Legal

Privacy Policy

How Medily collects, uses, stores, protects and shares your personal information when you visit our website, create an account, purchase a subscription or Mock MMI, use Maya, access our Resources, contact us or otherwise interact with our services.

1. Introduction

Welcome to Medily Ltd (“Medily”, “we”, “our”, or “us”).

Your privacy is important to us. This Privacy Policy explains how we collect, use, store, protect and share your personal information when you:

  • visit our website;
  • create a Medily account;
  • purchase a subscription or Mock MMI;
  • use Maya;
  • access our Resources;
  • contact us; or
  • otherwise interact with our services.

Please read this Privacy Policy alongside our:

  • Terms & Conditions
  • Cookie Policy
  • Refund & Cancellation Policy

By using Medily, you acknowledge that your personal information will be processed in accordance with this Privacy Policy.

2. Who We Are

Medily Ltd is the data controller responsible for your personal information.

Email: info@medily.co

3. Information We Collect

Depending on how you use Medily, we may collect the following information.

3.1 Account Information

When you create an account, we may collect:

  • Full name
  • Email address
  • Password (encrypted)
  • Account ID
  • Subscription status

3.2 Payment Information

Payments are processed securely through Stripe.

We do not store:

  • debit card numbers
  • credit card numbers
  • security codes

Stripe may provide us with limited payment information such as:

  • payment status
  • subscription status
  • transaction reference
  • billing country

Please refer to Stripe’s Privacy Policy for further information.

3.3 Maya Responses

When you use Maya we may collect:

  • interview answers
  • selected university
  • chosen station
  • difficulty level
  • feedback
  • scores
  • optimised answers
  • timestamps

This information allows Maya to provide personalised feedback and improve your learning experience.

3.4 Resource Usage

When using Resources we may collect:

  • completed topics
  • reading progress
  • study time
  • guide completion
  • dashboard statistics

3.5 Mock MMI Information

If you purchase a University-Specific Mock MMI we may collect:

  • selected university
  • interview booking information
  • interview attendance
  • written interviewer feedback
  • interview scores
  • rescheduling information

3.6 Communications

If you contact us we may collect:

  • emails
  • support requests
  • complaints
  • survey responses
  • feedback

3.7 Technical Information

We automatically collect certain technical information including:

  • IP address
  • browser type
  • operating system
  • device type
  • approximate location
  • referring website
  • pages visited
  • timestamps

4. Special Category Data

Medily does not intentionally request special category personal data.

Please avoid including unnecessary sensitive information when submitting interview answers or contacting us.

If sensitive information is provided, it will only be processed where necessary for providing our services or where permitted by law.

5. How We Use Your Information

We use your information to:

  • create your account;
  • authenticate your identity;
  • provide Resources;
  • provide Maya;
  • deliver Mock MMIs;
  • process payments;
  • manage subscriptions;
  • communicate with you;
  • improve our services;
  • monitor website performance;
  • detect fraud;
  • enforce our Terms;
  • comply with legal obligations.

6. Lawful Basis for Processing

Under UK GDPR we rely on one or more of the following lawful bases:

Contract

To provide the services you purchase.

Legitimate Interests

To improve our services, prevent fraud and ensure website security.

Legal Obligation

Where required by law.

Consent

Where consent is required, including certain cookies and marketing communications.

You may withdraw consent at any time.

7. Who We Share Information With

We only share personal information where necessary.

This may include:

Stripe

To process payments.

Calendly

To manage Mock MMI bookings.

Cloud Hosting Providers

To securely host the Medily platform.

Email Providers

To send account and transactional emails.

Analytics Providers

To understand website performance where consent has been provided.

Professional Advisers

Lawyers, accountants or insurers where necessary.

Government Authorities

Where required by law.

We never sell your personal information.

8. International Transfers

Some service providers may process information outside the United Kingdom.

Where this occurs, appropriate safeguards will be implemented in accordance with UK GDPR.

9. How Long We Keep Information

We retain information only for as long as necessary.

Typical retention periods include:

DataRetention
Account informationWhile account remains active
Payment recordsAs required by law
Maya responsesWhile account remains active unless deleted
Interview feedbackWhile account remains active
Support requestsUp to 6 years where appropriate
Website analyticsAccording to analytics provider settings

Where required by law, information may be retained for longer.

10. Account Deletion

You may request deletion of your account by contacting: info@medily.co

Deleting your account may permanently remove:

  • Maya history
  • interview scores
  • progress
  • Resources progress
  • dashboard statistics

Some information may be retained where required by law.

11. Data Security

We implement appropriate technical and organisational measures including:

  • encrypted connections (HTTPS)
  • secure authentication
  • password hashing
  • access controls
  • secure hosting
  • payment processing through Stripe
  • regular software updates

Although we take reasonable steps to protect your information, no internet transmission can ever be guaranteed completely secure.

12. Cookies

We use cookies as explained in our Cookie Policy.

Cookies help us:

  • maintain secure sessions;
  • remember preferences;
  • improve website performance;
  • understand website usage.

You can manage cookies through our Cookie Banner or your browser settings.

13. Marketing

We may occasionally send updates regarding:

  • new Resources
  • platform improvements
  • new services
  • important account information

Marketing communications will only be sent where permitted by law.

You may unsubscribe at any time.

Transactional emails relating to your account or purchases cannot be opted out of.

14. Children’s Privacy

Medily is designed primarily for applicants preparing for university interviews.

Users under 18 should ensure they understand this Privacy Policy and, where appropriate, seek guidance from a parent or guardian.

15. Your Rights

Under UK GDPR you may have the right to:

  • access your personal information;
  • correct inaccurate information;
  • request deletion;
  • restrict processing;
  • object to processing;
  • request data portability;
  • withdraw consent;
  • lodge a complaint with the Information Commissioner’s Office (ICO).

Some rights are subject to legal exceptions.

16. Automated Decision-Making

Maya provides automated interview feedback using artificial intelligence.

This feedback is intended solely for educational and practice purposes.

Users should not rely on Maya as professional medical, educational or legal advice.

Final admissions decisions are made solely by universities.

17. Third-Party Websites

Our website may contain links to third-party websites including:

  • Stripe
  • Calendly
  • universities
  • social media platforms

We are not responsible for their privacy practices.

Users should read the privacy policies of those organisations.

18. Changes to This Privacy Policy

We may update this Privacy Policy periodically.

The latest version will always be published on our website.

Material changes may also be communicated by email or through your account where appropriate.

19. Contact Us

If you have questions about this Privacy Policy or your personal information, please contact:

Medily Ltd

Email: info@medily.co

20. Complaints

If you are unhappy with how we handle your personal information, please contact us first so that we can attempt to resolve your concerns.

21. Compliance

This Privacy Policy is intended to support Medily’s compliance with:

  • UK General Data Protection Regulation (UK GDPR)
  • Data Protection Act 2018
  • Privacy and Electronic Communications Regulations (PECR), where applicable
  • other applicable UK data protection legislation

Nothing in this Privacy Policy limits your statutory rights under applicable law.