What happens to your data.

MedOffr is run by one person in the UK, not a company, and that person is the data controller for everything described here. For anything on this page — a question, a correction, a deletion request — write to nitishnandakumar0@gmail.com or use the contact form.

There is no advertising, no tracking pixel, no analytics profile and no third-party cookie anywhere on this site. The only things stored in your browser are the ones that make it work: the sign-in session, and — if you are signed out — the finder entries and shortlist you typed in, which stay on your device.

This is the part that matters most, so it gets its own section.

• It is deleted automatically after 90 days. Every review carries a deletion date set when you submit it, and a scheduled job removes the row — the statement text and the review of it together. This is not a promise to delete it if asked; it happens on its own.
• It is sent to Anthropic to be marked against the published rubric, and to nobody else. Anthropic does not use content submitted through its API to train its models.
• It is never shown to anyone else, never used as an example, and never published. Row-level security in the database means your reviews are readable only by your own account.
• You have to be signed in to submit one. A review costs real money to produce, so it is tied to an account and a credit; there is no anonymous route that would leave text floating around unattached to anyone.

Four services, each doing one job. No data is sold, and none of it is shared with universities, UCAS, schools or anyone else — a verdict on this site has no connection to your real application.

You can create a read-only link to your own profile to show a parent or teacher. Anyone with that link can see the name, school type, entered grades and shortlist on it — so treat it as public, and only send it to people you mean to. It shows no email address, no account details and no personal statement. Clearing the link in your dashboard switches it off immediately and permanently.

Most people applying to Medicine are 17 when they do it, and this site is built on the assumption that its users are teenagers. In practice that means it collects as little as possible: the whole school finder works with no account, and nothing is taken from you that is not needed to do the thing you asked for. There is no profiling, no advertising and no nudging designed to get more data out of you.

If you are under 13, do not create an account — ask a parent or guardian to contact me instead. A parent or guardian can ask for anything held about their child to be shown to them or deleted, using the address above.

Under UK GDPR you can ask for a copy of what is held about you, ask for it to be corrected, ask for it to be deleted, ask for it to be restricted or object to it being processed, and ask for a copy in a portable format. In practice, one email to nitishnandakumar0@gmail.com does all of these, and the answer comes back within 30 days.

Deleting your account removes the account, the saved profile, the shortlist, every review and every statement, and it cannot be undone. The legal bases are: contract for running the account and the reviews you asked for, legitimate interests for keeping the site working and secure and for answering your messages, and legal obligation for keeping records of payments. Data is stored in the UK and the EU, except where a processor above operates in the US under an approved transfer mechanism.

If you are unhappy with how it has been handled, tell me first — and if that does not fix it, you can complain to the Information Commissioner’s Office at ico.org.uk.

When this changes, the date at the top of the page changes with it. If a change affects something already collected — keeping statements longer, say, or adding a processor — it will be said plainly on the site rather than slipped into a new version.