Privacy notice
Your recordings are yours.
This notice explains what PrepYou.AI collects, why, how long it is kept, and the control you keep — written to meet UK GDPR and the Data Protection Act 2018.
Private by default
Sessions are visible only to you unless you deliberately share one for review.
Delete at any time
Remove an individual recording, a session, or your whole account and its data.
Uploads treated as data
Document contents are never executed as instructions to the AI, which protects against injected text inside files.
Recording, camera analysis and transcription are opt-in for each session. Everything the platform produces is practice material and general information — not advice about your application, and not a prediction of any recruitment outcome.
Who is responsible
Controller and contact
PrepYou.AI is the data controller for the personal data described here. For any privacy question or request, email info@prepyou.ai. We aim to respond within one month, as UK GDPR requires.
This notice covers everyone who signs up to use the platform, including free and paid accounts and any administrator accounts. It applies to the website, the practice room and everything stored in your account.
The service is intended for practising doctors and dentists preparing for UK recruitment. It is not directed at children, and we do not knowingly collect data from anyone under 18.
Notice version 2026-09-13. If we change it materially we will ask you to review and accept the new version when you next sign in.
What we hold
Data, purpose and lawful basis
Account details
Name, email address, sign-in method, password (stored only as a secure hash).
Why: To create and secure your account.
Lawful basis: Contract — we cannot provide the service without it.
Practice profile
Grade, specialty, region, intended pathway, interview date, confidence rating, areas you find difficult.
Why: To pick relevant stations and questions for you.
Lawful basis: Contract.
Session content
Automated transcripts of your spoken answers, timings, written summaries and practice scores.
Why: To produce your practice summaries and progress overview.
Lawful basis: Contract, and your consent for each recorded session.
Camera measurements
Objective framing, approximate gaze direction, movement and lighting figures produced on your own device.
Why: To give neutral positioning information. No emotion, personality or appearance judgement is made.
Lawful basis: Consent — you choose whether to enable the camera for each session.
Portfolio self-assessment
Your own entries against published portfolio domains, and your notes.
Why: To show where your evidence looks thin against published guidance.
Lawful basis: Contract.
Technical and security records
Sign-in events, error reports and strictly necessary storage on your device.
Why: To keep the service secure and working.
Lawful basis: Legitimate interests — keeping the service secure and reliable.
Please do not enter patient-identifiable information, and do not include patient details in portfolio entries or spoken answers. Anything you type or say about your own health or other special category information is entirely optional, and is processed only with your explicit consent.
How long
Retention and deletion
Your account, profile, sessions, transcripts, summaries and portfolio entries are kept until you delete them or close your account. There is no automatic expiry, so your progress overview stays intact across application rounds.
Video is never stored. Camera measurements are calculated on your own device and only the resulting figures are saved with the session. Audio is used to produce a transcript and is not retained afterwards.
When you close your account, your profile, sessions, transcripts, summaries, portfolio entries and consent records are deleted, and your sign-in record is removed. Routine backups may retain copies for a short period before being overwritten.
Who else is involved
Processors and transfers
We use a small number of suppliers acting as processors under contract: a hosting and database provider for the application and your account data, and an AI provider that produces transcripts, spoken questions and written practice summaries. They may only process your data on our instructions.
Your practice content is not used to train third-party AI models. Some processing takes place outside the UK; where it does, transfers rely on UK adequacy regulations or the International Data Transfer Addendum with appropriate safeguards.
Scores and summaries are generated automatically, but they carry no legal or similarly significant effect: no decision about your training, employment or application is made by this platform, and every output is intended for review by you and, where relevant, a human educator.
Cookies and device storage
What is stored on your device
We do not use third-party advertising or tracking cookies. Two kinds of storage are used:
- Strictly necessary storage: your sign-in session and your cookie choice. This keeps you signed in and is essential for the service to work, so it is always on.
- Optional measurement storage: anonymous figures about which practice features are used, kept only if you accept optional storage in the banner or on this page. Nothing is recorded until you choose to accept it.
You can change your choice at any time using the control below.
Your cookie choice
Current choice: not yet chosen.
How we protect it
Security
Access to your account is protected by authentication, and every record in the database is scoped so that only you can read your own sessions, transcripts and portfolio entries. Administrative staff can only reach support tickets and account settings they need to help you, and access is logged.
Video from your camera is processed in your browser and never leaves your device. Audio leaves your device only to be turned into a transcript, and the audio itself is not kept afterwards. Document uploads used for the portfolio evidence review are used for the review in front of you and are not saved.
No system is perfectly secure, so we keep as little as we can and delete on request. If a personal data breach affects you, we will tell you without undue delay.
Your rights
What you can ask for
- Get a copy of your data (access and portability) — download it yourself from your account page.
- Correct anything inaccurate — edit your details, or ask us.
- Delete your data — remove individual sessions, your whole practice history, or your account.
- Withdraw consent for recording, transcription or camera measurement at any time, without affecting past practice.
- Restrict or object to processing that relies on our legitimate interests.
- Complain to the Information Commissioner's Office (ico.org.uk) if you are unhappy with how we respond.
Practise on your own terms.
Start with one full mock interview, free, and keep full control of what is recorded and kept.
Start a free mock interview