Last updated: 3 June 2026
PillPrep ("we", "us", "our") is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store and protect information about you when you use our website at pillprep.co.uk and our application at app.pillprep.co.uk (together, the "Services"). We are the data controller for your personal data.
Because we are established in the European Union and offer the Services to individuals in the United Kingdom, we process your data in accordance with both the EU General Data Protection Regulation (Regulation (EU) 2016/679) ("EU GDPR") and the UK GDPR as it forms part of UK law. References to "GDPR" in this policy mean both, as applicable to you.
The Service is operated by an individual sole trader ("we", "us", "our") based in Sofia, Bulgaria. It is not operated by an incorporated company. If you have any questions about this policy or our data practices, or wish to exercise your rights, please contact us at [email protected].
You control what you upload. You should not upload documents containing personal data about other people (such as patient information) or confidential or copyrighted materials you are not entitled to use. You are responsible for the materials you upload, as set out in our Terms of Service.
We use your personal data to:
Documents you upload are used only to generate study aids for you. They are not made public, shared with other users, or made visible to anyone else. To produce these study aids we send the contents of your upload to our AI provider, Google (Gemini), which processes it on our behalf to return generated materials. We may, in the future, also use uploaded materials and the study aids generated from them to train and improve AI models. We will update this policy, and rely on an appropriate lawful basis (and seek your consent where required), before using your data for any such model-training purpose.
We process your data on the following bases:
We do not sell your personal data. We share it only with the service providers (processors) that help us run the platform, who are contractually required to protect it and to process it only on our instructions. These currently include:
We may also share your data with:
We are based in the EU and most of our data is hosted within the EU. Some of our providers (such as Google) may process data outside the UK and the European Economic Area, including in the United States. Where data is transferred internationally, we rely on appropriate safeguards — such as the European Commission's Standard Contractual Clauses, the UK International Data Transfer Addendum, and/or transfers to countries deemed to provide an adequate level of protection — to keep your information protected.
We retain your account data for as long as your account is active. Documents you upload are stored on our systems after the study aids are generated (they are simply no longer shown back to you in the app) and are retained while your account is active. When you delete your account, we delete your personal data — including your uploaded documents — from our active systems within 30 days (residual copies may persist briefly in encrypted backups before being overwritten). We keep only the limited information we are legally required to retain (for example, transaction records needed for tax and accounting purposes) for as long as the law requires.
Under the GDPR, you have the right to:
To exercise any of these rights, please email [email protected]. We will respond within one month. You also have the right to lodge a complaint with a data protection supervisory authority. As we are established in Bulgaria, our lead authority is the Bulgarian Commission for Personal Data Protection (CPDP) at cpdp.bg. If you are based in the UK, you may instead complain to the Information Commissioner's Office (ICO) at ico.org.uk.
We implement appropriate technical and organisational security measures to protect your data, including encryption in transit (TLS) and at rest, access controls and regular security reviews. No system is completely secure; please use a strong, unique password for your account.
The Services are intended for users aged 18 and over (foundation trainee pharmacists undertaking their training year). We do not knowingly collect data from children under 18.
For details of how we use cookies, please read our Cookie Policy.
We may update this Privacy Policy from time to time. When we make significant changes, we will notify you by email or by displaying a notice in the app. The date at the top of this page indicates when the policy was last revised.
Questions about this policy? Email us at [email protected] or use our contact form.