Privacy Policy

What We Collect

MRCOG AI is an educational tool for exam preparation. We do not collect any patient data, clinical records, or health information. The data we collect is limited to what is needed to provide and improve the service:

• Account information: name, email address, and authentication credentials (held by our authentication provider)
• Study data: question attempts, answers, scores, study session history, and spaced-repetition card states
• Preferences: exam target (Part 1/2/3), target exam date, daily study goal
• Billing information: subscription plan and payment status (card details are handled entirely by our payment processor and never touch our servers)
• Usage analytics: page views, feature usage, and performance metrics
• Email engagement: when you click a link in an email we send you, we record which link and when. We do not use tracking pixels, so we cannot tell whether an email was opened or how long it was read. You can turn link measurement off in Settings, which sends you ordinary links that record nothing
• Error data: crash reports and error logs (collected by our error-monitoring provider)
• AI tutor interactions: questions you ask our AI tutor or the "Ask Guidelines" feature, and the explanations generated in response
• Lead-magnet data: if you download our free exam-dates guide before creating an account, we collect your email address, IP address, and browser information
• Device information: when you are signed in we record a one-way fingerprint of your browser (derived from your browser and language settings) and the country you are connecting from. We do not store your IP address for this, and the fingerprint cannot be reversed to identify your browser
• Registered devices: we limit each account to 2 devices signed in at a time. For each device you use we store a name (which you can edit in Settings, and which defaults to a guess like "iPhone" from your browser), the country you last connected from, and when it was first and last seen. We never store the device identifier itself, only a salted, one-way hash of it

How We Use Your Data

• To provide adaptive, personalised study recommendations based on your performance
• To schedule spaced-repetition reviews at optimal intervals
• To improve the review scheduler and the question bank for everyone, by analysing study results in aggregate across accounts. This is a legitimate interest, it never involves reading an individual's answers to judge them, and nothing about you is published or shared
• To generate exam readiness scores and topic mastery analytics
• To process your subscription and manage billing
• To send service emails about your account, trial and billing (for example, that your trial is ending)
• To send study emails you can switch off: the question of the day, study reminders (a streak about to lapse, or a short session after a few days away) and occasional product updates. Each has its own switch in Settings and an unsubscribe link in every email. We also see which links in these emails are useful
• To improve the product through aggregated, anonymised usage analytics
• To diagnose and fix errors and bugs
• To spot when one account is being used by several people, which our terms do not allow. We count how many distinct devices an account uses; we do not track where you go or build a profile of you

Legal Basis for Processing

We process your personal data on the following bases:

• Contract: account, study, and billing data is processed because it's necessary to provide the service you've signed up for
• Legitimate interest: error data and aggregated usage analytics are processed to keep the service reliable and to improve it, lead-magnet data is processed to follow up on your download request, and email link clicks are processed to understand which emails are worth sending. You can object to that last one at any time by turning off link measurement in Settings
• Study and product emails: we send these to people who have signed up, about our own service, under the “soft opt-in” in the Privacy and Electronic Communications Regulations. We tell you at sign-up, and you can stop any of them at any time, free of charge, from Settings or the unsubscribe link in each email. If you had already turned off product updates before study reminders existed, we treat you as having turned those off too
• Consent: analytics cookies (set by our analytics provider) are only set if you accept them via our cookie banner; you can withdraw consent at any time

Data Storage

Your data is stored on secure servers hosted by Fly.io (backend), Neon (database), Upstash (Redis cache), and Vercel (frontend). Data is encrypted in transit using industry-standard TLS, and encrypted at rest by those providers. Our database provider maintains continuous backups with point-in-time recovery over a rolling 6-hour window.

Service Providers

We use a small number of specialist providers to run MRCOG AI. Some are named above; for the full current list, ask us and we will tell you. They act as our processors under contract, may only use your data to provide their service to us, and never for their own purposes. The categories are:

• Authentication — account sign-in, password storage and session management. We never store your password ourselves.
• Payments — card processing and billing. Card details never reach our servers.
• Hosting and infrastructure — running the application and storing its database.
• Email delivery — sending the service, study and product emails described above.
• Product analytics and error monitoring— understanding how the product is used and diagnosing faults.
• AI model providers — powering the AI tutor, explanations and guideline search. Questions you type into the AI, and the content you ask it about, are sent to these providers to generate a response. They do not use your data to train their models.

International Data Transfers

Some of the providers described above process data outside the UK/EEA. Where this happens, we rely on appropriate safeguards, including Standard Contractual Clauses and each provider's own data processing agreement, to ensure your data receives an equivalent level of protection.

Data Retention

We retain your account and study data for as long as your account is active. Deleting your account erases your personal data immediately, along with everything linked to it, except where we're required to keep it longer: billing records are retained for 6 years to meet UK tax obligations. Copies held in database backups age out within 6 hours, our provider's point-in-time recovery window.

Some data is also removed on a schedule regardless of whether you delete your account: questions you ask the AI are kept for 90 days, email link clicks for 12 months, device information, registered devices, and trusted-device keys for 6 months, administrative access logs and email-delivery records for 24 months, the record of how you rated each review for 24 months, where you stopped reading a guideline you have not bookmarked for 12 months after you last opened it, and lead-magnet data (email and IP address collected before account creation) for 30 days after you unsubscribe. Guideline bookmarks and notes are kept until you delete them or your account.

Cookies

We use essential cookies for authentication and session management (set by our authentication provider). We also use analytics cookies to understand product usage. We do not use advertising or tracking cookies from third-party ad networks.

Children's Privacy

MRCOG AI is intended for medical professionals and trainees preparing for a postgraduate exam. It is not directed at, and we do not knowingly collect personal data from, anyone under 18.

Data Breaches

If we become aware of a data breach affecting your personal data, we will notify you and the relevant supervisory authority without undue delay, in line with our obligations under UK GDPR.

Your Rights

In accordance with GDPR and applicable data protection laws, you have the following rights:

• Access: request a copy of all personal data we hold about you
• Rectification: request correction of inaccurate data
• Deletion: request deletion of your account and all associated data
• Portability: request an export of your data in a machine-readable format
• Restriction: request that we limit how we process your data
• Objection: object to processing of your data for specific purposes

You can exercise Access, Portability and Deletion yourself, immediately, from Settings → Your data. For anything else, contact us at hello@mrcog-ai.com. We will respond within 30 days.

Contact

If you have any questions about this privacy policy or how we handle your data, please contact us at hello@mrcog-ai.com.