← Home / Privacy Policy

At Aspire Health International ("we," "our," or "us"), we are committed to upholding the highest standards of data protection, student confidentiality, and digital security. This Privacy Policy outlines our transparent protocols for gathering, storing, securing, and processing candidate information across our web portal, Android application, and assessment engines.

1. Information We Collect

We collect only the essential personal and technical data required to deliver educational services, verify board readiness, and maintain account integrity:

• Account Credentials: First name, last name, verified email address, and argon2id/bcrypt cryptographically hashed passwords.
• Academic & Licensing Profile: Target board examination (e.g., NCLEX-RN®, NCLEX-PN®, USMLE®, DHA), educational background, and intended testing date.
• Performance Analytics: Practice quiz responses, CAT exam percentiles, difficulty ability logs, question response times, and bookmarked questions.
• Device Security Telemetry: Anonymized hardware UUID tokens, browser user-agent strings, and IP addresses solely used for enforcing the single-device hardware lock.

2. Payment Information & Safepay Zero-Storage Guarantee

We strictly enforce a Zero-Storage Payment Policy. When you subscribe using credit cards, debit cards, Raast, Easypaisa, or JazzCash, your financial data is transmitted directly to Safepay Pakistan over a 256-bit SSL encrypted connection. We never see, store, or process your credit card numbers, CVV codes, or banking PINs on our servers. Safepay returns an encrypted transaction tracker token that our backend verifies cryptographically via HMAC-SHA256 signatures before activating subscriptions.

3. Hardware-Tied Single Device Protocol

To preserve the security of proprietary question banks and maintain student data integrity, each candidate account is bound to one active hardware session at a time. This device binding uses pseudonymized hardware identifiers to verify identity. If an account is accessed simultaneously from a secondary unauthorized terminal, the prior session is evicted with an automated security alert.

4. Video Streaming DRM & Anti-Piracy Watermarking

All clinical video lectures are streamed via Widevine Modular DRM and encrypted HLS protocols. To deter intellectual property theft and unauthorized screen recording, dynamic candidate identifiers and IP watermarks are rendered onto authenticated video streams.

5. Third-Party Disclosures

We do not sell, rent, monetize, or trade candidate personal information to advertisers or marketing aggregators under any circumstances. Information is shared strictly with operational infrastructure providers (e.g., our cloud hosting environment and Safepay checkout gateway) necessary to render educational services.

6. Candidate Rights & Data Rectification

Candidates maintain full rights to access their stored performance analytics, request rectification of profile records, or request complete account deactivation and data purging upon conclusion of their licensing examination cycle.