Yiexam ("we", "our", or "the App") is an acupuncture licensing exam preparation application. This Privacy Policy explains how we collect, use, and protect your information when you use our App.
1. Information We Collect
1.1 Account Information
When you create an account, we collect:
- Email address - for account identification and login
- Display name - shown in your profile and community features
- Password - securely hashed (never stored in plaintext)
If you sign in with Apple, we receive:
- Apple User ID - a unique identifier for your Apple account
- Name and email - as provided by Apple (you may choose to hide your email)
1.2 Profile Information
You may optionally provide:
- Bio/description
- Preferred language (English or Chinese)
- Target exam type and date
- Daily study goal
1.3 Study & Learning Data
To provide personalized study experiences, we collect:
- Question attempt results (correct/incorrect, time spent)
- Exam session scores and performance breakdowns
- Spaced repetition review schedules
- Study time and streak data
- Personal study notes and bookmarks
- Study plans and progress
1.4 Community Content
When you use community features, we store:
- Forum posts and comments you create
- Votes on posts and comments
- Study group membership and participation
- Images you upload to posts (up to 9 per post)
1.5 Purchase Information
For in-app purchases, we receive from Apple:
- Transaction ID
- Product ID and subscription tier
- Purchase and expiration dates
We do not collect or store your payment method, credit card details, or billing address. All payments are processed securely by Apple.
1.6 Analytics Events
We track a limited set of milestone events to improve the App:
- Account registration
- First question attempted
- First mock exam completed
- Study plan created
- Purchase completed
These events are stored with your user ID and a timestamp.
2. Information We Do NOT Collect
- Location data
- Device identifiers (IDFA, IDFV)
- Advertising identifiers
- Health or biometric data
- Contacts or address book
- Browsing history
- Cross-app tracking data
- Microphone or camera data
3. How We Use Your Information
We use your information to:
- Provide the service - authenticate your account, display your study progress, and deliver personalized content
- Personalize learning - use spaced repetition algorithms to optimize your review schedule based on your performance
- Enable community features - display your posts, comments, and study group participation
- Process purchases - verify and manage your subscription status
- Improve the App - analyze aggregate usage patterns to enhance features
4. Data Sharing
We do NOT:
- Sell your personal data to third parties
- Share your data with advertisers
- Use third-party analytics services (no Firebase, Amplitude, or similar SDKs)
- Track you across other apps or websites
We share data only with:
- Apple - for Sign-In with Apple verification and App Store purchase verification
- Service providers - our hosting infrastructure provider, solely for operating the service
5. Data Storage & Security
- All passwords are hashed using bcrypt (industry-standard encryption)
- Authentication tokens are securely stored in your device's Keychain
- Server-side tokens are hashed with SHA-256
- All network communications use HTTPS/TLS encryption in production
- API endpoints are protected with JWT authentication and rate limiting
Your data is stored on secure servers. We implement industry-standard security measures to protect your information from unauthorized access, alteration, or destruction.
6. Push Notifications
The App uses local notifications only (scheduled on your device) for:
- Daily study reminders
- Review session reminders
- Streak reminders
No device tokens are sent to our servers. You can manage notification preferences in the App's settings, or disable them entirely through your device's Settings.
7. Data Retention
- Account data: Retained as long as your account is active
- Study data: Retained as long as your account is active to maintain your learning progress
- Authentication tokens: Automatically expire and are cleaned up after 30 days
- Community content: Retained as long as the content exists on the platform
8. Your Rights
You have the right to:
- Access your personal data stored in the App
- Update your profile information at any time through the App
- Delete your account and associated data by contacting us
- Export your study data by contacting us
9. Children's Privacy
The App is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal data, please contact us so we can remove it.
10. Third-Party Services
The App uses the following third-party libraries, none of which collect user data:
- Kingfisher - image loading and caching
- KeychainAccess - secure credential storage
- MarkdownUI - content rendering
11. International Data Transfers
Your data may be transferred to and processed on servers located outside your country of residence. We ensure appropriate safeguards are in place to protect your data in compliance with applicable laws.
12. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes through the App or by updating the "Last Updated" date above. Your continued use of the App after changes constitutes acceptance of the updated policy.
13. Contact Us
If you have questions about this Privacy Policy or your data, please contact us at:
Email: chenwx2012@yahoo.com
Email: chenwx2012@yahoo.com