Privacy policy

• Account details. Your name and email address, and your Google profile name and picture if you sign in with Google.
• Practice activity. The questions and units you attempt, your answers, timings, flags, scores, lesson progress and anything you write, such as notes on your reasoning and Section II essays.
• Purchase details. Your plan, passes, billing status and payment history. Card details are entered directly with our payment providers and never reach our servers.
• Usage and device information. Pages visited, how you use them (such as the sections you scroll to, the links you click and the sample questions you answer), referring site, browser, device type and approximate location derived from your IP address, collected through privacy-friendly analytics that don’t use cookies to track you across sites. If you arrive from one of our Google ads, Google also records the ad click and whether you went on to buy a pass.
• Messages you send us. If you contact us, we keep the correspondence so we can help you.

• To create and secure your account and sign you in.
• To run the practice app: serve units and lessons, mark answers, track progress and give feedback on your reasoning and essays.
• To process purchases, payments and refunds.
• To understand how the site and app are used so we can fix problems and improve questions, lessons and features.
• To send messages about your account, such as receipts and changes to these policies. We’ll only send marketing email if you’ve agreed to it, and every one will include a way to unsubscribe.
• To meet our legal obligations and prevent misuse.

We don’t sell your personal information.

When you ask for feedback on your reasoning or submit a Section II essay, the text you wrote and the question it relates to are sent to an AI provider (currently OpenAI and Anthropic) to generate that feedback. We send only what’s needed for the response, not your name or email address.

Under their API terms, these providers don’t use the content we send them to train their models. They may retain it for a limited period to detect abuse.

We use trusted service providers to run Get Into Med. They process personal information on our behalf and only for the services they provide to us:

• Vercel hosts the website and app and provides analytics.
• Neon stores our database and handles sign-in.
• Google, if you choose to sign in with Google, and Google Ads, to measure which of our ads lead to purchases.
• Stripe processes web payments. Apple and Google Play process in-app purchases, and RevenueCat manages those subscriptions for us.
• OpenAI and Anthropic generate AI feedback, as described above.

We may also disclose information if the law requires it, to protect the rights or safety of our users or others, or as part of a sale or restructure of the business, in which case this policy will continue to apply.

Several of these providers store or process data outside Australia, mainly in the United States. By using Get Into Med you consent to that transfer. We choose providers with strong security and privacy commitments, but overseas recipients may not be bound by the Australian Privacy Principles.

We use essential cookies to keep you signed in and to secure your session. Our analytics don’t rely on cookies. We use Google’s advertising cookies to measure whether our Google ads lead to sign-ups and purchases, and Google may use them to show you our ads elsewhere. You can turn off personalised ads at myadcenter.google.com or block cookies in your browser.

We keep your account and practice history for as long as your account is open, so your progress is there when you come back. When you delete your account we delete or de-identify your personal information within 30 days, except records we must keep by law, such as payment and tax records.

Data is encrypted in transit and access is limited to what’s needed to run the service. No system is perfectly secure, but if a data breach is likely to cause you serious harm we’ll notify you and the Office of the Australian Information Commissioner as the law requires.

You can ask to access, correct or delete the personal information we hold about you, or ask a question about this policy, by emailing contact@getintomed.com.au. You can also delete your account from within the mobile app. We’ll respond within 30 days.

If you’re in the UK or European Economic Area you also have the right to object to or restrict our processing and to receive your data in a portable format. We rely on our contract with you to provide the service, and on our legitimate interests for analytics and improvement.

If you’re not happy with how we handle a complaint, you can contact the Office of the Australian Information Commissioner at oaic.gov.au, or your local data protection authority.

Get Into Med is designed for university students and graduates. You must be at least 16 to create an account.

We’ll update this page when our practices change and revise the date at the top. If a change is significant we’ll let you know by email or in the app before it takes effect.