Privacy Policy.

Last updated: 19 September 2026

This policy explains what personal information SCA Revision collects, why, who we share it with and the rights you have. It covers both of our websites: www.scarevision.co.uk (written cases, videos, guides and membership) and www.scarevision.ai (AI patient practice and AI marking).

1. Who we are

SCA Revision is owned and operated by LaneApps Limited, a company registered in England and Wales (company number 08950053). LaneApps Limited is the "data controller" for the information described here.

Address: Holmfirth, Huddersfield
Registered with the Information Commissioner's Office (ICO), registration number ZC153338
Contact for any privacy question or request: info@scarevision.co.uk

2. The information we collect

Information you give us

  • Account details – your name, email address and password. Passwords are stored in scrambled (hashed) form; we cannot read them. If you choose "Continue with Google", Google tells us your name, email address and Google account identifier. We never see your Google password.

  • Exam details you choose to add – for example your exam date, which we use to tailor your revision.

  • Messages you send us – emails, feedback forms and support requests.

Information created when you use the service

  • Practice activity – which cases you open or complete, your progress, scores and revision history.

  • AI patient consultations – when you speak to an AI patient, your speech is converted to text so the AI patient can reply. We keep the written transcript of the consultation, the AI-generated feedback and your scores so that you can review them later.

  • AI marking – when you record a role-play for marking, the recording is converted to a written transcript, which we keep together with the feedback and scores.

  • Credits and purchases – your credit balance, how credits were used, and a record of purchases and refunds.

  • Technical information – IP address, browser and device type, the pages you visit, sign-in times and error reports. We use this to keep accounts secure and to fix problems.

Payment information

Card payments are taken by Stripe (AI credits) and by Squarespace (membership subscriptions). Your card details go directly to them. We never see or store your full card number. We receive confirmation of the payment, the amount, and the name and email address used.

3. Audio and recordings – please read

  • Our AI patients are fictional. Please never mention real patients, or include information that could identify a real patient, in any consultation or recording.

  • AI marking is for role-play only. Do not record a consultation with a real patient. If you record with a study partner, their voice is processed too, so please make sure they are happy to be recorded before you begin. We ask you to confirm this on the recording page.

  • We do not record or keep your audio. Your speech is sent securely to our speech-recognition providers only so that it can be turned into text. The written transcript is the only record we keep.

4. How we use your information, and our legal basis

What we doLegal basis (UK GDPR)Create and run your account; provide cases, AI consultations, marking, feedback, progress tracking and creditsPerforming our contract with youTake payments, issue refunds and keep financial recordsContract; legal obligationKeep the service secure, prevent misuse, diagnose faults and improve our cases and toolsOur legitimate interests in running a safe, reliable serviceSend service messages (sign-in links, password resets, receipts, important changes)ContractSend occasional follow-ups, such as asking how your exam went, or news about SCA RevisionLegitimate interests, or your consent where the law requires it. You can opt out at any time using the link in the email or by emailing us.Process a study partner's voice during AI markingConsent (given before recording)

We do not sell your personal information, and we do not use it for advertising on other websites.

AI training. AI patient replies, feedback and marking are produced using OpenAI's business (API) service, not the consumer ChatGPT app. OpenAI states that information sent through this service is not used to train its models, and that it may hold a security log of the content for up to 30 days before deleting it.

5. Who we share information with

We only share information with companies that help us run SCA Revision, and only as far as they need it to do their job for us:

  • Website, accounts and database – Squarespace (scarevision.co.uk and membership), MemberSpace (sign-in for the AI site), Supabase (accounts and database, hosted in London), Vercel (website hosting), Airtable and Zapier (records and automation), Cloudflare (network and video delivery).

  • Payments and accounts – Stripe, Squarespace Payments, and our accounting software.

  • AI consultations and marking – Daily / Pipecat (live audio connection), Deepgram and AssemblyAI (speech to text), OpenAI and Anthropic (AI patient responses, feedback and insights), ElevenLabs, Inworld, Cartesia and Google (AI patient voices).

  • Email – Resend and Microsoft (sending service emails).

  • Sign-in with Google – Google, if you choose that option.

  • Icons and fonts – Font Awesome and Google Fonts, which receive your IP address when the pages load.

We may also share information if the law requires it, or to protect our rights, our members or the public.

Transfers outside the UK. Some of these companies are based in the United States or elsewhere. Where information leaves the UK we rely on safeguards recognised by UK law, such as the UK–US Data Bridge or the International Data Transfer Agreement.

6. How long we keep information

  • Your account, progress, transcripts, feedback and credits – for 12 months after your last sign-in (using the service while signed in, such as doing a consultation, counts as signing in). We keep them only so that you can come back and pick up where you left off. After that we delete the information or make it anonymous. Credits expire 12 months after purchase, so an account that has not been used for 12 months no longer holds any valid credits.

  • Purchase and refund records – for six years after the end of the financial year, as required for tax and accounting.

  • Support emails – these stay in our mailbox and are not deleted automatically. You can ask us to delete yours at any time.

You can ask us to delete your account and practice history at any time (see section 8).

7. Cookies and similar technologies

We use cookies and browser storage that are needed to make the sites work: keeping you signed in, remembering choices such as "don't show this again", and temporarily storing case lists so that pages load quickly. scarevision.co.uk is built on Squarespace, which also sets its own functional and performance cookies. We do not use advertising cookies. You can block or delete cookies in your browser settings, but you will not be able to stay signed in without the essential ones.

8. Your rights

Under UK data protection law you have the right to:

  • ask for a copy of the information we hold about you;

  • ask us to correct anything that is wrong;

  • ask us to delete your information;

  • ask us to restrict, or object to, how we use it;

  • ask for your information in a portable format;

  • withdraw consent at any time, where we rely on consent.

To use any of these rights, email info@scarevision.co.uk. We will reply within one month and there is no charge.

If you are unhappy with how we have handled your information, please tell us first so that we can put it right. You also have the right to complain to the Information Commissioner's Office: ico.org.uk/make-a-complaint or 0303 123 1113.

9. Security

All pages are served over an encrypted connection. Access to member information is limited to the people who need it to run the service. No system can be guaranteed completely secure; if a breach ever put your rights at risk we would tell you and the ICO as the law requires.

10. Age

SCA Revision is for doctors preparing for the MRCGP. You must be 18 or over to hold an account, and we do not knowingly collect information from anyone under 18.

11. Changes to this policy

We will update this page if what we do changes, and we will email members about any significant change. The date at the top shows when it was last updated.