Privacy Policy

AuroPrep (“we”, “us”) provides an online question bank and study tools for UK ophthalmology exams. We are the data controller for the personal data described here. You can reach us about privacy at privacy@auroprep.com.

• Account & profile: email, password (stored only as a secure hash) or Google sign-in identifier, and the name, title, training grade and country you choose to provide.
• Study activity: your answers, scores, sessions, bookmarks, spaced-repetition schedule, topic mastery, comments you post, and your target exam and sitting date.
• AI tutoring: the questions you ask the AI tutor and the answers you submit for AI marking, together with the AI’s response (kept as a clinical-safety audit record).
• Billing: your subscription status and payment records. Card details are entered directly with our payment providers and are never seen or stored by us.
• Consent: a record that you accepted this policy, including the version and time.
• Technical & security: our web server keeps a short-lived access log of requests - your IP address, the time, the page or endpoint requested, the response status, and your browser’s user-agent and referring page. We use it only to investigate abuse, outages and security incidents. It is deleted after 30 days, and sign-in cookies and authorisation headers are stripped before anything is written to it.

• To provide the service (contract): running your account, delivering questions, tracking progress and processing your subscription.
• Consent: creating your account on the terms of this policy. You can withdraw consent by deleting your account at any time.
• Legitimate interests: securing the platform, preventing abuse, and keeping a clinical-safety audit trail for AI interactions and content moderation.
• Direct marketing (legitimate interests): occasionally emailing you about the AuroPrep question banks - for example if you started a checkout and did not finish, or used your free questions and stopped. We only email people who registered with us, only about our own exam preparation, and every such email carries a one-click unsubscribe link. You can object at any time and we will stop.
• Legal obligation: retaining financial records for tax and accounting.

We use a small number of processors, and share only what each needs to do its job:

• Stripe / Razorpay - payment processing. They collect your card and billing details directly on their own checkout.
• Microsoft Azure OpenAI - powers the AI tutor and AI marking. Your question or answer plus the relevant study material is sent to generate a response.
• Google - only if you choose “Sign in with Google”, to verify your identity.

Our AI provider is also used to draft the marketing emails described above. What it is given is a summary of your activity with us - what you practised, what you bought or started to buy - so the message is relevant. It is never given your study answers for that purpose, and a person reads and approves every email before it is sent.

We do not sell your personal data, and we do not use it for advertising.

We do not use advertising or analytics cookies. To keep you signed in, we store sign-in tokens in your browser’s local storage - this is strictly necessary for the service you asked for, so no consent banner is required. If this ever changes, we will ask for your consent first.

We count how our pages are used - which page was viewed, which link brought you here, and whether a visit led to creating an account or buying access. This runs on our own servers. There is no third-party analytics service, no advertising network, and nothing is stored on or read from your device, which is why you see no cookie banner.

To tell one visit from another without identifying you, each visit is labelled with a code worked out from your IP address and browser type using a secret key. Neither your IP address nor your browser type is stored with it. The key is random, held only in memory, and replaced every day, so the code cannot be linked back to you and cannot be followed from one day to the next - by us or by anyone who asks us. Visits are not linked to your account, so this data is not part of what we delete when you delete your account. We rely on legitimate interests (understanding whether our own site works), and the records are kept for up to 13 months so we can compare one year with the next.

Some processors (for example our AI provider) may process data outside the UK. Where they do, we rely on the provider’s approved safeguards (such as UK/EU standard contractual clauses) to protect your data.

• Account and study data: until you delete your account.
• AI interaction audit logs: for a limited retention period, after which they are deleted.
• Web server access logs (including IP addresses): 30 days, then automatically deleted.
• Site measurement records (page, referring site, daily visit code): 13 months, then automatically deleted. They are not linked to your account.
• Financial records: kept (without your identifying details where possible) for as long as the law requires, typically about six years.
• Free-sample record: a one-way cryptographic fingerprint of the email address that claimed a free sample, kept indefinitely. It survives account deletion by design (see below).
• Marketing emails we drafted or sent to you: deleted when you delete your account.
• Unsubscribe record: if you opt out of marketing email, we keep your email address on a suppression list indefinitely. It also survives account deletion (see below).

The free-sample record is the one thing we keep after you delete your account. It is not your email address: it is an irreversible fingerprint of it, holding no name, no account reference and nothing that can be read back. Its only use is to answer one question — has this inbox already had its one free sample? We keep it on the basis of our legitimate interest in preventing the free tier being claimed over and over from the same mailbox, which is what keeps it available to everyone else. If you would like it removed, contact us.

The unsubscribe record is the other. If you ask us to stop emailing you, we have to remember the address in order to keep that promise - deleting it would simply make you contactable again, which is the opposite of what you asked for. It holds nothing but the address, the reason and the date, and it is not linked to any account. If you later want to hear from us again, contact us and we will remove it.

Under UK data protection law you can:

• access a copy of your data - use “Download your data” on your Account page;
• correct your details - edit your profile or change your email on your Account page;
• erase your account and personal data - use “Delete account” on your Account page;
• restrict or object to certain processing, and withdraw consent;
• receive your data in a portable, machine-readable format (the export above is JSON).

For anything you can’t do in the app, email privacy@auroprep.com. We aim to respond within one month.

If you have a concern about how we handle your data, please tell us first so we can put it right. You also have the right to complain to the UK Information Commissioner’s Office (ICO).

We may update this policy. When we make material changes we will update the version and date above and, where appropriate, ask you to review the new version.