Privacy
Last updated 20 October 2026
What we collect, why we collect it, how long we keep it, and how to get it back or get rid of it. Written to be read, not to be survived.
The short version
We hold what we need to run mock exams for you and show you your results, and nothing else. We do not sell your data, we do not share it with advertisers, and we do not track you around the internet.
Who is responsible
Medlinga is responsible for your data and decides how it is used. We have a designated Data Protection Officer. For anything in this notice, or to use any of your rights, write to our support address.
What we collect
Your account. You sign up with an email address and a password. We then ask for your first name, your profession and the country you are preparing for; you can change them on your Account page. Your password is never stored in a form anyone can read.
Your tests. When you sit a test we keep every answer, when you gave it, the timing of each section and your marks. That is what your results and your progress are built from.
If you join the waitlist, we hold your email address, the page you joined from and when you joined, so that we can tell you when Medlinga opens and send your launch offer. We rely on your consent, which you can withdraw at any time by writing to our support address, and we then remove your address. We delete the list 12 months after Medlinga opens, or sooner if you ask.
What you write to us. If you dispute a mark or report a problem with a question, we keep what you write. If you email us, we keep your message and your address so that we can reply.
Saved on your device. The exam date and target grade you set, and the answers of a test you are still sitting, are saved in your browser. The goal never reaches us; the answers reach us as you go, and the copy on your device is removed when you submit.
What not to give us
Medlinga is for adults preparing for a professional exam. Please never type real patient information into any box on this site, including a dispute or a report. If it reaches us anyway, we remove it.
The code on test screens
While a test is on screen, a short code identifying that sitting is shown faintly at the foot of the page. It is not your name or your email address, but we can match it to your account, so a screenshot shared elsewhere can be traced back to the sitting it came from.
Why we are allowed to use it
We use your account, your answers and your marks because you asked us to run mock exams for you and show you your results: that is the agreement between us when you sign up, and this notice is part of it. We keep short-lived security records, such as how often a request is made, to keep the service working for everyone.
We never send you advertising or marketing email unless you have clearly said yes to it first, and today we send none. The only emails we send are the ones your account needs: confirming your address and resetting your password.
Who else handles it
We use a small number of service providers to run Medlinga: for hosting, for the database that holds your account and results, for delivering test audio and images, and for sending account emails. Each handles your data only to provide its service to us, under its own data-protection terms. This means your data is processed outside the country you live in.
How long we keep it
Your account, your answers and your results are kept for as long as your account is open, because the point of the report is to compare one attempt with the one before it.
To delete your account, write to us from the email address on it. We remove everything we hold about you within 30 days and tell you when it is done. Copies in our providers’ short-term logs expire on their own. Emails you send us are kept only as long as we need them to help you.
Your rights
You can ask us for a copy of your data, ask us to correct it, to send it to another service, or to delete it. You can withdraw any consent you gave, at any time. Your marks are calculated automatically; if you think one is wrong, use “dispute this marking” and a person will review it.
Write to our support address. We answer within 45 days, and usually much sooner. You can also complain to the data protection authority where you live.
If something goes wrong
If your data is exposed in a breach, we notify the data protection regulator within 72 hours, and we tell you directly where the risk to you is high. We will say what happened rather than what sounds best.
Cookies and analytics
We set no advertising or analytics cookies, and we do not record your screen. We use one cookie that keeps you signed in; four small ones that hold no information about you (they remember the side menu, a welcome screen and a device notice, and speed up the first page after you sign in); and, if you arrived through a friend’s link, one that holds their referral code for 30 days. If we ever add a tool that measures how the site is used, this page will say so before it is switched on.