← Back to MMI Ready

Privacy policy

Last updated: 15 October 2026

The short version

Who I am

MMI Ready is run by Yousef, a medical student at UCL, as an independent project. I'm responsible for how your personal data is used on this site (the "data controller"). It isn't run by, or connected to, any university or medical school.

To contact me about anything in this policy, use the enquiry form on the Book a mock page (choose "Not sure yet" and say it's a privacy request) or message @medwithyousef on TikTok.

What data is used, and why

1. Your practice history (stays in your browser)

Your answers, scores, feedback, mock circuit results, custom stations and settings (like dark mode) are saved in your browser's local storage on your own device. I can't see them. They stay until you clear your browser data, and they don't move between devices.

2. Accounts (optional)

If you create an account, I store your first name, email address and a securely hashed password (I never see your password), plus a copy of your practice history, scores, mock results and custom stations so you can use them on any device. The basis for this is providing the account you asked for (contract). Accounts and saved progress are stored with Supabase, which provides the database and login system for this site.

You can delete your account at any time from the Account page. This permanently deletes your account and the progress saved to it.

3. Newsletter (optional)

If you sign up for the newsletter, either with an account or with just your email address, I'll send you practice stations and interview tips. The basis for this is your consent. You can unsubscribe at any time from your Account page, by using the unsubscribe link in any email, or by contacting me. I keep your email for the newsletter only until you unsubscribe.

4. AI feedback and role-plays (sent to Google)

When you click "Get AI feedback", finish a mock circuit, or talk to an AI actor in a role-play, the following is sent through this site's server to Google's Gemini AI so it can mark your answer or reply to you:

This site's server passes this straight to Google and doesn't keep a copy. This site currently uses Google's free Gemini service, and under Google's terms for that service, Google may store this content and use it to improve its products, which can include human review. So please don't say or type personal details, like your full name, school or anything about your health, in your answers.

The reason for this processing is to give you the feedback you asked for (legitimate interests). If you'd rather nothing is sent, you can still use the stations and mark yourself without asking for AI feedback.

5. Speech-to-text (your browser)

The live transcript uses your browser's built-in speech recognition. In some browsers, including Google Chrome, your browser sends the audio to its own provider (for Chrome, Google) to turn it into text. This is handled by your browser under its own privacy policy.

6. Enquiries about mocks

If you fill in the enquiry form, I receive your name, email address, who you're enquiring as, what you're interested in, and anything else you choose to write. The form is processed by Formspree, which emails it to me and stores a copy. I use these details only to reply about your enquiry and arrange a mock, and the basis for this is your consent, which you give by ticking the box. I'll delete enquiries within 12 months of our last contact, or sooner if you ask.

7. Website hosting and page loading

The site is hosted by Vercel, which, like all web hosts, processes basic technical information such as your IP address to deliver the site and keep it secure. Fonts are loaded from Google Fonts, and the charts on the Progress page are loaded from cdnjs (run by Cloudflare), so those services also see your IP address when the page loads.

Cookies

This site doesn't use advertising or analytics cookies. It uses your browser's local storage only to remember your practice history and settings, and to keep you logged in if you have an account, which is needed for the site to work. If I add analytics or advertising tools in future, I'll ask for your permission first and update this policy.

Who your data is shared with

Only the services above, which help run the site: Supabase (accounts, saved progress and newsletter sign-ups), Google (AI feedback, text-to-speech and fonts), Formspree (enquiries), Vercel (hosting) and Cloudflare (cdnjs). Some of these may process data outside the UK, under their own safeguards. I don't sell your data or share it with anyone else, unless the law requires it.

Under 18s

MMI Ready is aimed at people applying to medical school, many of whom are 16 or 17. It isn't intended for children under 13. If you're under 18, please talk to a parent or guardian before booking a mock, and don't share personal details in your practice answers.

Your rights

Under UK data protection law you have the right to ask for a copy of the personal data I hold about you, to have it corrected or deleted, to object to how it's used, and to withdraw your consent at any time. Contact me using the details above. You can delete your account yourself from the Account page. Practice history saved in your browser can be deleted at any time by clearing your browser's site data.

If you're unhappy with how your data has been handled, you can complain to the Information Commissioner's Office at ico.org.uk.

Changes to this policy

If this policy changes, for example when payments are added, I'll update this page and the date at the top.

Terms of use · MMI Ready