Privacy notice

RADIX provides anatomy revision for UK FRCR trainees. Contact hello@radixapp.io about privacy. TODO(legal review): confirm the legal controller name, postal address and ICO registration number or exemption.

We use your email address for your account and Magic Link sign-in. We store learning progress, test answers and results, revision activity, and any optional display name or exam date you provide. We also store account access status, Stripe reference IDs and service usage records. We do not store card numbers. Do not enter real patient details or images.

We use your account and learning data to provide the core app under our contract with you. Grok is optional: our basis for sharing your learning data with Grok is your consent. You can withdraw it by disconnecting in Settings without losing normal app progress. TODO(legal review): confirm the basis for security, service logs and any required record retention.

Stripe processes subscription payments and holds payment data. Deleting your RADIX account cancels active subscriptions but does not delete the Stripe customer or payment records. TODO(legal review): confirm Stripe’s contractual role, legal entity, applicable retention obligations and transfer safeguards.

When you opt in, the outside Grok AI provider processes practice questions, your answers and learning progress to deliver practice and discuss progress. RADIX does not send your email, Stripe IDs, payment status or admin fields to Grok. Grok may hold an email for your separate provider account and processes the chat history you create there. RADIX receives tool requests and submitted answers, not your full Grok conversation. Data may be processed outside the UK. TODO(legal review): verify the provider’s exact legal name and role as processor, any independent-controller activities, the processor agreement, data locations, subprocessors, training use, retention and the lawful UK international-transfer mechanism and assessment. Consent to connect is not a substitute for transfer safeguards.

Supabase provides authentication and database services, and Vercel hosts the app. Ask RADIX and answer-marking features use AI services to support revision. AI answers are revision aids and can be wrong, not clinical advice. TODO(legal review): verify all AI providers, their processing agreements, data sent, locations and retention, together with hosting and email providers.

Account and learning data remain while you use your account, until you delete it. Disconnecting Grok deletes its RADIX connection keys, connector sessions, receipts and consent records; saved app progress stays. A Grok connection key ends after 6 months with no use; using it keeps the key. You can disconnect any time. An unfinished connector practice session normally ends 30 days after it started; that does not disconnect the key. Account deletion removes app data and the sign-in account and leaves a minimal receipt containing a keyed user-ID hash, date and categories deleted, without email. Grok and Stripe manage records already held by them separately. TODO(legal review): approve and implement exact inactive-account, log, deletion-receipt, provider and backup retention periods, backup expiry and how deletion is honoured after restore.

Use Settings → Download my data for a JSON copy of your account and learning records. Use Settings → Delete account, type DELETE and confirm with the email code to delete your account. Use Settings → Disconnect Grok to withdraw Grok consent. Contact hello@radixapp.io for access, correction, restriction, objection, portability or help with deletion, including records not covered by the download. Withdrawing consent does not affect processing already carried out lawfully. You can complain to the UK Information Commissioner’s Office at ico.org.uk/make-a-complaint/.

We use session cookies to keep you signed in. A short-lived, protected deletion receipt lets you retry an interrupted deletion for 24 hours. TODO(legal review): audit other cookies and browser storage and confirm any consent requirements. We will update this notice when processing changes and seek fresh Grok consent when required.