Privacy notice

Exameds collects as little as it can to help you prepare for your exam. This notice explains what we hold, why, and your rights.

Who is responsible

JARY LTD, Suite RA01, 195-197 Wood Street, London, E17 3NU, is the controller of the information described here. Contact: hello@exameds.com.

What we hold

Your email address, the name and profile icon you choose, and a password (stored as a one-way hash, so we cannot read it).
The exams you choose, your exam dates, your study plan and whether you want the study email (every two weeks).
Your answers, marks, how long a question took and which topics are finished, so we can show progress and mistakes to retry.
For written answers, OSCE stations and vivas: what you wrote or said (as text) and the Virtual Examiner's marking and feedback, so you can review them later.
How many of your AI credits you have used (counts only).
Questions you report as wrong, with any note you add.
Records of payments (date, exam plan, amount). Card details are handled by Stripe and never seen or stored by us.

Conversations with the Study Tutor are not kept after the session ends; only the number of messages is counted, to apply limits. The text of an OSCE station or viva is kept with that attempt, as above, until you reset that exam's progress or delete your account.

If you speak instead of typing, your web browser turns your voice into text, and it may use an online speech-to-text service to do so (for example one run by Google or Apple). The Simulated Patient's and Virtual Examiner's replies are read aloud using OpenAI, which receives only the text of those replies. Exameds does not record or keep any audio.

Why we use it

To provide the service you signed up for (our contract with you).
To take payment and keep the records the law requires.
To keep accounts safe and prevent abuse.

We do not sell information, do not show adverts, and do not use analytics or advertising cookies. We count page views and measure how fast pages load with Vercel Web Analytics and Speed Insights, which use no cookies, do not identify you, and record page addresses without any extra details from the link. We only use cookies needed for the service: to keep you logged in and to remember which exam you were last looking at.

Who else handles it

Supabase: our database and login system, hosted in the UK (London).
Vercel: hosts the website. Our servers run in London; pages are delivered through Vercel's worldwide network.
Anthropic: provides the AI behind the Study Tutor, examiner marking, Simulated Patients and the Virtual Examiner. It receives the question and your answer or message text, not your name or email. Under its commercial terms it does not train its models on this, and deletes it within 30 days (longer only if content is flagged for misuse or the law requires it).
OpenAI: turns the Simulated Patient's and Virtual Examiner's replies into speech. It receives only the reply text, does not train on it, and keeps it for up to 30 days to monitor misuse.
Stripe: takes payments and issues invoices. It receives your email, the name you give at checkout and what you bought.
Resend: sends our emails (sign-up, password reset, pass reminders and the study email every two weeks). It receives your email address and the email's content, and sends from servers in Ireland (EU). We do not track whether you open emails or click their links.
Cloudflare Turnstile: checks that a sign-up comes from a person and not a bot. It receives technical details from your browser, such as your IP address and browser type.

Each acts on our instructions under a data processing agreement. Anthropic, OpenAI, Stripe, Resend, Cloudflare and Vercel are based in the United States, so some information may be processed there. Those transfers are protected by safeguards approved under UK law, such as the UK-US data bridge or the UK International Data Transfer Addendum.

How long we keep it

Your profile and progress are kept while your account is open. When an exam plan ends, your progress for that exam is kept (but only the free trial questions show) so it is there if you renew.
If you have not logged in or answered a question for 12 months and have no running plan, we email you, and 30 days later we delete your account and progress unless you log in.
Counts of AI use are deleted after 90 days. An account whose email is never confirmed is deleted after 7 days.
Payment records are kept for as long as the law requires for accounts (usually six years), even if you delete your account.
If you delete your account, we delete everything else we hold about you.

Your rights

You can ask us to show you, correct, export or delete the information we hold about you, or object to how we use it. You can delete your account yourself from the Account page at any time. Email hello@exameds.com for anything else. We aim to reply within a month.

If you are unhappy with how we handle your information you can complain to the Information Commissioner's Office (ico.org.uk).

Last updated 28 October 2026. Back to home