Privacy Policy
Effective Date: January 1, 2026
This Privacy Policy explains how Omedicas ("we", "us", "our") collects, uses, stores, and protects personal data when you use our website and services (the "Platform").
1. Who We Are
Omedicas is currently operated by its founders and is in the process of formal company registration in the United Kingdom.
For the purposes of UK data protection law (UK GDPR), we act as the Data Controller.
Contact: support@omedicas.com
2. What Data We Collect
We collect only the data necessary to operate the Platform and provide interview simulations and feedback.
This includes:
- Full name
- Email address
- Target course (e.g. Medicine or Dentistry)
- Account credentials (stored in hashed form)
- Text transcripts generated from interview sessions
- Interview feedback, scores, and performance metrics
- Engagement metrics (e.g. attentiveness indicators, whether the user is facing the screen, response timing)
We expressly do not collect or store:
- Raw audio recordings
- Video recordings or footage
- Facial images or photos
- Biometric identifiers or templates
- Payment card details (handled securely by third-party payment providers)
3. Audio Processing
Audio input is processed in real time solely to generate live transcription and interview feedback.
Raw audio is never recorded, written to disk, or stored, even temporarily.
Once live processing is complete, audio data is immediately discarded from memory.
4. Visual Engagement Analysis
The Platform may use real-time visual engagement analysis (such as detecting whether a user is facing the screen) to support feedback generation.
All visual analysis occurs locally within the user's web browser.
Visual data is processed in volatile memory only and is never transmitted to our servers.
We do not:
- store or record video footage or images
- perform facial recognition or identity verification
- create or store biometric identifiers
Only non-visual numerical engagement metrics are used for feedback and analysis.
5. Transcripts & Data Retention
Text transcripts and performance data are stored securely using Supabase infrastructure.
Transcripts are retained to enable feedback generation and potential future review features.
Personal data is retained only for as long as your account remains active.
Account Deletion
When you delete your account:
- all identifiable personal data (including transcripts and account identifiers) is permanently deleted, and
- we may retain fully anonymised and aggregated performance metrics for analytics, system improvement, and quality assurance.
Once anonymised, this data cannot be re-identified and is no longer treated as personal data under UK GDPR.
Account deletion requests are processed within a reasonable timeframe, typically within 30 days.
6. Lawful Basis for Processing
Under UK GDPR, we process personal data on the following lawful bases:
- Performance of a Contract – to deliver interview simulations, feedback, scoring, and account functionality.
- Legitimate Interests – to improve service quality, maintain security, prevent misuse, and evaluate system performance.
7. AI & Third-Party Processors
Interview sessions are processed using third-party AI providers, including:
- OpenAI
- ElevenLabs (Scribe v2)
We act as the Data Controller and these providers act as Data Processors, processing data solely to deliver the requested service.
Where supported by the provider's API terms, data submitted through the Platform is not used to train public or general-purpose AI models.
We do not sell personal data and we do not perform internal model training or fine-tuning using user data.
8. User Rights
You have the right to:
- access your personal data
- request correction or deletion
- restrict or object to processing
- lodge a complaint with the Information Commissioner's Office
Requests can be made by contacting support@omedicas.com.
10. Updates to This Policy
We may update this Privacy Policy from time to time. Continued use of the Platform constitutes acceptance of the updated version.