Your data, kept to a minimum.

Effective 13 September 2026 · Last updated 13 September 2026

The short version

Highlight is a revision app for medical students and doctors. There is no sign-up, no account and no password. We never ask for your name, and you can use every feature without giving us an email address.

What reaches our servers is small: a random identifier your phone generates, the training level you picked at onboarding, whether you have a Pro subscription, which conditions you open (as counts), any conditions you vote for, and basic device information (platform, app version, region setting). Anything you type into the search bar or Differential Revision stays on your phone and is never sent to us.

You can delete everything we hold about you at any time from Settings → Delete My Data & Reset App.

1. Who we are

Highlight - Medical Flashnotes ("Highlight", "the App") is operated by MedPlay Ltd, a company registered in England and Wales. For the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, MedPlay Ltd is the data controller for personal data processed in connection with the App.

2. What data we collect

Data that stays on your device only

The following is stored only on your phone. We cannot see it, and we cannot recover it if your device is lost or the App is deleted:

Anything you type into search or Differential Revision, including symptom text
Your personal revision analytics (which conditions you have viewed and how often)
Your light/dark mode preference and tutorial progress
Cached condition content for offline use

Data we collect on our servers

Data	What it is	Why
Installation identifier	A random code (UUID) generated by the App on first launch. It is not your Apple ID, Google account, advertising ID or device serial number, and it is not linked to your name or email.	Lets us count installs, link your subscription status and honour deletion requests.
Training level	The option you pick at onboarding: medical student, foundation doctor, core trainee, or registrar and above.	Understanding who uses the App and which content to prioritise.
Subscription status	Your anonymous RevenueCat customer ID and whether you currently hold a Pro subscription (yes/no). We never see payment details.	Reporting on Free vs Pro usage and validating Pro access.
Condition usage	Which conditions you open and when, and taps on locked conditions. Stored as counts per condition per day and a lifetime total per installation.	Deciding which conditions to improve or add next.
Votes	Conditions you vote for in "Vote on Conditions", with a timestamp.	Prioritising new content.
Device information	Platform (iOS/Android), App version, your device's region setting (two-letter country code, from your phone's settings, not GPS), and when the App was last opened.	Support, compatibility and understanding where the App is used.
Feedback (optional)	Only if you use "Send Feedback": your message, a hashed version of your installation identifier, platform and App version. An email address is optional and only used if you tick the box asking to be contacted.	Responding to bug reports and suggestions.

What we never collect

Your name, postal address, phone number or date of birth
Your email address, unless you choose to give it in feedback
Your precise location (we never request location permissions)
Your advertising identifier, contacts, photos or other phone data
The text of your searches or Differential Revision queries
Any information about patients. Highlight is a revision tool and must not be used with real patient data.

3. How we use your data

To provide the App and Pro features, including validating your subscription and restoring purchases.
To understand how the App is used, so we can decide which conditions to write, fix or expand.
To respond to your feedback when you ask us to.
To prevent abuse of our servers, for example rate-limiting repeated requests.

We do not sell your data. We do not use it for advertising or marketing profiles. We do not train AI models on it. We do not make automated decisions that have a legal or similarly significant effect on you.

4. Legal basis for processing

Performance of a contract (Art. 6(1)(b)) - processing your subscription status and installation identifier so that Pro features work.
Legitimate interests (Art. 6(1)(f)) - collecting the pseudonymous usage data described above to improve the App and protect our servers. We have assessed that this does not override your rights because the data is minimal, is not linked to your identity, and you can delete it at any time from within the App.
Consent (Art. 6(1)(a)) - contacting you about feedback you have sent. You give consent by ticking the box in the feedback form and can withdraw it by emailing us.

We share data only with the service providers we need to run the App, each acting on our instructions under a data processing agreement:

RevenueCat, Inc. (subscription management) receives your anonymous customer ID and App Store / Google Play subscription information. RevenueCat privacy policy.
Apple and Google process payments for Pro subscriptions under their own terms. We never see your card details.
IONOS hosts our servers and database.

We may also disclose data if required by law or to protect our legal rights. We will never share your data with advertisers or data brokers.

6. Where data is stored

Server-side data is stored on IONOS infrastructure in the United Kingdom and European Union. All data in transit is encrypted with HTTPS.

RevenueCat operates in the United States. Transfers to RevenueCat are covered by an appropriate UK GDPR transfer mechanism (the UK International Data Transfer Addendum to the EU Standard Contractual Clauses).

7. How long we keep data

Data on your device - until you delete it, reset the App or uninstall it. We cannot access or delete this remotely.
Installation profile, subscription link, votes and usage counts - deleted immediately when you use Delete My Data & Reset App. Otherwise, profiles that have not opened the App for 24 months are deleted.
Aggregate statistics (for example "this condition was opened 120 times in June") contain no identifiers and may be kept indefinitely.
Feedback - kept for up to 12 months after we have dealt with it, then deleted. Email addresses given for a reply are deleted once the conversation is closed.
Subscription records - retained by Apple, Google and RevenueCat under their own policies and for as long as UK tax and accounting law requires.

8. Your rights under UK GDPR

Right of access - email us and we will send you a copy of the data we hold against your installation identifier. You can find the identifier we need by contacting us from the App's feedback form.
Right to erasure - use Settings → Delete My Data & Reset App. This deletes everything we hold about your installation and wipes the App on your device. You can also email us.
Right to rectification - your training level can be changed by resetting the App and choosing again; other data is machine-generated.
Right to object / restrict - you can object to our legitimate-interests processing by emailing us. Deleting your data from within the App achieves the same result immediately.
Right to data portability - on request we will provide your data in a machine-readable format.
Right to withdraw consent - email us to withdraw consent to being contacted about feedback.

Right to complain: if you are unhappy with how we handle your data, you can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113. We would appreciate the chance to resolve concerns first.

9. Children's privacy

Highlight is designed for medical students and doctors and is not directed at children. We do not knowingly collect data from anyone under 16. If you believe a child has provided us with data, please contact us and we will delete it.

10. Changes to this policy

We may update this policy when we add features or when the law changes. The "Last updated" date at the top shows when. If we make material changes, we will tell you in the App before they take effect.

11. Contact us

For privacy questions, data requests or concerns:

MedPlay Ltd
Email: info@medplay.co.uk

We aim to respond to all data protection requests within one month.