Privacy Policy
1. Who is the data controller
The data controller is BDYAM Medical Services Ltd, a company registered in England & Wales (company number 16892799), registered office 43 Lena Street, BL1 8LU. Our ICO registration details are available on request. Contact: bassamomda@gmail.com.
2. What we collect
- Account data: name, email, password (stored hashed), training stage.
- Usage & progress: practice activity, scores, readiness, streaks and your free-trial usage counters. These are saved in your browser (local storage) and, when you are signed in, mirrored to our backend so they follow your account across devices.
- Payment data: subscriptions are handled by PayPal. We never see or store your card or bank details — only whether your plan is active.
- Handbook purchases: when you buy a handbook (one-off, through PayPal) we store, on your account, which handbook you bought, the PayPal order and transaction numbers, the price and date, and a record that you ticked the box agreeing to immediate download (the time and wording version). The transaction number is printed on each page of your copy as its order number; your name and email are not.
- Technical data: anonymous, cookieless page counts (section 12) and the words of searches that find nothing on the site (section 13). Neither is linked to you or your account. We do not use advertising or cross-site tracking cookies.
Your CPD log. When you are signed in, your CPD log (activity titles, dates, time, credits and your written reflections) is also stored on our server under your account, so it is backed up and available on all your devices. Evidence files you attach stay on your device and are not uploaded. We keep it while your account is active and for 12 months after closure, unless you delete it sooner with the button below (or on the CPD page); that removes the server copy and turns the backup off, and your device keeps its own copy. Please never include patient-identifiable information in reflections.
3. How and why we use it (lawful basis)
- To provide your account and save your progress — performance of a contract.
- To process subscriptions, handbook purchases and payments, and to keep the record of your agreement to immediate download — contract / legal obligation.
- To improve the service and for security — legitimate interests.
- To send you service or (if you opt in) marketing emails — consent / legitimate interests.
4. Sharing
We share data only with the processors who help us run the service: PayPal (payments), Cloudflare (hosting, backend Workers, account storage and anonymous page counts), and Anthropic (the AI provider behind our practice features). We do not sell your data or share it for advertising.
5. AI features
When you use an AI practice feature (Ask, the AI Patient Simulator and similar), the text or speech you enter is sent through our Cloudflare backend to Anthropic’s Claude to generate a response. Do not enter real patient-identifiable information — use fictional or fully anonymised details only. Anthropic processes inputs to return a response and does not use data submitted through its API to train its models; we cache some non-identifying answers to reduce cost and speed up replies.
Consult Scribe is currently on hold and is not available on any plan. It is withheld while its information-governance and consent requirements are completed, and note generation is disabled for every account, so it does not process any data at present.
6. International transfers
Our AI provider (Anthropic) processes data in the United States. Where data leaves the UK we rely on appropriate safeguards (UK International Data Transfer Agreement / standard contractual clauses). Because you should never enter patient-identifiable data into the AI, these transfers do not involve patient data.
7. Retention
We keep account data while your account is active and for 12 months after closure, then delete or anonymise it, unless the law requires us to keep it longer (for example, payment records for tax purposes). You can ask us to delete your account and data sooner at any time.
8. Security
Passwords are stored hashed (never in plain text), the site is served over HTTPS, and access to account data is restricted. No online service can be guaranteed completely secure, but we take reasonable technical and organisational measures to protect your information and will notify you and the ICO of any breach where legally required.
9. Age of users
Reasoning GP is intended for qualified healthcare professionals and doctors in training and is not directed at anyone under 18. We do not knowingly collect data from children.
10. Your rights
Under UK GDPR you may access, correct, delete, restrict or port your data, object to processing, and withdraw consent. To exercise these, email bassamomda@gmail.com. You can also complain to the ICO (ico.org.uk).
11. Cookies & local storage
We use browser local storage (not advertising cookies) to keep you signed in and to save your progress and free-trial counters on your device — this is essential to the service. Our page counts (section 12) use no cookies or local storage at all; choosing “Essential only” on our cookie notice switches them off too, without losing any functionality. We set no third-party advertising or tracking cookies.
12. Anonymous page counts
We count visits with Cloudflare Web Analytics, which is built to be privacy-first: it sets no cookies, uses no local storage, does not fingerprint your device and does not follow you across other websites. It gives us only totals — for example how many visits a page had, which site sent the visitor, the country, and the type of browser and device. We cannot identify you from these figures and they are never linked to your account. Page counts are switched off if your browser sends “Do Not Track” or Global Privacy Control, if you chose “Essential only” on our cookie notice, and on print copies. See Cloudflare’s privacy policy.
13. Searches that find nothing
When a search on this site finds no page at all, we record the words searched so we can see what is missing and write it. We keep only the words and a count for each calendar month — not who searched, your account, your IP address, the page you were on or the time. Before the words leave your device, and again on our server, they are lower-cased and cut to 60 characters, and they are thrown away entirely if they contain a run of 6 or more digits (such as an NHS number or phone number), an email address, a postcode or a date. A search is sent at most once per page visit, and only after you stop typing. The monthly counts are deleted automatically after 12 months. Please never type patient-identifiable information into the search box.
14. Changes
We may update this policy and will post the new version here with a revised date.