Privacy Policy

MSRA Prep ("we", "our", or "us") is committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website and services at msraprep.co.uk.

By using MSRA Prep, you agree to the collection and use of information in accordance with this policy. If you do not agree with our policies, please do not use our services.

Personal Information

When you register for an account, we collect:

• Email address
• Name (optional)
• Profile information from third-party sign-in providers (e.g., Google)

Usage Data

We automatically collect certain information when you use our platform:

• Question answers and performance data
• Practice session statistics
• Progress tracking information
• Device and browser information
• IP address and location data (country level)

Payment Information

Payment processing is handled securely by Stripe. We do not store your full credit card details on our servers. We only receive confirmation of successful transactions and subscription status.

We use your information to:

• Provide and maintain our service
• Personalize your learning experience with our AI tutor
• Track your progress and provide performance analytics
• Process payments and manage subscriptions
• Send important service updates and notifications
• Improve our platform based on usage patterns
• Respond to your inquiries and support requests

We implement appropriate technical and organizational measures to protect your personal data, including:

• Encryption of data in transit (HTTPS/TLS)
• Secure authentication via Clerk
• Regular security audits and updates
• Limited access to personal data by authorized personnel only
• Secure cloud infrastructure with industry-standard protections

We do not sell your personal information. We may share data with:

• Service Providers: Clerk (authentication), Stripe (payments), Vercel (hosting), OpenAI (AI features)
• Legal Requirements: When required by law or to protect our rights
• Business Transfers: In connection with a merger or acquisition

We use essential cookies to maintain your session and preferences. We may also use analytics cookies to understand how you use our service. You can control cookie preferences through your browser settings.

Under UK GDPR, you have the right to:

• Access your personal data
• Correct inaccurate data
• Request deletion of your data
• Object to processing
• Data portability
• Withdraw consent at any time

To exercise these rights, please contact us at privacy@msraprep.co.uk

We retain your personal data for as long as your account is active or as needed to provide services. You can request deletion of your account and associated data at any time. Some data may be retained for legal or business purposes.

Our service is intended for medical professionals and is not directed at children under 18. We do not knowingly collect personal information from children.

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date.

If you have questions about this Privacy Policy or our data practices, please contact us at: