Overview
This policy describes how ucat (this website and its related services, including optional browser extension features that connect to your account) handles personal information. We aim to be straightforward about what we collect, why we collect it, and who may process it on our behalf.
Information we collect
- Account and authentication. If you create an account or sign in, we process identifiers such as your email address, and—if you use Google sign-in, profile details provided by Google (for example your name and profile image) according to your Google account settings. Email and password credentials are handled by our authentication provider; we do not store your password in plain text.
- Sessions and security. We issue session tokens so you can stay signed in and access protected parts of the site. Related metadata may include timestamps and device or browser signals commonly used to protect accounts from abuse.
- Extension handoff. If you connect the optional companion browser extension, we may generate a short-lived, one-time code on the website that links your browser session to your account. That flow is designed to avoid sharing your password with the extension directly.
- Summarise tool content. When you use features that evaluate a written summary, the paragraph text you are working with and the summary you submit are sent to our servers for processing as described below.
- Justify tool content. When you use the Justify feature, the passage text, question stem, and answer choices for the current question are sent to our servers for processing as described below.
- Analytics. We use Vercel Analytics to understand aggregate traffic and performance (for example page views and Core Web Vitals). This is configured as privacy-friendly analytics and does not use cookies for personal profiling in the way traditional ad networks often do.
How we use information
We use the information above to:
- provide and secure accounts, sessions, and the dashboard;
- connect the optional browser extension to your account via the handoff flow;
- run the Summarise feedback feature (scoring and short written feedback on your summary compared to the source paragraph);
- run the Justify feature (identifying and explaining the correct VR answer based on the passage, question, and choices);
- operate, monitor, and improve reliability and security of the service.
Third-party services
We rely on trusted infrastructure and service providers. Depending on how you use the product, data may be processed by:
- Convex : real-time backend, database, and authentication integration for this application.
- Vercel : website hosting and analytics as described above.
- Google : if you sign in with Google, Google processes sign-in according to its terms and privacy policy. For the Summarise and Justify features, paragraph, question, and summary or answer-choice text are evaluated using Google's Gemini models via our server-side integration; that content leaves your device only when you trigger the feature while signed in.
Each provider has its own privacy documentation; we encourage you to review those if you want detail on subprocessors and regions.
Browser extension
The optional extension stores sign-in material locally in your browser so tools can run alongside supported practice sites. It only accesses those practice origins to power on-page study aids. Extension permissions and behaviour are also described in the Chrome Web Store listing when you install from there.
Retention and security
We keep information only as long as needed for the purposes above, including legal, security, and operational requirements. Handoff codes are short-lived by design. We use industry-standard measures appropriate to the nature of the service; no method of transmission or storage is perfectly secure.
Your choices
You may sign out of your account, request deletion or correction of personal information we hold, or ask questions about this policy. Depending on where you live, you may have additional rights under local privacy laws. If you are in Australia, the Australian Privacy Principles may apply to your personal information.
For privacy-related requests, contact: genmeddent@gmail.com.
Children
UCAT preparation is typically used by older students and adults. The service is not directed at children under 13, and we do not knowingly collect personal information from them.
Changes
We may update this policy from time to time. The "Last updated" date at the top will change when we do; continued use of the service after changes means you accept the revised policy.