Privacy Policy

Last updated: January 2026

RevWise Revision (“we”, “our”, or “us”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you use our exam preparation platform.

1. Information We Collect

1.1 Account Information

When you create an account, we collect:

  • Email address
  • Name
  • Password (stored securely using industry-standard hashing)

1.2 Profile Information

You may optionally provide:

  • Medical specialty
  • Training grade (e.g., ST4, ST6, ST8)
  • Hospital or trust
  • Deanery
  • Target exam date

1.3 Study Data

As you use RevWise, we collect:

  • Self-assessment confidence ratings
  • Study plan progress
  • AI chat conversations about study topics
  • Rota/shift information (if you use this feature)

1.4 Technical Information

We automatically collect:

  • IP address (for security and fraud prevention)
  • Browser type and version
  • Device information
  • Usage patterns (pages visited, features used)

2. How We Use Your Information

We use your information to:

  • Provide the service: Personalise your study experience, track progress, and generate study plans
  • Improve the platform: Understand how users interact with RevWise to make it better
  • Communicate with you: Send important updates about your account or the service
  • Ensure security: Protect against unauthorised access and abuse

3. AI and Your Data

RevWise uses AI (powered by Anthropic's Claude) to provide personalised study assistance. When you use AI features:

  • Your conversations are processed by our AI provider to generate responses
  • Conversations are stored to provide context and improve your experience
  • We do not use your conversations to train AI models
  • You can delete your conversation history at any time

4. Data Sharing

We do not sell your personal data. We may share data with:

  • Service providers: Companies that help us run RevWise (hosting, email, analytics) under strict data protection agreements
  • Legal requirements: When required by law or to protect our rights

4.1 Third-Party Services

RevWise uses the following third-party services:

  • Supabase: Database and authentication (EU data centre)
  • Vercel: Hosting and deployment
  • Anthropic: AI processing for chat features
  • Voyage AI: Document embeddings for search

5. Data Retention

We retain your data as follows:

  • Active accounts: Data is retained while your account is active
  • Deleted accounts: Most data is deleted within 30 days of account deletion
  • Legal requirements: Some records (e.g., financial transactions, consent records) are retained for 6 years as required by UK law

6. Your Rights (GDPR)

Under UK GDPR, you have the right to:

  • Access: Request a copy of your personal data
  • Rectification: Correct inaccurate data
  • Erasure: Request deletion of your data (“right to be forgotten”)
  • Portability: Export your data in a machine-readable format
  • Object: Object to certain processing of your data
  • Restrict: Request limited processing of your data

To exercise these rights, use the account settings in RevWise or contact us at privacy@revwiserevision.com.

7. Data Security

We protect your data using:

  • Encryption in transit (HTTPS/TLS)
  • Encryption at rest (AES-256)
  • Secure password hashing
  • Row-level security in our database
  • Regular security reviews

8. Cookies

RevWise uses essential cookies for:

  • Authentication (keeping you logged in)
  • Security (preventing fraud)

We do not currently use advertising or tracking cookies. If this changes, we will update this policy and request your consent.

9. Children's Privacy

RevWise is intended for medical professionals and trainees. We do not knowingly collect data from anyone under 18 years of age.

10. International Transfers

Your data may be processed in countries outside the UK. When this happens, we ensure appropriate safeguards are in place (e.g., Standard Contractual Clauses).

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via email or through the platform.

12. Contact Us

For privacy-related questions or to exercise your rights, contact us at:

Email: privacy@revwiserevision.com

13. Supervisory Authority

You have the right to lodge a complaint with the Information Commissioner's Office (ICO) if you believe your data protection rights have been violated: