Privacy notice

SuperMed is operated by SuperMed LTD, a company registered in the United Kingdom, and we are the data controller for everything described here. Write to supermedinfoltd@gmail.com about anything on this page.

Everything below, and nothing else.

• Your name and email address. Typed by you, or given to us by Google if you sign in that way. We need them to have an account at all, and to email you about it.
• Your profile picture, if you upload one or arrive with one from Google. Optional, and you can remove it.
• Your course and study year, and your group number if you give it. This is what decides which syllabus you see and which timetable applies to you.
• What you do while studying. Which topics you have opened, every answer you give and whether it was right, your flashcard schedules, your SuperPrep sessions, your streaks and how long you have spent. This is the product: without it there is no progress, no scheduling and no proficiency.
• Sign-in records. The device, browser and IP address used to sign in, and when a session was replaced because your account was used somewhere else. Kept to enforce one device at a time and to answer questions about an account.
• Changes to your account. When your email, password, name or role changed, and who changed it.

Payments are handled entirely by Stripe. Your card number, expiry, security code and billing address are entered on Stripe’s own systems and never touch ours - we could not show them to you if you asked, because we do not have them.

What we hold is a Stripe customer reference, which plan you are on, and when it renews or ends. Stripe is a data controller in its own right for the payment itself; their privacy policy is at stripe.com/privacy.

Only you. Attempts, progress and proficiency are locked to your account at the database level - no other student can read them, and we do not show individual results to the university, to your group, or to anyone else.

We look at aggregate patterns - which questions are getting missed most often - because that is how the material gets better. That analysis is not tied back to a person.

Our own staff can see your account details in an admin console, and every change they make is logged with their name against it. They do not read your answers.

Your name, email, course, study data and payment status: because we need them to give you the service you asked for - a contract between us.

Sign-in and device records, and the account change log: because we have a legitimate interest in stopping account sharing, keeping accounts secure, and being able to explain what happened to one.

Anything else, such as a marketing email: only if you have said yes.

Nobody who is not helping us run the platform. We do not sell your data, we do not share it with advertisers, and we do not give it to the university.

• Supabase - the database and sign-in system. Hosted in the EU.
• Vercel - runs the website itself.
• Stripe - payments, as above.
• Google - only if you choose to sign in with it.

Where any of these move data outside the UK or EEA, it is covered by the standard contractual clauses. We would disclose data to an authority only if the law required it.

We use no advertising cookies and no third-party tracking. What we set is:

• a session cookie, so you stay signed in;
• a device cookie holding a random value, so we can tell one browser from another for the one-device-at-a-time rule. It says nothing about you or your machine;
• a small cookie remembering when we last checked that session.

All three are strictly necessary for the service to work, which is why there is no cookie banner asking you to accept them.

Your account and study data: for as long as your account exists. Delete the account and it goes.

Sign-in and device records: 12 months.

The account change log: 24 months. After an account is deleted, all that survives in it is the email address and the fact that the account was deleted - a deletion record that deletes itself is not a record.

Invoices and payment records: kept by Stripe for as long as tax and accounting law requires, typically six or seven years. These are financial records and we cannot erase them on request.

Settings, at the bottom of the page, and it happens immediately. Your progress, your streaks, your flashcard schedules and every answer you have given are deleted, and any subscription is cancelled in Stripe first so you are not charged again.

What is not deleted, and why: the invoices Stripe holds, and one line in our account log recording that an account with your email address was deleted and when.

You can ask us for a copy of everything we hold about you, ask us to correct it, ask us to delete it, ask us to restrict what we do with it, or object to us relying on legitimate interest. Email supermedinfoltd@gmail.com and we will answer within 30 days.

If you think we have got it wrong, you can complain to the UK Information Commissioner’s Office at ico.org.uk, or to the data protection authority in the country you live in.

Access to your data is enforced in the database itself rather than only in the app, so a bug in a page cannot expose somebody else’s work. Passwords are hashed and we never see them. Staff access is limited to the accounts and content they need, and is logged.

If there is ever a breach that puts you at risk, we will tell you and the regulator within 72 hours of finding out, and we will tell you what actually happened rather than a sentence that says nothing.

SuperMed is for university students and is not intended for anyone under 16. If you believe a child has an account, tell us and we will remove it.

If we change anything that materially affects you, we will email you before it takes effect. The date at the top is the last time this page changed.