Privacy Policy
Last updated: July 2026
This policy explains how OphthaPrep, a service operated by Rohan Misra trading as "OphthaPrep" (a sole trader in the United Kingdom) ("we"), handles your personal data. We are the data controller. You can reach us at support@ophthaprep.co.uk or by post at 124 City Road, London, EC1V 2NX.
Data we collect
- Account data: your email address and an encrypted password.
- Usage data: which cases you complete, your self-marking scores, and cases you generate with the AI tool.
- Payment data: processed by Stripe. We receive confirmation of payment and your access tier, but never see or store your full card details.
- Technical data: essential cookies for authentication and your theme preference.
How we use it
- To provide the Service, sign you in, and enforce single-user access.
- To track your progress and show your generated cases back to you.
- To take payment and manage your access period.
- To respond to support requests.
Legal basis
We process account and usage data to perform our contract with you (providing the Service), payment data to comply with legal obligations and perform the contract, and support correspondence on the basis of our legitimate interestsin helping our users.
Who we share it with
We use trusted processors to run the Service: Supabase (authentication and database), Stripe (payments), Vercel (hosting), and Anthropic (the AI model that powers case generation — it receives the topic you type, not your identity). We do not sell your data or use it for advertising.
International transfers
Some providers may process data outside the UK/EEA. Where they do, appropriate safeguards (such as Standard Contractual Clauses) are in place.
Retention
We keep your account data while your account exists. You can ask us to delete your account and associated data at any time. Payment records may be retained where required for tax and accounting law.
Your rights
Under UK GDPR you have the right to access, correct, delete or port your data, and to object to or restrict processing. To exercise any of these, email support@ophthaprep.co.uk. You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk.
Cookies
We use only essential cookies: one to keep you securely signed in, and one to remember your light/dark theme. We do not use advertising or third-party tracking cookies.