Legal

Privacy Policy

How MedicHut LTD collects, uses, stores and protects your personal data on the MedicHut UCAT Skills Trainer - written in plain English, fully UK GDPR compliant.

Who we are

MedicHut LTD is the Data Controller for your data. We are registered in the United Kingdom with the Information Commissioner's Office (ICO registration ZB092577). The data controller is Syed Bukhari. Contact: team@medichut.com · +44 7851 862356.

What data we collect

Account details: name, email, password hash, sign-in provider (Google).
Profile preferences: target UCAT score, exam date, study-plan settings.
Practice activity: drill attempts, scores, timing, streaks, XP, mock results and free-text answers you submit inside trainer drills (e.g. SJT reasoning, inference justifications).
AI conversations: messages you send to Idris (our AI tutor) and to the in-drill Performance Coach, plus the model's replies.
Feedback you submit through the in-app feedback widget.
Standard log data: IP address, browser, device and basic analytics.

How we use your data

To run your account and deliver the trainer (drills, mocks, progress, streaks).
To personalise study plans, level progression and the daily question.
To power Idris and the Performance Coach via our AI provider (see below).
To improve the platform - debug issues, fix bugs and refine question banks.
To contact you about MedicHut services you may be interested in (you can opt out at any time).

AI features and your data

The MedicHut UCAT Skills Trainer uses AI models to provide adaptive coaching, the Idris tutor chat and worked-answer explanations. When you use these features:

The text of your message (and, where relevant, the drill question and your answer) is sent to a third-party AI provider (currently Google and OpenAI via the Lovable AI Gateway) so the model can generate a reply.
We do not send your name, email or other directly identifying account details to the AI provider.
The AI providers process this data only to return a response and do not use it to train their models on identifiable user content.
Idris chat is session-only - we do not permanently store the chat transcript on your account.
AI replies can be wrong. They are study aids, not medical, legal or admissions advice.

Question banks and intellectual property

All UCAT-style questions, mocks, skills checks, explanations and trainer drills on the MedicHut UCAT Skills Trainer are original content created by MedicHut LTD. They are not past UCAT questions. UCAT® is a registered trade mark of the UCAT Consortium and we are not affiliated with or endorsed by them. Question content is provided for your personal study only and may not be copied, redistributed, scraped or used to train other AI systems.

Who can access your data

Access is strictly controlled. Your data is shared only with the processors required to run the service - our cloud hosting and database provider, our AI gateway, and email delivery providers - and with regulators where legally required. We never sell or rent your personal data.

Where your data is stored

Your data is stored on secure cloud infrastructure with encryption in transit and at rest. Some processors (notably AI providers) may process data outside the UK; in those cases we rely on UK GDPR-approved safeguards.

How long we keep your data

Account, attempt and progress data is kept for as long as your account is active and for a reasonable period afterwards (up to 7 years) for accounting and dispute-resolution purposes. You can request deletion at any time.

Your rights under UK GDPR

Request access to your personal data
Request correction or erasure of your personal data
Object to or restrict processing
Request data portability
Withdraw consent at any time

Email team@medichut.com to exercise any of these rights. If you remain dissatisfied you can complain to the Information Commissioner's Office: www.ico.org.uk.

Cookies

We use a small number of essential cookies to keep you signed in and to remember your preferences. See our Cookie Policy for details.

Last updated: May 2026.