Privacy Policy
Last updated 14 October 2026
This policy explains what personal data MMIReady collects, why, who we share it with, how long we keep it and the rights you have. We've tried to keep it short and plain. If anything is unclear, email admin@mmiready.co.uk.
1. Who is responsible for your data
MMIReady is run by a sole trader based in England. We are the data controller for the personal data described here. Contact us at admin@mmiready.co.uk or by post at: Our postal address will be added here shortly. Until then, please email us.
2. What we collect and why
| Data | Why we use it | Legal basis |
|---|---|---|
| Name, email address and password (stored scrambled, never readable) | To create and run your account, let you log in and send account emails such as password resets. | Contract |
| Video and audio recordings of your answers | To transcribe and mark your answers and let you watch them back with your feedback. | Contract |
| Transcripts, scores and written feedback | To show your results and progress over time. | Contract |
| Your plan, payment status and Stripe customer reference | To give you the plan you paid for, handle renewals, cancellations and refunds, and keep records for tax. | Contract; legal obligation (tax records) |
| Your confirmation at checkout that your plan starts straight away | To record what you agreed to before paying, so refunds are handled fairly. | Contract; legal obligation |
| Whether you want offers and updates by email | To send occasional emails about new mocks, features and discounts, only if you ticked the box. Untick it any time on your billing page or reply to say stop. | Consent |
| Your usage: mocks and questions practised, when you last practised | To show your progress, run your plan's limits, and understand how the site is used so we can improve it. | Contract; legitimate interests |
| The affiliate code, if you arrived through a partner's link | To credit the partner who referred you. They see how many people they referred and earned commission on, never your name or details. | Legitimate interests |
| Messages you type into the help chat | To answer your question. We don't store them after the chat. | Legitimate interests (helping you) |
| Your IP address, if you try the free demo without an account | To limit how many free demo answers each visitor gets per day. | Legitimate interests (preventing misuse) |
| Anonymous visit statistics (which pages are viewed, sign-ups, purchases) | To see which parts of the site help and improve them. No cookies, and not linked to your name or email. | Legitimate interests (improving the site) |
| Affiliate applications (name, email, social profile, audience size, reason) | To review your application to our affiliate programme and contact you about it. | Legitimate interests; steps before a contract |
We don't need any information about your health, ethnicity, religion or other sensitive matters. Please don't include sensitive details about yourself or anyone else in your answers. Your voice and face in recordings are only used to transcribe and give feedback on your answers, never to identify you.
3. Who we share it with
We don't sell your data or use it for advertising. We use these trusted providers to run the service. They only process your data on our instructions and under contracts that protect it:
- Supabase: our database, login system and recording storage, on servers in London, UK.
- OpenAI: transcribes your recorded answers, produces the interviewer's and role-play voices, writes your feedback and powers the help chat. Data sent through OpenAI's business API is not used to train their models and may be kept by them for up to 30 days to monitor for abuse.
- Stripe: takes payments and manages subscriptions. Stripe collects your card details directly; we never see them.
- Vercel: hosts the website.
- PostHog: anonymous visit statistics, hosted in the EU.
- Our email provider, to send and receive emails with you.
We may also share data if the law requires it, or to protect our rights, our users or the public, for example to prevent fraud.
4. Data sent outside the UK
Some of our providers, including OpenAI, Stripe and Vercel, process data in the United States or other countries. When they do, we rely on the safeguards UK law allows, such as the UK Extension to the EU-US Data Privacy Framework or the UK's approved data transfer agreements, so your data stays protected to UK standards.
5. How long we keep it
- Video and audio recordings: deleted automatically 24 hours after your session. You can download a recording from your results page before then.
- Transcripts, scores and feedback: kept while you have an account, so you can track your progress.
- Your account: kept until you ask us to delete it. If an account isn't used for 2 years, we delete it.
- Payment and refund records: kept for 6 years, because UK tax law requires it.
- Free demo IP addresses: deleted after 30 days.
- Affiliate applications: kept for 12 months after we decide, unless you become an affiliate.
6. AI marking
Your answers are marked by AI against each question's mark scheme. The scores are practice guidance only. They are not used to make any decision about you that has a legal or similarly significant effect, and they are never shared with universities or anyone else.
7. Students under 18
You must be 16 or over to create an account. Many of our users are under 18, so we keep privacy settings high by default: recordings are private to you, deleted after 24 hours, never shown to other users, and we don't use your data for advertising, profiling or marketing.
8. Cookies and storage on your device
We don't use advertising or tracking cookies. Our visit statistics run without cookies. The site stores a few small items in your browser that it needs to work:
- your login session, so you stay signed in;
- your choice if you opt out of visit statistics;
- the plan you picked before signing up, so we can take you to payment afterwards (cleared within a day);
- a partner's affiliate code if you arrived through their link (kept for 30 days).
You can turn off the anonymous visit statistics at any time with the "Opt out" link at the bottom of every page. Stripe's payment page sets its own cookies to prevent fraud; see Stripe's privacy policy for details.
9. Keeping your data safe
Your data is encrypted in transit and stored with access limited to the people and systems that need it. Recordings can only be opened by you, through links that expire. No system is completely secure, but if something goes wrong that puts your data at risk, we'll tell you and the Information Commissioner's Office where the law requires.
10. Your rights
Under UK data protection law you have the right to:
- get a copy of the personal data we hold about you;
- have inaccurate data corrected;
- have your data deleted;
- object to, or ask us to limit, how we use your data;
- receive your data in a format you can take elsewhere;
- withdraw your consent to marketing emails at any time.
You can delete your account yourself at any time from your billing page, which removes your recordings, answers, feedback and profile straight away. For anything else, email admin@mmiready.co.uk from the address on your account. We'll reply within one month and it's free. If you're not happy with how we've handled your data, you can complain to the Information Commissioner's Office at ico.org.uk/make-a-complaint or on 0303 123 1113, but we'd appreciate the chance to put it right first.
11. Changes to this policy
We'll update this policy when what we do with your data changes. The date at the top shows the latest version, and we'll email you about any important change. This policy sits alongside our Terms and Conditions.