Who is responsible for your information

Wonki is responsible for deciding how the personal information described in this policy is used. Privacy enquiries can be sent to jpiercevillanueva@gmail.com.

Information we collect

• Account information: your name, email address, profile information and an account identifier supplied when you sign in.
• Revision activity: questions viewed and answered, selected answers, correctness, dates and times, module and lecture coverage, mock-exam answers, scores and time used.
• Session information: essential authentication cookies that keep you signed in.
• Technical information: limited security and diagnostic information that hosting and authentication providers may process, such as IP address, browser information and error logs.

Wonki is not intended to collect medical records, health information or other special-category personal data. Please do not submit this type of information through the service.

Google Sign-In data

If you choose Google Sign-In, Wonki requests only the basic information needed to identify your account: your name, email address, profile information and Google account identifier. Wonki does not request access to Gmail, Google Drive, Google Calendar, contacts or files.

Wonki's use and transfer of information received from Google APIs complies with the Google API Services User Data Policy, including its Limited Use requirements.

How we use your information

• To create and secure your account.
• To save your revision progress and restore it when you return.
• To calculate first-attempt accuracy, study streaks, module performance and session analytics.
• To generate aggregate cohort comparisons without showing another user's identity or individual answers.
• To operate, protect, troubleshoot and improve the service.
• To respond to account, privacy or security requests.

Where UK data-protection law applies, account and progress processing is necessary to provide the service you request. Wonki also relies on legitimate interests in operating a secure educational platform and producing privacy-protective aggregate statistics. Information may also be processed where necessary to meet a legal obligation.

Your right to object: you may object to processing based on legitimate interests by contacting the address below. The request will be considered in light of the reasons for the processing and your rights.

Service providers and sharing

Wonki does not sell personal information and does not use it for advertising. Information is shared only where needed to run the service, including with:

• Google, when you choose Google Sign-In.
• Supabase, for authentication and account-session management.
• Cloudflare, for application hosting, security and storage of revision attempts.

These providers may process information in the United Kingdom, European Economic Area or other countries. Where required, transfers are protected using recognised safeguards. Information may also be disclosed where required by law or necessary to protect users and the service.

Retention and security

Account and revision information is retained while your account remains active and for as long as reasonably needed to provide the service, resolve security issues and meet legal obligations. If you request deletion, active account and progress records will be deleted unless retention is legally required. Limited copies may remain temporarily in provider backups or security logs before being removed under provider retention processes.

Reasonable technical and organisational safeguards are used, including encrypted connections, managed authentication and account-scoped access. No online service can guarantee absolute security.

Cookies

Wonki uses essential cookies to authenticate users, maintain secure sessions and preserve requested functionality. It does not currently use advertising or behavioural-tracking cookies.

Your rights

Depending on applicable law, you may ask to:

• Access a copy of your personal information.
• Correct inaccurate or incomplete information.
• Delete your account and revision history.
• Restrict or object to certain processing.
• Receive eligible information in a portable format.

Requests can be sent from the email address associated with your account. You may also complain to the UK Information Commissioner's Office through ico.org.uk.

Children

Wonki is designed for university-level medical education and is not directed to children under 16.

Changes to this policy

Material changes will be reflected on this page by updating the date above. Where appropriate, users will also be notified through the service.