Privacy Policy

Who We Are

Helium UG and Helium PG are medical question-bank and assessment platforms operated by 8856.in. Both platforms are available as mobile applications (Android and iOS(coming soon)) and as a web application (coming soon).

Information We Collect

Information you provide directly:

• Account details – first name, last name, email address, mobile number, and password when you register.
• Profile information – gender and any optional profile details you choose to add.
• Assessment activity – answers you submit, questions you bookmark, and ratings you give to questions.
• Communications – messages or queries you send to our support team.

Information collected automatically:

• Usage data – pages and features you access, assessments you start and complete, time spent on each question.
• Device information – device model, operating system version, app version, and unique device identifiers.
• Log data – IP address, browser type, access timestamps, and error logs.
• Performance data – assessment scores, number of questions answered, correct and incorrect answers.

How We Use Your Information

We use the information we collect to:

• Create and manage your account and verify your identity.
• Deliver assessments, track your progress, and generate performance reports.
• Personalise your experience — for example, recommending subjects based on your activity.
• Send account-related notifications (email or mobile verification, password resets, important updates).
• Provide customer support and respond to your queries.
• Monitor and improve platform stability, performance, and security.
• Analyse aggregate, anonymised usage trends to improve content and features.
• Comply with applicable laws and legal obligations.

We do not use your data for advertising or sell it to advertisers.

How We Share Your Information

We do not sell, rent, or trade your personal information. We may share it only in the following limited circumstances:

• Service providers – trusted third-party vendors who help us operate the platform (e.g., cloud hosting, email delivery, push notification services). They are contractually bound to protect your data and may not use it for their own purposes.
• Institution or administrator – if your account is provisioned through an educational institution or admin, that institution may have access to your performance data within their subscription.
• Legal requirements – if required by law, court order, or to protect the rights, property, or safety of our users or the public.
• Business transfers – in the event of a merger, acquisition, or asset sale, your data may be transferred. We will notify you before that happens.

Data Storage & Security

Your data is stored on secure servers. We use industry-standard security measures including:

• Encrypted transmission (HTTPS/TLS) for all data in transit.
• Hashed and salted storage for passwords — we never store passwords in plain text.
• Access controls that restrict employee access to personal data on a need-to-know basis.
• Regular security reviews and monitoring.

While we take reasonable steps to protect your information, no system is completely secure. We encourage you to use a strong, unique password and to keep it confidential.

Data Retention

We retain your personal data for as long as your account is active or as needed to provide services. If you request account deletion, we will remove your personal data within 30 days, except where we are required to retain it by law (e.g., billing records) or for legitimate security purposes.

Anonymised and aggregated data (which cannot identify you) may be retained indefinitely for analytics and platform improvement.

Your Rights & Choices

Depending on your location, you may have the following rights:

• Access – request a copy of the personal data we hold about you.
• Correction – ask us to correct inaccurate or incomplete information.
• Deletion – request that we delete your account and associated personal data.
• Portability – request your data in a structured, machine-readable format.
• Opt-out of communications – unsubscribe from non-essential emails at any time using the unsubscribe link or by contacting us.
• Restrict processing – ask us to limit how we use your data in certain circumstances.

To exercise any of these rights, contact us at the address in Section 11. We will respond within 30 days.

Children's Privacy

Helium UG and Helium PG are intended for medical students and healthcare professionals aged 18 and above. We do not knowingly collect personal information from anyone under 18. If you believe a minor has registered on our platform, please contact us immediately and we will delete the account.

Third-Party Links & Services

Our apps may contain links to external websites or resources. This Privacy Policy applies only to Helium UG and Helium PG. We are not responsible for the privacy practices of third-party sites and encourage you to review their policies before sharing any information.

We may use third-party analytics or infrastructure services. These providers are chosen carefully and are bound by data processing agreements.

Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you via:

• A notice within the app or on the website, and/or
• An email to the address associated with your account.

The "Last Updated" date at the top of this page reflects the most recent revision. Continued use of the platform after changes are posted constitutes your acceptance of the updated policy.