Privacy policy
Last updated 17 October 2026
Medcity International Academy (“Medcity”, “we”) runs this portal and is responsible for your personal data under India's Digital Personal Data Protection Act, 2023. This page explains what we collect, why, and your choices.
What we collect
- Account details: name, email, phone number, branch, test type, target band and exam date if you give them.
- Your tests: answers, essays, highlights and notes, photos of handwritten Writing pages, Speaking recordings, scores and feedback.
- Test conduct: events such as leaving the test screen, exiting full screen, copying and pasting, recorded to keep practice fair and shown to your tutor.
- Payments: order, invoice and GST details. Card, UPI and bank details are handled by Razorpay, not by us.
- Technical data: a sign-in cookie, and your IP address in server logs and for security limits.
Why we use it
- To run your account, deliver the tests, mark them and show your progress.
- To let your Medcity tutor review your work and help you (tutors and administrators can see your tests).
- To send result, invoice and study reminder emails (you can turn reminders off from the link in each email or your Account page).
- To issue tax invoices and meet legal obligations, and to keep the service secure.
Who processes it for us
- Google (Gemini and Text-to-Speech): your Writing answers and Speaking recordings are sent to Google's AI service to be marked, and test audio is made with Google voices.
- Razorpay: payments.
- Hostinger: the servers where the portal and its data are hosted.
- Our email provider: to deliver emails.
- Medcity LMS: if you sign in from the Medcity LMS, your results are shared back to it.
We do not sell your personal data or use it for advertising.
What other students can see
The weekly test leaderboard shows your first name, branch and score to other students. A progress share link you create shows your first name, bands, target band and exam date to anyone who has the link, until it expires or you turn it off.
How long we keep it
We keep your account and test history while your account is open, so you can follow your progress. Payment and invoice records are kept as long as tax law requires (currently eight years). You can ask us to delete your account; we then delete your tests and recordings, apart from records we must keep.
Your rights
You can ask for a copy of your data, ask us to correct or delete it, withdraw consent for optional uses, and nominate someone to act for you. Write to us (see Contact). If you are not satisfied with our answer, you can complain to the Data Protection Board of India.
Security
Passwords are stored as one-way hashes, connections are encrypted (HTTPS), and access to student data is limited to Medcity staff who need it.
Children
If you are under 18, please use the portal with the agreement of a parent or guardian.
Changes
We will update this page if our use of data changes; the date above shows the latest version.