Privacy policy
Last updated: 17 October 2026
This policy explains what personal information WellMedic collects, why, who helps us handle it, how long we keep it, and your rights. We've tried to write it in plain English. If anything is unclear, email us at sham@wellmedic.co.uk.
Who we are
WellMedic is run by Wmeded Services Limited, a company registered in England and Wales (company number 12722250), of Swan Building, 20 Swan Street, First Floor, Swan Buildings, Manchester, England, M4 5JW. We are registered with the Information Commissioner's Office (ICO) under reference ZB025341.
We are the "controller" of the personal information described here, which means we decide how and why it is used.
What we collect
If you join the waitlist
- Your first name and email address.
- Where you train, what you're preparing for and your exam date(s), the same questions we ask when you create an account.
- Whether you'd like emails about new lessons and topics.
- When you confirmed your place, and whether and when we invited you to the beta.
- If you joined through one of our links (for example from our newsletter), which one it was.
- If you joined through a colleague's link, that it was their link, so we can count how many colleagues joined through it. Your colleague only ever sees a number, never your name or details.
When you create an account
- Your first name and email address.
- That you accepted our terms of use and privacy policy, and when.
- Whether you'd like to receive emails about new lessons and topics, and each time you change that choice.
About your training (asked when you first sign in, and editable in your account)
- Where you train: your nation and training region (GP school), or your country if you're outside the UK.
- What you're preparing for (the AKT, the SCA or both) and your exam date(s), if you've booked them.
- If you're outside the UK, whether you're interested in other exams (MRCGP International, MICGP or RACGP).
When you use WellMedic
- Your progress: which lessons and course lessons you've started or finished, where you got to, and when.
- Listening and viewing activity: which lessons you play, how far through you get, how long you listen, at what speed and at what time of day; when you watch a course video or download a course PDF.
- Your settings: playback speed and whether autoplay is on.
- Key moments in using the app, such as signing up, signing in and out, finishing setup, starting or finishing a lesson, changing speed, cancelling autoplay, and installing the app. Each is recorded with your exam, training region and roughly how many weeks you are from your exam.
- If you signed up through one of our links or adverts, which one it was (for example "instagram"), so we know which campaigns work. This comes from the link itself — we don't use tracking cookies or advertising tools to find it out.
Technical information
- If something goes wrong, an error report describing the problem (see "Error reports" below). These are designed to contain no personal information.
- Like any website, our hosting and email providers briefly process technical details such as your IP address and browser type in order to deliver the service and keep it secure.
We do not collect patient information, and you should never enter any into WellMedic.
How we use it, and our legal reasons
| What we do | Why | Legal basis (UK GDPR) |
|---|---|---|
| Run the waitlist: confirm your place, choose a beta group across regions and exam dates, count referrals and send your invitation | Because you asked to join | Steps you've asked us to take before you create an account (contract) |
| Create and run your account, sign you in with one-time codes, remember your progress and settings | To provide the service you signed up for | Contract |
| Send sign-in codes and account emails (for example a welcome email explaining how WellMedic works) | Needed to use your account | Contract |
| Record listening and viewing activity and key moments in the app (see "Listening analytics" below) | To improve our lessons and the app, and to report how WellMedic is used in aggregate | Legitimate interests |
| Send you emails about new lessons and topics | Only if you've asked for them | Consent — you can withdraw it at any time |
| Keep the service secure, prevent misuse and fix errors | To protect you and WellMedic | Legitimate interests |
| Keep records we're required to keep | To meet legal obligations | Legal obligation |
Listening analytics
WellMedic records, in its own database, which lessons you play, how far through you get and when — for example that a lesson was started, reached 25%, 50% or 75%, or was finished. We use this to understand which lessons help most, where people stop listening, and how WellMedic is used across training regions and exam dates, so we can improve the content and report usage in aggregate (for example "1,200 hours listened this month").
- This data stays in our own database. We do not use third-party analytics or advertising tools, and we never sell your data.
- Detailed activity records are deleted after 90 days. We keep daily totals indefinitely, but these are counts that don't identify anyone.
- Anything we show to other users (for example what's popular in a region) is aggregated, and any group of fewer than 10 people is never shown.
- Our legal basis is legitimate interests: improving an educational service in ways you'd reasonably expect, with limited, first-party data. You can object at any time (see "Your rights").
Who helps us run WellMedic
We use carefully chosen service providers ("processors") who handle personal information only on our instructions and under contracts that protect it:
| Provider | What they do for us | Where |
|---|---|---|
| Supabase | Our database and sign-in system | Data stored in London, UK |
| Vercel | Hosting the website and app | Servers in London, UK; US company |
| Cloudflare | Storing lesson audio and course PDFs; our domain name | Files stored in the EU; US company |
| Resend | Sending sign-in codes, account emails and waitlist emails | Ireland (EU); US company |
| Sentry | Error reports (with personal information removed) | Data stored in the EU (Germany); US company |
| Vimeo | Playing course videos | US; the player is set to "do not track" |
| Kit (kit.com) | Our newsletter — only if you've opted in to emails | US |
Some of these providers are based in, or may access data from, the United States. Where personal information is transferred outside the UK, we rely on the UK's adequacy regulations (including the UK–US "data bridge" for providers certified under it) or on the ICO-approved International Data Transfer Agreement or Addendum, as appropriate.
We don't share your personal information with anyone else unless the law requires it.
Error reports
When something goes wrong in the app, an error report is sent to Sentry so we can fix it. Before it leaves your device or our server, we remove email addresses, any details of who you are, anything you've typed, and the contents of your requests. Sentry stores these reports in the EU for a limited period.
Cookies and storage on your device
WellMedic only stores what it needs to work:
- Sign-in cookies, which keep you signed in, and a short-lived cookie that remembers your email address for up to 30 minutes while you enter your sign-in code.
- Your choice to hide the "Add to home screen" card, if you tap "Not now".
- Your choice to hide lesson transcripts, if you tap "Hide" next to a lesson's transcript.
- If you add WellMedic to your home screen, a small set of the app's own files (for example its fonts and an "offline" page), so it can show a friendly message when you have no connection. This never includes lessons or anything personal.
These are all strictly necessary for the service or are things you've asked for, so the law doesn't require us to ask your consent for them. We use no analytics or advertising cookies, and the Vimeo video player is set to "do not track".
How long we keep your information
- Your waitlist details: until WellMedic opens to everyone, then deleted. You can leave the waitlist sooner with the "Leave the waitlist" link on your waitlist page, or by emailing us. If you create an account, your account details are kept as described below.
- Your account, training details and progress: for as long as you have an account. If you delete your account, they are deleted straight away.
- Detailed listening and app activity: 90 days, then deleted. Daily totals that don't identify anyone are kept indefinitely.
- Records of your email choices: for as long as you have an account, so we can show you agreed (or didn't) to emails.
- Error reports: for a limited period at Sentry, without personal information.
- Copies may remain in our providers' secure backups for a short time before being overwritten.
Your rights
You have the right to:
- access the personal information we hold about you;
- correct it — most of it you can change yourself in your account;
- delete it — you can delete your account at any time in your account settings;
- restrict or object to how we use it, including our listening analytics — email us and we'll stop including your activity in our statistics (your progress and settings keep working);
- receive it in a portable format — use Download my data in your account settings;
- withdraw consent to emails at any time, using the unsubscribe link in any email or the setting in your account.
To exercise any of these, email sham@wellmedic.co.uk. We'll reply within one month.
You can also complain to the Information Commissioner's Office at ico.org.uk.
Keeping your information safe
We sign you in with one-time codes rather than passwords, limit how many codes can be requested, store lesson files privately and only share them through links that expire, restrict every database table so you can only see your own information, and encrypt information in transit and at rest with our providers.
Who WellMedic is for
WellMedic is for doctors and healthcare professionals in training. It isn't intended for anyone under 18.
Changes to this policy
If we make important changes, we'll tell you in the app or by email before they take effect. The date at the top shows when this policy was last updated.