Privacy notice

Get3DMed (“we”, “us”) runs get3dmed.com. We are the controller of the personal data described here, which means we decide how it is used and are responsible for protecting it under UK data protection law (the UK GDPR and the Data Protection Act 2018).

For anything about your data, including the rights below, contact us:

• Email: hello@get3dmed.com

You can browse the atlas and use the free models without an account. Then we collect only the technical information in the last point below.

Your account

Your email address and password. The password is stored by our sign-in provider as a one-way hash; we never see it. If you sign in with Google, we receive your name, email address and profile picture from Google.

Your profile

A display name, and, if you answer the optional welcome questions, your course, year of study and current topic. Also your time zone, study preferences (such as whether labels show) and whether you want product updates by email.

Your study

Your place in each model (camera, layers, slices, highlights and selection), saved views, notes, collections and saved tutor explanations, including the question you asked. In pathophysiology lessons, the stage you are on, the stages you have opened and your answers to the informal self-check questions.

Questions to the AI tutor

Your question, the recent conversation (up to 12 turns) and what you are looking at (the model and the structure you selected, or the lesson and stage you are reading). These are sent to Anthropic to write the answer, without your name or email address. We do not keep the text of your question unless you save the explanation. We hold the answer for 24 hours, so it can be shown again if your connection drops, and keep a record of each question's model, length and cost, but not its words.

Your plan and payments

Your plan, your subscription's status and dates, and the reference numbers Stripe gives your customer record and subscription. Stripe collects your card details and billing address directly on its own checkout page; they never reach us.

How you use the study workspace

A short list of events with the time and, where relevant, the model: for example account created, view saved, note saved, explanation reopened and checkout started. We use them to see which features help students and to find problems.

Visits, without cookies

We count visits to see which pages help and where people get stuck: the page, the model, steps such as opening a model, tapping a part, opening the tutor, starting sign-up or checkout, the website or campaign link you came from, your device type (phone, tablet or computer) and country. Nothing is stored on your device for this. Each visit is grouped under a one-way code made from your IP address and browser with a value that changes every day, so we cannot follow you from one day to the next, and the IP address itself is never stored. If your browser sends Global Privacy Control, we do not count your visit.

How the site is used, with PostHog

We also use PostHog, an analytics service, to see how Get3DMed is used and where it is confusing: the pages you open, where you click and scroll (without the words you click on), the steps and study events above, your browser and device type, and your country. Some visits are also recorded as a replay of the page, so we can see where people get stuck. Replays hide all the text on the page and everything you type, and do not include the 3D view.

If you are signed in, this is linked to your account's id number, never your name or email address. If you are not, a new random id is used each time a page loads, so visits cannot be joined up. PostHog stores nothing on your device. It receives your IP address to deliver each request and is set not to store it. If your browser sends Global Privacy Control, PostHog is not loaded at all.

Errors

If something breaks, we record the error message, the page and your browser and device type, so we can fix it. Not your account, name or email address.

Messages you send us

Emails to support, and anything you choose to include in them. If you use the contact page, we store your message, the topic you chose, the time, and your name and email address only if you give them, in a private inbox; we may also forward it to our support email. If you report a content error, we store your message, the model or lesson and selected structure, its content version, a random report reference and the time in a private review inbox. Reports do not attach your account, email address, private study notes or full browsing URL. Please do not include patient details or personal information.

Technical information

To stop automated misuse of the tutor, report form and contact form, we turn your network (IP) address into a one-way code and count how many requests it sends in a few minutes; the counts are deleted within a day. Our hosting provider processes IP addresses and basic request details (such as the page and browser) to deliver the site and keep it secure.

UK law requires a lawful basis for each use of personal data. Ours are:

We do not sell your data, show advertising or use your data for anyone else's marketing. We make no decisions about you by automated means that have legal or similarly significant effects. The tutor writes explanations; it does not assess or grade you.

We use these providers to run Get3DMed. They process your data on our instructions, under contracts that require them to protect it.

Stripe and Google also use some data for their own purposes, such as preventing fraud and running your Google account; their own privacy policies apply to that. We may also share data if the law requires it, or with a buyer if Get3DMed is ever sold, in which case we would tell you first.

Some providers above process data in the USA or elsewhere. When they do, the transfer is protected by a safeguard UK law recognises: the UK–US data bridge for certified companies, or the standard contract clauses approved by the Information Commissioner. You can ask us for details.

Our database provider's backups are replaced within about a week, so deleted data leaves them too. A deletion that fails part-way is retried automatically the next day.

We use only what Get3DMed needs to work. There are no advertising or analytics cookies and nothing that tracks you across other sites, so there is no cookie banner. Our analytics, including PostHog, store nothing on your device.

Under UK data protection law you can ask us to:

• give you a copy of your data (access)
• correct data that is wrong (rectification)
• delete your data (erasure)
• limit how we use it (restriction)
• stop using it where we rely on legitimate interests (objection)
• give you your data in a machine-readable form (portability)

You can do the most common ones yourself. Account → Your data downloads everything as one file, or your notes alone, and deletes your account and everything in it. Account → Profile and sign-in changes your details and email preferences.

For anything else, email us at hello@get3dmed.com. We reply within one month. We may ask you to confirm your identity first, usually by writing from the email address on your account.

Get3DMed is for students. You must be 13 or over to create an account. If you think a child under 13 has given us personal data, email us at hello@get3dmed.com and we will delete it.

Connections to Get3DMed are encrypted. Rules in our database itself stop anyone else's account from reading your records. Payment details stay with Stripe. No system is perfectly secure; if a breach put your data at risk, we would tell you and the Information Commissioner as the law requires.

We will update this page when what we collect, or why, changes, and change the date at the top. If a change matters to how your data is used, we will tell you by email or in your account before it takes effect.

If you are unhappy with how we have handled your data, please tell us first and we will try to put it right. You can also complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.