

Some of these providers are outside Ethiopia, so your data may be processed in other countries. Within KYRAN, staff only see the data their role needs (for example, reviewers see question authors, not payment details). We may also disclose data if the law requires it.

4. How long we keep it

  • Question-access logs (IP address, browser): 180 days.
  • Single failed sign-in records: 30 days. Other security and activity records: 2 years.
  • Rejected contributor questions: deleted 7 days after rejection.
  • Your account and study history: while your account exists.
  • Inactive accounts: we email you after 22 months without a sign-in and may delete the account after 24 months.

5. Deleting your account

You can delete your account at any time from your account settings. You have 30 days to change your mind and recover it by signing in again; after that it cannot be recovered. Deleting your account cancels any active subscription (see our Refund Policy). Questions you contributed that were already approved stay in the question bank, shown as written by “Deleted user”. We keep a minimal record of deleted accounts to prevent abuse; if you want everything about you erased, contact us and we will do so unless we have to keep something by law.

6. Your choices and rights

  • See and correct your account details in your profile, or ask us for a copy of your data.
  • Delete your account (section 5) or ask us to erase your data.
  • Ask questions or raise a concern about how we use your data.

7. Cookies

We only use cookies and similar storage that the site needs to work — mainly to keep you signed in and secure. Details are in our Cookies Policy.

8. Security

We use encrypted connections (HTTPS), store passwords only as hashes, limit staff access to what each person needs, log administrative actions and lock down our database. No system is perfectly secure, so please use a strong password and never share your account.

9. Changes

We will update this page when our practices change and show the new date at the top. Significant changes will be announced on the site.

10. Contact

Privacy questions or requests: Telegram @KyranMT. Address: Addis Ababa, Ethiopia.