Privacy policy

LucraDoc is a financial education service for UK doctors and medical students. LucraDoc is the data controller for the personal data described here, which means we decide how it is used and are responsible for protecting it.

You can contact us about anything in this policy at hello@lucradoc.com.

We only store what the app needs to work for you:

• Your account: your email address and a password, which is stored as a secure hash and never readable by us. If you sign in with Google, we receive your name and email address from Google.
• Your details: your name, and, if you choose to enter them, your grade, specialty, trust, salary, tax code, student loan plan, postgraduate loan and whether you are in the NHS Pension Scheme.
• Your learning: which lessons you have completed, the last lesson you opened and your quiz answers.
• Feedback you send:when you answer “was this useful?” or write a note in one of the feedback boxes, we store your answer, anything you wrote and which page it came from, alongside your account so we can follow it up with you.
• Figures you save in the tools: tax relief claims, budgets, rota and pension settings, extra hours, rotation posts, relocation costs, mileage and your moving checklist.

We do not ask for your bank details, National Insurance number, GMC number or date of birth, and you should not enter them anywhere in the app.

When you use the payslip checker, your payslip is read inside your own browser. The file and the figures in it are never uploaded to us or stored. When you close or leave the page, they are gone.

We use your data to:

• create and secure your account and let you sign in;
• save your progress and figures so they are there when you come back;
• pre-fill calculators with the details you have given us;
• send you emails you need, such as confirming your address or resetting your password.

Under UK GDPR, our lawful basis is contract: we need this data to provide the service you signed up for. We rely on legitimate interests to keep the service secure and to fix problems. We do not use your data for marketing, and we will ask for your consent before we ever do.

Salary and pension details are financial information, not special category data, but we treat them with the same care.

We use a small number of trusted providers to run LucraDoc:

• Supabase hosts our database and sign-in, in the European Union (Ireland).
• Vercel hosts the website and handles requests to it.
• Google, only if you choose to sign in with Google.
• Zoho, which runs our email. Anything you send us, and our reply, sits in that mailbox.
• An email provider that sends account emails, such as sign-up confirmations, on our behalf.

Each provider processes data only on our instructions and under a data processing agreement. Where a provider handles data outside the UK, it is protected by UK adequacy regulations or the UK International Data Transfer Addendum.

Your data is protected by access rules in the database, so each account can only read its own records. A small number of people who run LucraDoc can access the database to keep it working, and only when they need to.

We only use cookies that are strictly necessary for LucraDoc to work. The law does not require consent for these, but we show a notice the first time you visit so you know about them.

• Sign-in cookies (names starting sb-): keep you signed in securely. They are removed when you log out or your session ends.
• Cookie notice:your browser remembers that you have seen the notice, so it doesn't appear again. This stays on your device and is never sent to us.

We do not use advertising, analytics or tracking cookies. If that ever changes, we will ask for your permission first and you will be able to say no.

• We never sell your data.
• We never share it with advertisers, lenders, recruiters or employers.
• We never store your payslips.
• We never make automated decisions about you that have legal or similar effects.

We keep your data for as long as you have an account. When you delete your account, your profile, progress and saved figures are deleted straight away.

Copies in our providers' backups are overwritten on their normal schedule, usually within a few weeks. We may keep a record that an email was sent for a short time to deal with delivery problems.

You have the right to:

• get a copy of your data: use "Download my data" on Account & privacy;
• correct it: edit your details on Your details;
• delete it: use "Delete account" on Account & privacy;
• object to or ask us to restrict how we use it;
• take your data to another service.

For anything you can't do in the app, email privacy@lucradoc.com. We will reply within one month.

If you are unhappy with how we have handled your data, you can complain to the Information Commissioner's Office. We would appreciate the chance to put it right first.

LucraDoc is for people aged 18 and over. We do not knowingly collect data from anyone younger.

If we change how we use your data, we will update this page and the date at the top. If a change is significant, we will tell you by email or in the app before it takes effect.