← ForDoctors · Step 1 home · Русская версия

Privacy Policy — ForDoctors · Step 1

Effective date: October 17, 2026

This policy explains how ForDoctors · Step 1 (“the app”, https://for-doctors.ru/usmle-step1), a web app for USMLE Step 1 exam preparation, collects, uses, stores and deletes your information.

1. Who we are

The app is operated by Gorgud Zeynalov, a self-employed individual in the Russian Federation (taxpayer ID 771974721252). Contact: for.doctors@list.ru.

2. Information we collect

• Account data: email address, display name (optional) and a hashed password if you register with email.
• Sign-in with Google: your email address, name and profile picture from your Google account (scopes: email and profile). We never receive your Google password.
• Sign-in with Yandex or Telegram: email address and name (Yandex); Telegram user ID, name and username (Telegram).
• Study data: which questions you answered, the option you chose, time of answer, flagged questions, your flashcards and decks (texts and images you add).
• Payment data: amount, date, plan and order number, plus the email or phone you enter on the payment page of our payment provider (Prodamus). We never receive or store card numbers.
• Technical data: the app stores your session and settings in your browser’s local storage. We do not use advertising or analytics cookies.

3. How we use information

• to create your account and let you sign in on different devices;
• to save your progress, statistics and flashcards;
• to send service emails (email verification, password reset, subscription notices);
• to process subscription payments and issue receipts.

We do not sell personal data, do not use it for advertising and do not share it with third parties, except the payment provider (only for processing a payment you start) or when required by law.

4. Google user data

Data received from Google (email, name, profile picture) is used only to create and identify your account in the app. We do not request access to Gmail, Drive, Contacts or any other Google services. We do not transfer Google user data to third parties, do not use it for advertising and do not use it to train AI models. ForDoctors · Step 1’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

5. Storage and security

Data is stored on a server located in the Russian Federation. All connections use HTTPS; passwords are stored only as hashes; access to the database is limited to the operator.

6. Retention and deletion

We keep your data while your account exists. You can delete your account and all related data at any time in the app (“Profile → Delete account”), or by emailing for.doctors@list.ru; we will do it within 10 business days. Payment records may be kept as long as tax law requires. You can also revoke the app’s access at myaccount.google.com/permissions.

7. Your rights

You may request access to, correction of, or deletion of your data, and withdraw your consent, by writing to us at the email above.

8. Children

The app is intended for medical students and physicians and is not directed to children under 16.

9. Changes

If this policy changes, the new version will be published on this page with a new effective date.