PharmRevise privacy notice

Last updated: 28 October 2026

PharmRevise is a free revision tool for people preparing for the GPhC registration assessment. Anyone can try the calculations sampler without an account, and anyone can create an account. The full question bank opens once the account's email address is confirmed. It is not affiliated with the General Pharmaceutical Council. This notice explains what personal data the tool holds about you, why, who else handles it, how long it is kept and what you can do about it.

1. Who is responsible for your data

The controller of your data is PharmRevise, the trading name of the individual who runs it. PharmRevise is not yet a company; if that changes, this notice will be updated to name it.

Contact: hello@pharmrevise.co.uk.

We have not appointed a data protection officer.

2. What we hold, and where it comes from

Everything below comes from you, or from your use of the app.

We do not ask for your name (unless it is part of your email address), your phone number, your location, payment details, or anything about your health. The only things you can type into the app are the optional note on a question report and a comment. Please do not put anything about a patient, or about your own or anyone else's health, in either. If you do, we delete it when we see it.

If you use the calculations sampler without an account. We collect nothing from you. Your answers stay in your browser's storage on your device and are not sent to us. Our website host, Netlify, records each page request, including your IP address and browser details, as it does for every visitor. If you open a sign-in screen, Cloudflare's bot check runs (see section 4). If you then create an account, the answers on that device move to it. To remove them without creating an account, clear this site's data in your browser.

If you play the daily games. You do not need an account to play them, and we collect nothing from you. Your guesses, results and run of days stay in your browser's storage on this device (see section 8) and are not sent to us. Our website host, Netlify, records each page request, as it does for every visitor. The games are not part of your account: deleting your account does not remove them, and Reset games on the games page does.

Instagram. If you comment on a post by @pharmreviseuk or send us a message there, Instagram (Meta) holds your username, what you wrote and our reply, under Meta's own terms and privacy policy. The person who runs PharmRevise reads comments and messages in the Instagram app to reply to them, including sending practice questions you ask for. We do this because it is in our legitimate interests to answer what you asked. We do not copy your username, comments or messages anywhere outside Instagram, and we do not add them to an account. We keep only a count of how many requests each post received, which does not identify anyone. We delete our side of a conversation 90 days after the last message. To have it deleted sooner, ask in the same conversation or at hello@pharmrevise.co.uk. We cannot delete the copy in your own inbox or what Meta keeps.

3. What we use it for, and our lawful basis

We rely on legitimate interests (UK GDPR Article 6(1)(f)) for all of the processing below. Our interests, and why we think they do not override yours, are:

• Running the tool you signed up for. Keeping your account, answers, review schedule and sessions is the tool: without them there is nothing to revise from and nothing to sync between your devices.
• Showing you your progress. From your answers the app works out, for you, a range for your accuracy on PharmRevise questions, how much evidence it rests on, which areas you have covered, a suggested next topic, a plan to your sitting date, your pace, and questions you have started to get wrong. These are estimates about your revision, not predictions of your result.
• Opening the full bank to your account, and ending it if we need to. The full bank opens automatically when you confirm your email address; nobody reviews the account first. We may later end an account's access, for example where it looks like it is being used to copy content. A person makes that decision, not software.
• Protecting the question bank from bulk copying. The download record shows which accounts downloaded the bank through the app, and when. With the full bank open to every confirmed account, it is how we can tell whose copy has turned up somewhere it should not. The record holds no answers, is not used to judge your revision, and we use it only to look into suspected copying.
• Keeping the service secure. Sign-in records and request logs are kept by our providers to detect misuse and fix faults. The bot check on the sign-in screens stops automated sign-ups, sign-in attempts and email floods.
• Seeing how people are doing. The person who runs PharmRevise can see each account's answer history and scores, listed by display name, and totals for the group as a whole, in an admin view. It is used to find weak topics and wrong questions.
• Seeing how many people use PharmRevise, and how they found it. We count, as totals only, how many accounts are created and confirmed each week, how many accounts answer at least one question in a week, how many chose each sitting, and, if you answered the optional question when you signed up, how many heard about PharmRevise in each way. We use these totals to decide where to tell people about PharmRevise and whether it is helping anyone. Nobody is singled out or contacted because of them, and we do not publish them.
• Reading your comments and question reports. We use them to find and fix problems with the app and the questions. Only the person who runs PharmRevise reads them, and they are never shown to other users. A summary of each day's comments and reports is emailed to our own mailbox so problems are dealt with quickly.
• Answering you when you email us.

You can object to any of this (see section 7). Because the tool cannot work without your account and answer history, objecting to those in practice means closing your account.

You must give an email address to have an account. The question about where you heard about us is optional. You do not need an account to try the calculations sampler. You need one to save your progress and to use the full question bank.

We do not make any automated decisions about you that have legal or similarly significant effects. The review schedule, your score range and the study suggestions only change what the app shows you.

4. Who else handles it

We use these providers to run the service. Each acts on our instructions under a data processing agreement.

Cloudflare also uses the bot-check signals to improve how Turnstile detects bots. For that use it decides for itself and is responsible under its own Turnstile privacy addendum.

We do not sell your data, share it with advertisers, or use analytics or advertising trackers. We do not send your data to AI services.

We may disclose data where the law requires it.

5. Transfers outside the UK

• Ireland (EU): the UK treats EEA countries as providing adequate protection, so no extra safeguard is needed.
• USA (Netlify): it states that it is certified under the UK Extension to the EU-US Data Privacy Framework, which UK regulations recognise.
• USA (Cloudflare): it states that it is certified under the UK Extension to the EU-US Data Privacy Framework, which UK regulations recognise.
• USA (Resend): protected by the standard contractual clauses with the UK Addendum issued by the Information Commissioner.
• Supabase (a Singapore company) and Zoho group transfers: protected by the standard contractual clauses with the UK Addendum issued by the Information Commissioner. You can ask us for a copy of the safeguards at hello@.

6. How long we keep it

Deletion after a period without sign-in is not automated yet; until it is, we carry it out by hand.

7. Your rights

You have the right to:

• see the data we hold about you and get a copy;
• correct it if it is wrong;
• delete it;
• restrict how we use it while a problem is sorted out;
• object to our using it; and
• complain to us, and to the Information Commissioner's Office.

To use any of these, email hello@pharmrevise.co.uk from the address on your account. We reply within one month. We can extend that by up to two more months for a complex request, and if we do we tell you why within the first month.

Deleting your account removes your account, answers, review schedule, sessions, access record, download record, question reports and comments from our database. It also removes your answer to where you heard about us. This works the same whether or not the full bank was ever opened to your account, and it includes answers you gave without an account that moved to it. You can delete your account yourself from the Account screen, or email us and we will do it for you. What it does not remove straight away: copies of your comments or report notes in daily summary emails already sent to our mailbox, which we delete 30 days after they are sent, and Resend's copy, which it deletes after 30 days; copies in our providers' short-lived logs (section 6), which expire on their own schedule; any emails you sent us; what Cloudflare keeps for its own use from the bot check, which you can ask Cloudflare about at dpo@cloudflare.com; and the progress stored on your own devices, which you remove by signing out and clearing the site's data in your browser. Your daily games record is not part of your account: it stays on your device until you use Reset games on the games page or clear the site's data.

Complaints. If you are unhappy with how we have handled your data, email hello@ first. We will acknowledge your complaint within 30 days and tell you the outcome. You can also complain to the Information Commissioner's Office: ico.org.uk, or 0303 123 1113.

8. What the app stores on your device

The app and this site's pages use your browser's local storage and IndexedDB, not cookies. Everything listed is needed for the service you asked for:

9. Changes to this notice

If we change this notice we will update the date at the top and email account holders about any change that affects them before it takes effect.