The short version
- We collect what we need to run your account, deliver your courses and process your purchases — nothing more.
- We do not sell your data, and we do not show third-party advertising or track you across other apps and websites.
- You can access, correct or delete your data at any time — including deleting your whole account inside the app.
1.Who we are
Vision Medical Academy (“we”, “us”, “our”) publishes the Vision Medical Academy app (the “App”), a video-learning platform for medical courses, colleges and course packages. We are the data controller for the personal data described in this policy, which means we decide why and how it is used.
This policy covers the App on iOS and Android and this policy website at privacy-policy.visionmedicalacademy.uk. It does not cover the App Store, Google Play, or other websites we link to — those organisations have their own privacy policies.
If you have a question or a request, email us at info@visionmedicalacademy.uk.
2.Information we collect
You can browse the course catalogue without an account. Most of the information below is collected only when you create an account, buy access, or contact us.
Account details
Your email address, your password (stored only as a secure hash by our authentication provider — we never see it), an optional display name, your preferred language (English, Arabic or Sorani Kurdish), and your notification choices. If you choose to sign in with Google or Apple, we receive your name and email address from that provider.
Your learning activity
The courses, colleges and packages you open, the courses you save as favourites, how far you have watched each video, whether you have completed it, and the access period you have bought.
Purchases and credits
Your credit balance, your transaction history, store product identifiers, purchase and refund status, and the identifiers our purchase partner uses to validate a receipt. Payments are processed by Apple or Google — we never receive or store your card or bank details.
Device and technical information
If you allow notifications, a push token and your platform (iOS or Android). We also record app version, operating system, language, IP address and basic server logs, which we use for security, rate limiting and diagnosing faults.
Messages you send us
Emails and support requests, including their contents and attachments you choose to send.
What we do not collect: your location, contacts, photos, microphone or camera, advertising identifiers for cross-app tracking, or health records. The App is for professional education — please do not send us patient-identifiable information in a support message.
3.How and why we use it
We only use your information for the purposes below, and only where we have a lawful basis to do so under the UK GDPR.
| What we do | Information used | Lawful basis |
|---|---|---|
| Create and secure your account, sign you in, reset your password | Account details | Performance of a contract |
| Deliver courses and video playback, remember your progress, show your library and access expiry | Learning activity, account details | Performance of a contract |
| Take payments, add credits, record purchases and refunds | Purchases and credits, account details | Performance of a contract; legal obligation (tax and accounting records) |
| Send the notifications and reminders you have asked for | Push token, notification choices | Consent (device permission); legitimate interests for essential service messages |
| Answer support requests and resolve payment problems | Messages, account details, purchases | Performance of a contract; legitimate interests |
| Keep the service secure, prevent fraud and abuse, and fix faults | Technical information, account details, purchases | Legitimate interests |
| Understand which features are used so we can improve the App | Analytics events (see section 4) | Legitimate interests |
| Meet our legal, tax and regulatory duties | Purchases and credits, account details | Legal obligation |
Where we rely on legitimate interests, we have weighed our interests against yours and put safeguards in place; you can object at any time (see section 9). Where we rely on consent — for example device notifications — you can withdraw it at any time without affecting anything done before then.
We do not make decisions about you by automated means that have a legal or similarly significant effect.
4.Analytics
We record a small number of product events — for example, that a screen was opened, that a purchase step was reached, or that a playback error occurred. These events carry random identifiers and short category values. They never include your email address, your name, the contents of a receipt, or the video itself.
We use this information in aggregate to find broken flows, understand which courses are useful, and decide what to improve. We do not use it to advertise to you, we do not combine it with data from other companies’ apps or websites, and we do not sell it.
6.International transfers
Some of our providers store or process data outside the UK, including in the United States and the European Union. Where that happens, we rely on an adequacy decision or on appropriate safeguards — such as the UK International Data Transfer Addendum or the European Commission’s Standard Contractual Clauses — together with technical measures such as encryption in transit.
You can ask us for more detail about the safeguards used for a particular transfer.
7.How long we keep it
- Account, profile and learning data — while your account is open, then deleted within 30 days of a deletion request.
- Backups — removed within 90 days.
- Purchase and tax records — while your account is open, and for up to 6 years after the transaction where tax law or our payment partners require it. We keep the minimum needed: order reference, amount and date.
- Support correspondence — 24 months.
- Server and security logs — 30 days, unless we need them to investigate a security incident.
- Push tokens — removed when you sign out, turn notifications off, uninstall the App, or delete your account.
We may keep information longer where the law requires it, or where it is needed to establish, exercise or defend a legal claim.
8.Security
Your data travels over encrypted connections (HTTPS/TLS). Passwords are stored as hashes, database access is restricted so that each person can reach only their own records, server keys stay on the server, and staff access is limited to those who need it to support you.
No system can be completely secure, but if a breach is likely to affect your rights we will tell you and the regulator as the law requires.
9.Your rights
Under data protection law you have the right to:
- AccessA copy of the personal data we hold about you.
- CorrectionHave inaccurate or incomplete data corrected.
- DeletionHave your data erased, subject to our legal duties.
- RestrictionAsk us to pause how we use your data.
- PortabilityReceive your data in a machine-readable format.
- ObjectionObject to processing based on our legitimate interests.
- Withdraw consentChange your mind about anything you consented to.
- ComplainRaise a concern with a supervisory authority.
To use any of these rights, email info@visionmedicalacademy.uk. We respond within one month and do not charge a fee. We may ask you to confirm your identity first, so that we do not hand your data to someone else.
If you are unhappy with how we have handled your data, you can complain to the UK Information Commissioner’s Office at ico.org.uk or on 0303 123 1113. If you live outside the UK, you can complain to your local data protection authority. We would always rather hear from you first, so please contact us before escalating.
10.Deleting your account
You can delete your account inside the App: open Profile → Account → Delete account and confirm. You can also email your request from your registered address to info@visionmedicalacademy.uk. We will verify that the request comes from the account holder and complete it within 30 days.
Deleting your account removes your profile, wallet, learning progress, favourites, notifications and notification tokens, and ends any access you have bought. Our payment partners (Apple, Google and RevenueCat) keep their own transaction records under their privacy policies, and we keep the minimum order information the law requires for tax and refunds, for up to 6 years. Aggregated analytics that no longer identify you may also remain. Deleting the App from your phone does not delete your account — use the in-app option or email us.
11.Children
The App is intended for adults and students aged 16 and over. It is not directed at children under 16, and we do not knowingly collect their personal data. If you believe a child under 16 has created an account, contact us and we will delete it.
13.Changes to this policy
We may update this policy when the App or the law changes. We will always change the date at the top of this page. If a change significantly affects how we use your data, we will tell you in the App or by email before it takes effect.
14.Contact us
Questions, requests or complaints about privacy — email us and we will get back to you, usually within 5 working days.
info@visionmedicalacademy.ukPlease put “Privacy” in the subject line so your message reaches the right person.