Legal · Last updated 23 October 2026
Privacy notice
This notice explains what personal data RadioPath holds about you, why, and the rights you have under the UK GDPR and the Data Protection Act 2018.
Who we are
RadioPath is the data controller for accounts created directly on the platform. Where your programme or employer enrols you in a cohort, they may also be a controller for your training records. Contact us at privacy@radiopath.app.
What we collect
- Account details — name, email address, password (stored hashed by our authentication provider), or your Google profile basics if you use Google sign-in.
- Training records — pathway, cohort, lesson progress, quiz attempts and scores.
- Case work — images you upload, annotations, reports, AI feedback, grades and tutor reviews.
- Consent records — when you accepted our terms and privacy notice, and your cookie choices.
- Technical data — security logs needed to keep the service safe.
Do not upload identifiable patient images or information. Case images must be de-identified teaching material.
Why we use it and our lawful basis
| Purpose | Lawful basis |
|---|---|
| Creating and running your account and courses | Contract (Art. 6(1)(b)) |
| AI feedback and grading on your case work | Contract — it is part of the service you sign up for |
| Sharing progress with your cohort tutors and programme lead | Legitimate interests in supervised training (Art. 6(1)(f)) |
| Security, fraud and abuse prevention | Legitimate interests |
| Optional cookies (preferences, analytics) | Consent (Art. 6(1)(a)) — withdraw any time |
Who sees your data
- Tutors and programme leads only for cohorts they are assigned to.
- Our hosting, database and authentication providers, acting as processors under contract.
- Our AI model provider, which processes case images and reports to generate feedback. Your content is not used by us to train third-party models.
We never sell your data or use it for advertising. Where processors operate outside the UK, transfers rely on UK adequacy regulations or the International Data Transfer Addendum.
Automated grading
Case grades are produced by an AI model against a tutor-editable rubric. These grades are educational feedback, not decisions with legal or similarly significant effects. You can ask a tutor to review any grade.
How long we keep it
We keep account and training records while your account is active and for up to 12 months after closure, unless your programme needs a longer record for assessment purposes. Security logs are kept for up to 90 days.
Your rights
You can ask to access, correct, delete, restrict or export your data, and object to processing based on legitimate interests. Email privacy@radiopath.app; we reply within one month. You may also complain to the Information Commissioner's Office at ico.org.uk.
Cookies
See our cookie policy.