Privacy Policy
In short: I collect only what I need to run tutoring sessions: your Google sign-in details, your bookings, and anything you tell me through the contact form. I don't sell your data, I don't run ads, and I don't store card numbers.
1. Who I am
TutorClinical is run by Dr. Mohammed N. Qibi, MD, an independent tutor based in Iraq ("I", "me", "TutorClinical"). I decide how your information is used. You can contact me at hello@tutorclinical.com.
2. What I collect
When you sign in with Google: your name, email address, profile photo, and a unique account ID. I never see your Google password.
Your account and tutoring records:
- Your exam date and time zone (you can change these in your dashboard)
- The hours you have purchased, and the sessions you book, cancel, attend, or miss
- Your answers to the daily practice question (which choice you picked, and whether it was correct, by topic)
- Private notes I keep to plan your sessions, such as weak areas or practice scores you tell me about. You can ask for a copy at any time.
When you use the contact form: your name, email, the package or exam you are interested in, your exam date, and your message.
Automatically:
- Bot check. The contact form uses Cloudflare Turnstile to tell people from bots. It looks at information about your browser and device to do this.
- On your device. Your browser stores your sign-in session and your currency choice (USD or CAD) so the site remembers them. I don't use these for tracking.
- Fonts and hosting. Your browser loads fonts from Google Fonts, and the site is hosted by Google Firebase. Both receive your IP address and basic browser details, as with any website.
Payments: I send invoices through PayPal. I don't collect or store your card or bank details. PayPal handles your payment under its own privacy policy, and I can see your name, email, and the amount paid.
I don't currently use analytics or advertising trackers. If that changes, I'll update this page first.
3. How I use it
- To create your account, show your hours and bookings, and run your sessions
- To reply to your requests and send call times, invoices, and session details
- To email myself a notice when you send a request, sign up, book, or cancel
- To keep the site secure and prevent spam and abuse
- To keep records, and to meet legal obligations
4. Who handles your data
I don't sell or rent your information. These service providers process it on my behalf:
- Google (Firebase): sign-in, the database, and hosting; also Google Fonts
- Cloudflare: the bot check, and the small server that sends me notification emails
- Brevo: delivers those notification emails to me (they contain your name, email, and request details)
- PayPal: invoices and payments
- My email provider and the video-call software I use for sessions
I may also disclose information if the law requires it, or to protect my rights or the safety of others.
5. Where it is stored
Your account data is stored on Google's servers, in the region chosen when the database was set up, which may be outside your country. I access it from Iraq. By using the site you understand your information may be processed in these places.
6. How long I keep it
I keep your information while your account exists and while I need it for tutoring and record-keeping. I delete it when you ask, as described below. I may keep invoices and payment records for as long as needed for accounting and legal reasons.
7. Your choices and rights
You can update your exam date and time zone in your dashboard. You can also email me to:
- see a copy of the information I hold about you
- correct anything that is wrong
- delete your account, your answers, and my notes about you
I'll reply within 30 days. Depending on where you live (for example, in the EU or UK, Canada, or California), you may have additional rights under local privacy law, and I'll respect those.
8. Security
The site runs over HTTPS, access to your data is limited by database security rules, and only my own admin account can see the student list and my notes. No online service is perfectly secure, so please use a strong password and two-step verification on your Google account.
9. Children
TutorClinical is for adults preparing for medical licensing exams. It isn't intended for anyone under 18, and I don't knowingly collect information from children.
10. Changes
If I change this policy, I'll post the new version here with a new date. If the change is significant, I'll also say so on the site.
11. Contact
Questions or requests: hello@tutorclinical.com.