Rivoka Emblem Rivoka
Home / Privacy Policy

Privacy Policy

Effective Date: September 2026 • Platform Version 2.0

1. Overview & Commitment

At Rivoka (“we,” “us,” or “our”), we take the privacy and confidentiality of medical students seriously. This Privacy Policy describes how we collect, use, process, and protect your personal information when you use our educational website, platforms, and services.

We strictly practice data minimization: we collect only the personal information genuinely necessary to deliver medical educational courses, verify subscription entitlements, maintain platform security, and process payments.

2. Information We Collect

We collect only the following categories of personal information:

  • Account Information: Your full name, email address, assigned 5-digit Rivoka Student ID, authentication method (email/password or Google OAuth account identifier), and account creation timestamps.
  • Subscription & Purchase Records: Course and semester offerings you purchase, authoritative price snapshots, transaction currencies, order lifecycle status (e.g. pending, paid), payment timestamps, and payment provider session identifiers.
  • Technical & Security Logs: IP address, browser type, operating system, and system authentication events used strictly for fraud prevention, multi-device abuse monitoring, and DDoS mitigation.

No Payment Card Storage: Rivoka does NOT collect, store, or process credit card numbers, debit card numbers, expiration dates, or CVV security codes. When you make a purchase, all financial payment information is handled exclusively by our authorized payment processor, XPay.

3. How We Use Your Information

Your information is used exclusively for legitimate educational and platform operational purposes:

  • Educational Content Delivery: Granting course and semester access, streaming video lectures, and providing lecture handouts;
  • Subscription Verification: Validating active entitlements and enforcing course enrollment parameters;
  • Dynamic Security Watermarking: Displaying your unique 5-digit Rivoka ID and email as an anti-piracy overlay during video lecture playback;
  • Account Administration: Sending transactional notices, password resets, and critical platform security updates;
  • Platform Security: Detecting and mitigating malicious login attempts, unauthorized API calls, and account-sharing abuse.

We do not sell, rent, monetize, or trade your personal data to third parties. We do not use third-party behavioral advertising networks or tracking pixels.

4. Third-Party Service Providers

To provide a reliable, fast, and secure learning environment, Rivoka integrates with established infrastructure providers:

  • Supabase: Provides managed PostgreSQL database infrastructure, user authentication, edge execution, and encrypted storage. Data is hosted securely with strict Row Level Security (RLS) enforcement.
  • Cloudflare: Provides global Content Delivery Network (CDN) services, DDoS protection, edge caching, and DNS routing.
  • XPay: Processes digital payments, credit cards, and local Egyptian payment methods via PCI-DSS compliant hosted checkout. XPay processes your transaction data subject to their independent privacy standards.

5. Cookies & Local Storage

Rivoka utilizes browser LocalStorage and essential session cookies strictly necessary to:

  • Maintain your authenticated login session;
  • Preserve basic interface settings (such as active video playback volume and speed);
  • Enforce secure CSRF and API communication tokens.

We do not employ third-party tracking cookies or marketing analytics trackers.

6. Data Security & Protection

Rivoka and its service providers use reasonable technical and organizational measures designed to protect information, including encrypted connections in transit and access controls:

  • Network communications between your browser and our platform use encrypted connections in transit;
  • User passwords are not stored in plaintext and are secured using cryptographic hashing managed by Supabase Auth;
  • Database access is restricted by database access controls and Row Level Security (RLS) policies;
  • Payment transactions are conducted through secure, tokenized hosted checkout environments provided by our payment processor, XPay.

7. Data Retention

We retain your personal information for as long as your account remains active. If you request account closure, personal profile information will be deleted or anonymized, except where financial transaction records and purchase history must be retained to comply with legal, tax, or accounting requirements under Egyptian law.

8. Your Rights & Choices

As a Rivoka user, you have the right to:

  • Access and review your personal profile data and purchase history via your Profile dashboard;
  • Update your display name (subject to the platform 30-day security cooldown);
  • Update or reset your account password through authenticated self-service;
  • Sign out of all active devices globally;
  • Request permanent deletion of your account and associated personal records by contacting support.

9. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our platform features, operational practices, or applicable regulatory requirements. Any updates will be posted directly on this page with an updated effective date. We encourage you to review this policy periodically.

10. Contact Information

If you have questions, inquiries, or data privacy requests regarding this Privacy Policy, please reach out to us: