MedPath is an independent service and is the data controller for the information described here. It is not affiliated with any university, UCAS or the UCAT Consortium. You can contact us at hello@example.com.

Only what we need to give you a result and deliver anything you buy:

• Your first name and email address.
• An age band — under 16, 16–17, 18 or older, or prefer not to say. We do not ask for your date of birth, because a band is all we need.
• Your answers to the readiness assessment: grades, UCAT position, intended universities, statement progress, experience and interview preparation.
• Whether you think you may be eligible for contextual admissions — yes, no, unsure, or prefer not to say. We never ask why.
• If you buy a statement review, the text of your three UCAS answers, and only after you have separately agreed to that.
• If you use the interview practice tool, the text of what you said in each attempt. No audio or video is ever uploaded — see the section below.
• Order and payment records. Card details are handled entirely by Stripe and never reach us.

We do not ask for your ethnicity, any medical or mental health information, any diagnosis, your household income, or a written account of personal hardship. If you send any of that to us anyway, we will delete it.

• To calculate your readiness scores and produce your result. This is the service you asked for.
• To deliver anything you buy, and to email you about it.
• To send you occasional guidance emails — but only if you separately ticked that box. It is never pre-ticked, and you can turn it off in one click from any of those emails.
• To keep basic, non-identifying usage counts so we know which parts of the site work.

If you use the interview practice tool, two things are worth being precise about, because they involve your device rather than just your data.

• Your camera is a self-view only. If you turn it on, the video is displayed back to you in your own browser and nothing else. It is never recorded, never uploaded, and never stored. We could not show it to anyone if we wanted to, because it never reaches us.
• Your voice is transcribed by your browser. No audio recording is uploaded or kept. What reaches us is the text of what you said, and only when you press the button to finish the station.
• Your browser’s speech recognition may send audio to the browser vendor to convert it into text. That is between you and your browser, and is outside our control — if you would rather that did not happen, use the typed mode instead, which works just as well.
• The transcript is stored against your account so you can see whether you are improving. You can delete it, along with everything else, at any time.

Feedback on a practice attempt is generated automatically and is not read by a person before you see it. It comments on your timing, structure and content, and never on your voice, accent or appearance.

Some of this service is automated by an AI model and some of it is not, and the difference matters enough to set out plainly.

Produced by an AI model, and sent to you without a person reading it first:

• The mark and the written feedback on every practice interview station, including the marks in a full mock circuit.
• Which follow-up question you are asked, chosen from a set of questions written and reviewed by us beforehand.
• The transcription of what you said, which is what the marking then reads.
• The statement checker, and the paid statement reports.

Not produced by AI at all:

• The university matcher. Which schools you are eligible for, and every requirement shown against them, come from fixed rules applied to what universities publish. No model is involved at any point.
• One-to-one tutoring and any mock interview with a person, which are exactly that.

Automated output can be wrong. A mark is one automated reading of one answer, no university has seen it, and it is ours rather than any medical school’s. Nothing here is a decision about your application — those are made only by universities.

Where an external model is used, only the minimum information needed is sent: your answer or your draft, and never your name, email or payment details. Your submissions are never used to train any model.

We use Stripe for payments, a transactional email provider to send emails, a hosting provider, and a database provider. Each of these processes data only to provide that service to us. We do not sell your data, and we do not share it with universities.

Assessment answers and statement text are kept while your account is active, and for up to 24 months afterwards, so you can come back to them across an application cycle. Order records are kept for six years for accounting purposes, but without personal identifiers once you ask us to delete your data.

You can download everything we hold about you, or delete it, at any time from your data page. No explanation needed. You can also object to how we use your information, ask us to correct it, or complain to the Information Commissioner’s Office.

Most people using this service are. That is why we ask for an age band instead of a date of birth, do not ask for sensitive information, and keep marketing entirely optional and unticked by default. If you are under 16, please talk to a parent or guardian before buying anything.

Traffic is encrypted. Secrets and AI calls stay on the server. Reports are only visible to the person they were written for. Personal statement text is never written to logs or analytics.