What happens to your data.

MedOffr is run by one person in the UK, not a company. The data controller for everything described here is Nitish Nandakumar, trading as MedOffr, 48 Manorville Road, Hemel Hempstead HP3 0AP, United Kingdom. For anything on this page — a question, a correction, a deletion request — write to support@medoffr.com or use the contact form.

There is no advertising, no tracking pixel, no analytics profile and no third-party cookie anywhere on this site. Page views are counted with Vercel Web Analytics and page load times measured with Vercel Speed Insights; neither sets cookies or records anybody individually. The only things stored in your browser are the ones that make it work: the sign-in session; if you are signed out, the finder entries and shortlist you typed in; the schools whose pages you opened most recently, for the “recently viewed” list; your theme and font choices from the footer; a draft of your personal statement while you write it on the review page, until you clear it or submit; and, if you install MedOffr as an app, a signed-out copy of the finder so it opens with no signal. They stay on your device and are never sent to this site’s database. The QR codes and calendar files the site offers are made in your browser too.

This is the part that matters most, so it gets its own section.

• It is deleted automatically after 90 days. Every review carries a deletion date set when you submit it, and a scheduled job removes the row — the statement text and the review of it together. This is not a promise to delete it if asked; it happens on its own.
• It is sent to Anthropic to be marked against the published rubric, and to nobody else. Anthropic does not use content submitted through its API to train its models, and deletes it from its systems within 30 days. The exception is text its automated safety checks flag as breaking its usage policy, which Anthropic can keep for up to two years.
• Health and personal circumstances need your explicit consent. A statement can mention illness, disability, caring for someone, resits or other circumstances. Under UK GDPR that is special category data, so it is only processed with your explicit consent: you tick a box saying so each time you submit, and a review cannot be submitted without it. You can withdraw that consent at any time by asking for the review to be deleted, and it will be, statement and all.
• It is never shown to anyone else, never used as an example, and never published. Row-level security in the database means your reviews are readable only by your own account.
• You have to be signed in to submit one. A review costs real money to produce, so it is tied to an account and a credit; there is no anonymous route that would leave text floating around unattached to anyone.

Five services, each doing one job. No data is sold, and none of it is shared with universities, UCAS, schools or anyone else — a verdict on this site has no connection to your real application.

You can create a read-only link to your own profile to show a parent or teacher. Anyone with that link can see the name, school type, entered grades and shortlist on it — so treat it as public, and only send it to people you mean to. It shows no email address, no account details and no personal statement. Clearing the link in your dashboard switches it off immediately and permanently.

In My application you can choose to share how each of your Medicine choices went, so MedOffr can check how often its interview verdicts come true. It is off unless you turn it on.

If you turn it on, each report holds:

• the school, and whether you were interviewed, made an offer or rejected
• the finder's verdict for that school when you reported it
• the figures it read: your UCAT total and SJT band, your predicted grades as a band (such as A*AA), how many GCSEs you have at 9 and at 8 or 9, your school type, and whether you are resitting, applying as international or ticked any contextual indicator (not which one)

Never your name, email, personal statement or anything you type. MedOffr only looks at the reports added together, never one student's on its own, and never publishes anything that could identify you.

The reason is your consent, and nothing else. Stop sharing whenever you like: your reports are deleted at once, and they go with your account if you delete it. The reports are kept in the same database as your account, readable only by you and, added together, by MedOffr.

A medical society or school can show a MedOffr school card on its own website. The card is loaded from this site, so Vercel logs the request like any other (including the viewer’s IP address), but it sets no cookies, runs no analytics and collects nothing from the person looking at it.

Most people applying to Medicine are 17 when they do it, and this site is built on the assumption that its users are teenagers. In practice that means it collects as little as possible: the whole school finder works with no account, and nothing is taken from you that is not needed to do the thing you asked for. There is no profiling, no advertising and no nudging designed to get more data out of you.

If you are under 13, do not create an account — ask a parent or guardian to contact me instead. A parent or guardian can ask for anything held about their child to be shown to them or deleted, using the address above.

Under UK GDPR you can ask for a copy of what is held about you, ask for it to be corrected, ask for it to be deleted, ask for it to be restricted or object to it being processed, and ask for a copy in a portable format. In practice, one email to support@medoffr.com does all of these, and the answer comes back within 30 days.

Deleting your account removes the account, the saved profile, the shortlist, your application choices and offers, every review and every statement, and it cannot be undone. Records of payments are the exception: they are kept for as long as tax law requires, and Stripe keeps its own. The legal bases are: contract for running the account and the reviews you asked for, explicit consent for anything a statement says about your health or personal circumstances, legitimate interests for keeping the site working and secure and for answering your messages, and legal obligation for keeping records of payments. Data is stored in the UK and the EU, except where a processor above operates in the US under an approved transfer mechanism.

If you are unhappy with how it has been handled, tell me first — and if that does not fix it, you can complain to the Information Commissioner’s Office at ico.org.uk.

When this changes, the date at the top of the page changes with it. If a change affects something already collected — keeping statements longer, say, or adding a processor — it will be said plainly on the site rather than slipped into a new version.