Privacy and your data

Last updated 22 October 2026. This notice describes the learning service and staged features; availability is shown in the app.

Who manages your information?

Dr Rashid Suleman operates ZYS Training Solutions. Contact support@zystraining.solutions about your information, access, corrections or deletion.

What we use and why

We use your verified email, account identifier and name to sign you in, review your access request and keep your practice record separate from other candidates. We store your attempts, self or partner ratings, viva ratings and reflections to provide the practice service you request. Administrators can see requests and make access and content-review decisions. These activities support delivery of the service; security controls and administrative audit records protect the service and its users.

Service providers

Supabase verifies sign-ins. Google handles Google sign-in if you choose it. An email delivery provider sends sign-in codes and administrator alerts. Cloudflare hosts the website and its progress database. These providers may process information outside the UK; their applicable processing arrangements and transfer safeguards must be confirmed before the public launch.

Help and support messages

If you send a message from the help button, our email delivery provider sends it to support@zystraining.solutions with your verified sign-in email so the team can reply. General messages do not include a question reference or require a problem category. Problem reports include your selected category and bounded page, question and version references. The website does not store message bodies. It stores one-way rate-limit keys and hashed delivery receipts to prevent duplicate sends; receipts are scheduled for deletion after 30 days. Do not include identifiable patient information.

Private notes and question comments

Personal notes and their tags, originals and revision history are private to your account. If you request AI organisation, your note paragraphs are sent to the AI provider to suggest a title, tags and paragraph order. No clinical correction is added automatically, and accepting a suggestion stores a new revision while retaining the original. Question comments are private to their author and the authorised review team. They record the exam part, question identifier and content version, comment, review status, replies and dated review history. Resolving a comment does not edit or approve teaching content.

Plan enquiries and payment testing

If you submit a group, student, supported-access or upcoming-pathway enquiry, we store your account email, enquiry type, pathway, group size, message and submission time so the team can review and respond. Do not include sensitive personal information. Enquiries remain until manually deleted under the pilot retention arrangements below; submitting one does not subscribe you to marketing.

Payment testing is restricted to administrators, and sandbox purchases do not grant learning memberships. Where membership checkout is enabled, Stripe receives your verified email, an opaque account identifier and selected exam, tier and product information, and handles payment details on its hosted pages. ZYS stores purchase and provider identifiers, discount details, verified membership periods, renewal notices and limited payment-event records. No card details are stored by ZYS. Learning access is granted only after provider verification of the selected paid or fully discounted membership. Voice credit controls are separate; pack purchases remain disabled until prices are approved.

Listening and hands-free answers

Questions, explanations and chapters can be read aloud by your device’s built-in voice; nothing is sent to ZYS to do this. In a hands-free session you can choose to answer by speaking. Your browser’s own speech service turns what you say into text (in Chrome and Edge this is a Google service; in Safari, Apple’s). ZYS receives only the recognised words, uses them to choose your answer option and does not record or store your voice or the words. Your answers are then saved exactly as if you had tapped them. You can answer by tapping instead. Listening settings are kept only on your device.

Voice practice and moderation

When you start voice practice, microphone audio and the fictional case context are sent directly to Google’s AI service. ZYS does not store raw audio. Before starting, you agree to save the conversation transcript and AI feedback privately for moderation and service improvement. Authorised moderators can review these records, record issues and create generic, deidentified improvements for future AI responses. Transcripts may be incomplete or inaccurate; interrupted captures are flagged.

Your saved conversations include the case, role, selected UK nation, dates and prompt/source/guidance versions. They are kept for up to 90 days and removed by daily cleanup. You can view, report or delete them in Voice history. Deletion also removes associated moderation records; a short usage reservation remains for 24 hours to enforce limits. Your separately saved personal reflection remains in Progress. Do not include real patient details. Voice uses a billing-enabled project.

Optional learning chat

Your questions, selected UK nation, follow-up links and source-backed answers form a private history for your account. When dual checking is enabled, Google drafts your answer and Anthropic and OpenAI separately receive the same draft, question and checked source excerpts to check it. Both checks must pass before automatic release. In the earlier single-provider configuration, Google performs drafting and checking. Generic published improvement guidance and at most one previous exchange may be included for a follow-up. ZYS does not send your account email to the model. Answers can be released after automated evidence checks without individual administrator approval; they remain labelled AI-generated. You can report an answer you consider wrong. Questions outside our checked resources are flagged for moderators to improve the collection.

Authorised moderators can see submissions, generated drafts, reports and transcripts. Chat questions, answers and associated report/audit content are kept for up to 180 days. You can export your visible conversations, delete individual exchanges or delete all chat history. The history holds up to 200 exchanges and shows warnings during the final 14 days before expiry and when storage is nearly full. Answers you explicitly save to personal notes are separate copies: chat expiry or history deletion does not delete those notes. Learning access is required to read retained notes and chat; the chat retention period continues while access is locked. Short spending records with your opaque account identifier remain for 35 days to enforce limits. No chat history is stored in browser local storage. Obvious identifiers are screened, but screening cannot detect all personal information.

Speaking in learning chat

Where enabled, you can agree to use your browser speech service (Google or Apple, depending on your browser) to recognise spoken questions. Audio is processed by that service; ZYS does not receive or store the raw audio. Check the recognised words, especially drug names, doses and units, before pressing Ask question. Confirmed questions are saved in your private learning-chat history under the 180-day policy above. Your device can read the exact checked answer aloud; ZYS does not send it to a separate speech-generation provider. Microphone capture and playback stop when you close chat or hide the tab. Browser support and pronunciation vary. Typed questions and visible answers remain available.

Improving AI responses

Moderators may publish versioned, deidentified guidance and examples supported by current UK sources for use in future chat and voice prompts. Raw reports and transcripts are not automatically used as agent instructions or submitted for model training. This is prompt improvement, not model fine-tuning. Source registers and published guidance remain for editorial accountability. Provider and backup retention may differ; contact us about deletion from those systems.

Progress and comparison with other learners

Your Progress page compares your first-attempt accuracy with other learners on the same exam. Once a day we pool learners’ first-attempt results into an anonymised summary for each exam, keyed by a one-way account code rather than your email or name. Other learners see only percentile bands (for example “Upper half”) and an overall average, never your name, email, answers or individual scores. Staff accounts are left out. The same summary gives reviewers per-question figures (how many learners answered a question first time and how many got it right) to improve questions and calibrate difficulty. If you set an exam date, weekly target or turn on the weekly progress email, we store those choices with your account; the weekly email contains figures only, never question content, and you can turn it off on your Progress page. Hands-free listening time is stored as minutes per day.

Site usage figures

To see how the site is used, we count loads of a few named pages per day, and record that an account was signed in on a given day using a one-way account code rather than your email. No IP address, cookie, browser or location details are stored for this. Administrators see only totals and site-wide practice figures (for example how many stations were completed), not individual reflections. These counts are removed after about 13 months.

Protecting the question bank

To stop the question bank being copied, we count how many answers each account opens per hour and per day, using the same one-way account code, not your email. We do not record which questions or answers you opened. There is a generous hourly and daily limit; if an account goes far above normal study, its email, the day and the number of answers are shown to administrators so they can check. Counts are deleted after two days and these flags after 90 days. Learning pages also show a faint watermark with your email, so screenshots can be traced to an account.

Voice allowance and credit records track reserved connection time and beta provider-cost usage separately from learning membership. These records support balance checks, cost limits and audited administrator adjustments.

Storage and retention

Secure essential cookies maintain your sign-in. An account-specific device copy helps recover unsynced practice; use your own device and sign out afterwards. The app retains up to 500 PACES attempts, 200 progress notes and up to 1,000 written-question answer records per account, retaining the latest answer for different questions before older repeats. Written records include the examination, question ID and version, selected answer, correctness, date and session identifier. They support previous-attempt filters, topic recommendations and session summaries. Access to saved learning records follows your active demo, beta or subscription to the selected exam part. Essential includes core saved notes and results; Premium adds deeper support. Your registration remains indefinitely, while learning access expires with its period. Expired results, notes and reflections are retained but locked until you subscribe to that exam part. Quickfire stores the question identifier/version, selected option, correctness and answer time in a separate private record; these answers do not contribute to written exam scores. Its history and incorrect-answer revision follow the same exam access and retention rules. Written history can be deleted from the session builder. The separate personal-note service supports up to 1,000 notes per exam part with original and revision history. If you choose to discuss a saved session with the AI coach, a limited summary of that session’s results and current released topics is sent through the learning chat; your email and full answer history are not sent to the model. Account, access and audit records do not yet expire automatically. Contact us to request an export, correction or deletion; these requests are handled manually. Backup retention and a final deletion schedule must be confirmed before public launch.

Your choices

You can choose email sign-in instead of Google, decline voice practice and request deletion of your account and practice records. Depending on the circumstances, you may also have rights to restrict or object to processing. You can raise a concern with the UK Information Commissioner's Office at ico.org.uk.

Pilot release check: contact email delivery, provider arrangements, lawful bases and the retention schedule require owner verification before candidate onboarding. This page does not claim that the service has completed a legal or data-protection review.