Privacy Policy
Last updated: January 2026
RevWise Revision (“we”, “our”, or “us”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you use our exam preparation platform.
1. Information We Collect
1.1 Account Information
When you create an account, we collect:
- Email address
- Name
- Password (stored securely using industry-standard hashing)
1.2 Profile Information
You may optionally provide:
- Medical specialty
- Training grade (e.g., ST4, ST6, ST8)
- Hospital or trust
- Deanery
- Target exam date
1.3 Study Data
As you use RevWise, we collect:
- Self-assessment confidence ratings
- Study plan progress
- AI chat conversations about study topics
- Rota/shift information (if you use this feature)
1.4 Technical Information
We automatically collect:
- IP address (for security and fraud prevention)
- Browser type and version
- Device information
- Usage patterns (pages visited, features used)
2. How We Use Your Information
We use your information to:
- Provide the service: Personalise your study experience, track progress, and generate study plans
- Improve the platform: Understand how users interact with RevWise to make it better
- Communicate with you: Send important updates about your account or the service
- Ensure security: Protect against unauthorised access and abuse
3. AI and Your Data
RevWise uses AI (powered by Anthropic's Claude) to provide personalised study assistance. When you use AI features:
- Your conversations are processed by our AI provider to generate responses
- Conversations are stored to provide context and improve your experience
- We do not use your conversations to train AI models
- You can delete your conversation history at any time
4. Data Sharing
We do not sell your personal data. We may share data with:
- Service providers: Companies that help us run RevWise (hosting, email, analytics) under strict data protection agreements
- Legal requirements: When required by law or to protect our rights
4.1 Third-Party Services
RevWise uses the following third-party services:
- Supabase: Database and authentication (EU data centre)
- Vercel: Hosting and deployment
- Anthropic: AI processing for chat features
- Voyage AI: Document embeddings for search
5. Data Retention
We retain your data as follows:
- Active accounts: Data is retained while your account is active
- Deleted accounts: Most data is deleted within 30 days of account deletion
- Legal requirements: Some records (e.g., financial transactions, consent records) are retained for 6 years as required by UK law
6. Your Rights (GDPR)
Under UK GDPR, you have the right to:
- Access: Request a copy of your personal data
- Rectification: Correct inaccurate data
- Erasure: Request deletion of your data (“right to be forgotten”)
- Portability: Export your data in a machine-readable format
- Object: Object to certain processing of your data
- Restrict: Request limited processing of your data
To exercise these rights, use the account settings in RevWise or contact us at privacy@revwiserevision.com.
7. Data Security
We protect your data using:
- Encryption in transit (HTTPS/TLS)
- Encryption at rest (AES-256)
- Secure password hashing
- Row-level security in our database
- Regular security reviews
8. Cookies
RevWise uses essential cookies for:
- Authentication (keeping you logged in)
- Security (preventing fraud)
We do not currently use advertising or tracking cookies. If this changes, we will update this policy and request your consent.
9. Children's Privacy
RevWise is intended for medical professionals and trainees. We do not knowingly collect data from anyone under 18 years of age.
10. International Transfers
Your data may be processed in countries outside the UK. When this happens, we ensure appropriate safeguards are in place (e.g., Standard Contractual Clauses).
11. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes via email or through the platform.
12. Contact Us
For privacy-related questions or to exercise your rights, contact us at:
Email: privacy@revwiserevision.com
13. Supervisory Authority
You have the right to lodge a complaint with the Information Commissioner's Office (ICO) if you believe your data protection rights have been violated:
- Website: ico.org.uk
- Phone: 0303 123 1113