Privacy Policy

Last updated: 9 July 2026

Who we are

VivaVoice Limited ("VivaVoice", "we", "us") is a company registered in England and Wales (company no. 17136948) and provides AI-assisted exam practice for UK medical examinations. We are the data controller for the personal data described in this policy, and are registered with the UK Information Commissioner's Office (ICO). You can reach us at [email protected].

What we collect

• Account details — your name and email address.
• Exam interest — which exam(s) you're preparing for, and any waitlist or early-access interest you register.
• Usage analytics — how you use the site and product, collected only after you accept analytics cookies.
• Payment information — handled by Stripe. We do not see or store full card details.
• Practice content — your spoken answers and the feedback generated, used to give you results and improve your preparation.

How we use it

To provide and run the service (accounts, practice, feedback, results); to process payments and give access; to send you the service and early-access communications you've asked for; to understand and improve how the product is used; and to keep the service secure.

Lawful bases

We rely on: consent (analytics cookies; marketing emails to people who opt in); contract (running your account and providing what you've paid for); and legitimate interests (securing and improving the service). For existing customers we may send related-product updates under the PECR soft opt-in, which you can decline at any time.

Who we share it with

We use trusted processors who act on our instructions: Stripe (payments), Supabase (database hosting), Railway (application hosting), Google Analytics (usage analytics, consent-gated), and MailerLite (marketing email to opted-in users). We do not sell your personal data.

Cookies & analytics

We use essential cookies to keep you signed in. Analytics cookies load only after you accept them in our cookie banner; until then no analytics are collected. You can change your choice at any time.

How long we keep it

Account data is kept while your account is active. Waitlist / early-access entries are deleted within 12 months of that module launching. We keep records we are legally required to retain (e.g. payment records) for the period the law requires.

Your rights

You have the right to access, correct, delete or port your data, to object to or restrict certain processing, and to withdraw consent at any time. To exercise any of these, email [email protected].

Complaints

If you have a concern we haven't resolved, you can complain to the UK Information Commissioner's Office (ICO) at ico.org.uk.

Contact

Questions about this policy? Email [email protected]. See also our Terms of Service.