Privacy Policy

Draft policy prepared alongside the software. PsychPanda should review it before launch.

This policy explains what PsychPanda Ltd (company no. 17501806, registered office 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ) (“PsychPanda”, “we”), the data controller, collects when you use PsychPanda Community at community.psychpanda.com, why, and your rights under UK GDPR.

What we collect

• Account: email address and a securely hashed password (managed by our authentication provider). Your email is never shown to other members.
• Study profile (you choose): display name, username, optional avatar, training stage, country, exams, exam sitting, time zone, availability, preferred format, focus areas and study goals, plus your visibility settings.
• Content: discussions, replies, votes, bookmarks, study groups and group chats, practice-session requests and details, private messages between study partners, and feedback you give or receive after sessions.
• Marketing choices: whether you agreed to occasional emails from PsychPanda about special offers and educational content, the exact wording you agreed to, and when — so we can prove consent and respect your choice.
• Records: when you accepted our Terms, this Policy and the Community Guidelines (and which version), reports you make, and moderation actions.
• Usage events: basic first-party product events (for example “session confirmed”) to understand whether the community works. These never include message content, profile details or meeting links, and are not shared with advertising services.

We do not ask for clinical information about patients and you must not post it.

Why we use it

• To run the community and its features — matching, messaging, booking and notifications (performance of our agreement with you).
• To keep members safe and enforce the Community Guidelines (legitimate interests).
• To send service emails you need, such as session confirmations, cancellations and reminders, and optional emails you can switch off in Settings.
• To send occasional emails about PsychPanda offers and educational content, only if you opted in (consent, which you can withdraw at any time).

Emails about offers and educational content

We only send these if you tick the (optional) box when you join or turn them on in Settings. You can unsubscribe at any time in Settings → Email notifications. Reminders about PsychPanda masterclasses and mock exams also appear as notifications in the community; you can switch those off in Settings too.

Session feedback

After a 1:1 session, your partner may rate it and leave a short note. The note and individual ratings are visible only to the person they’re about. Other members see only the number of completed sessions and, once someone has three or more reviews, an average rating, how many would practise again and the most mentioned strengths.

Who processes it for us

• Supabase — database, authentication and realtime messaging.
• Resend — transactional email delivery.
• Zoom — when a practice session is confirmed we create a Zoom meeting with the session title and time. Your use of Zoom is governed by Zoom’s own privacy policy.
• Our hosting provider — serving the website.

Some providers may process data outside the UK under appropriate safeguards (such as the UK International Data Transfer Addendum).

Who can see what

• Other signed-in members see your display name, username and the profile fields you choose to show.
• Private messages and session details (including Zoom links) are visible only to the members involved. Moderators can view a specific private message only when it has been reported to them.
• Reports are visible to moderators and the person who made them — never to the reported member.

How long we keep it

• Your account and profile: until you delete your account.
• When you delete your account, your profile, connections, bookmarks, votes and notifications are deleted. Discussions and replies you posted stay visible but are shown as “Deleted member”; you can delete individual posts before closing your account. Messages you sent remain visible to the other person in that conversation, unattributed.
• Operational records (email delivery logs, rate-limit data) are kept for a short period; moderation and audit records may be kept longer where needed to keep the community safe.

Your rights

You can access, correct or delete your data (most of it directly in the app), object to processing, and request a copy of your data. Contact bookings@psychpanda.com. You can also complain to the Information Commissioner’s Office (ico.org.uk).

Cookies

We use only essential cookies to keep you signed in. We don’t use advertising or third-party tracking cookies.