Privacy & data processing
A plain-English summary of what data ReflectMed holds, who processes it on our behalf, and your responsibilities around patient confidentiality. Last updated 30 June 2026.
In short
The essentials
ReflectMed helps you draft reflective entries for your Foundation Programme portfolio. To do that we store your account details and the reflections you write, and we send the text you enter to an AI provider to generate a draft. We never sell your data, and we ask you not to enter any patient-identifiable information.
Patient confidentiality
Do not enter patient-identifiable information
Reflections must be fully anonymised, in line with GMC guidance. Do not include names, dates of birth, hospital numbers, NHS numbers, or any other detail that could identify a patient. ReflectMed automatically scans your input and blocks anything that looks like an identifier, but you remain responsible for keeping your entries anonymous.
What we collect
Data we hold
Account details — your name and email address, used to sign you in and identify your portfolio.
Your reflections and evidence — the case summaries, reflective text, and portfolio-tracking entries you create, so you can return to them and build your ARCP record.
Payment details — handled entirely by Stripe. We never see or store your card number; we only record whether your subscription is active.
Sub-processors
Who processes your data on our behalf
ReflectMed relies on a small number of trusted third-party services (“sub-processors”) to operate. Each only receives the data it needs to do its job:
Anthropic— provides the AI (Claude) that turns your notes into a reflective draft. The text you enter is sent to Anthropic to generate guidance and drafts. Under Anthropic's commercial API terms, your inputs and outputs are not used to train their models. Always keep this text anonymised.
Clerk — manages sign-in and stores your account details securely.
Supabase — hosts the database where your reflections and portfolio entries are stored.
Stripe — processes subscription payments.
Vercel — hosts the application and serves it to your browser.
Your rights
Access, correction, and deletion
You can view and delete your reflections at any time from your dashboard. If you would like a copy of all the data we hold about you, or want your account and data permanently deleted, email us and we will action it.
Contact
Get in touch
For any privacy question or data request, email cameronashraf@gmail.com.
See also our Terms of Service.