The short version. Resurface stores your account and your study progress, and nothing else. There are no analytics, no trackers, no advertising, and nothing is sold or shared for marketing. Your answers are yours; ask and they are deleted.
Who we are
Resurface is a question bank for UK medical students, run by a small independent team. For anything in this policy, including requests to see or delete your data, contacthello@tryresurface.com.
What we store
Only what the app needs in order to work. Every row below is tied to your account and to nobody else's.
| What | Why |
|---|---|
| Email address | To sign you in, confirm your account, and reset your password. |
| Display name | To show who you are on the leaderboard, if you choose to appear on it. |
| Which questions you answered, and whether you got them right | To schedule your reviews and show your progress. This is the app; without it there is nothing to come back to. |
| Review schedule, streak, daily goal, saved questions | To decide what to show you next and to keep your settings. |
| Questions you generate or edit | So they are still there next time you sign in. |
We do not store your password. Sign-in is handled by Supabase, which stores a cryptographic hash of it. If you sign in with Google we receive your email address and name, and never your Google password.
Those two are the only things Google sign-in gives us. Resurface requests no access to your Gmail, Drive, contacts or calendar, and cannot read them. The email address identifies your account, so your progress follows you between devices; the name is what appears on the leaderboard, and only if you choose to be on it.
What we deliberately do not collect
- No analytics or tracking scripts, on the website or in the app.
- No advertising identifiers, and no advertising.
- No location data, contacts, or device fingerprinting.
- No health information about you. Resurface contains medical study material; it does not ask for or record anything about your own health.
Cookies
Resurface uses one thing that behaves like a cookie: a sign-in token stored in your browser so you are not asked to log in on every page. It is essential to the service, it is not used to track you, and there are no third-party cookies. That is also why you have not been shown a cookie banner — there is nothing to consent to beyond keeping you signed in.
Who else processes your data
We use a small number of suppliers to run the service. They act on our instructions and may not use your data for their own purposes.
| Supplier | What they handle | Where |
|---|---|---|
| Supabase | Accounts, sign-in, and the database holding your progress | Ireland (EU) |
| Vercel | Hosting the website and the app | EU / US |
| Resend | Sending confirmation and password-reset emails | EU / US |
| Generating questions and explanations from material you submit | US |
About question generation
When you use Generate, the study material you upload or paste is sent to Google’s Gemini API so a model can write questions from it. The same applies when you ask for a deeper explanation of a question you got wrong: the question, the options and the one you picked are sent. Only that content is sent — never your name, email, or study history.
Resurface uses the free tier of the Gemini API, and you should know what that means. Google uses content submitted through the free tier to improve its products, and human reviewers may read it. This is different from Google’s paid tier, where submissions are not used for training. We are telling you this plainly because it changes what you should be willing to put in.
So: do not paste anything confidential, and in particular nothing that identifies a real patient. Lecture slides and your own notes are fine. Anything covered by a duty of confidence is not.
Who can see your progress
Nobody, unless you choose otherwise. Your answers, scores and schedule are readable only by your own account — this is enforced by the database itself rather than by the app, so a bug in the app cannot expose another person's rows.
The one exception is the leaderboard. If you opt in, other signed-in users see your display name and how much you have studied. They never see your scores, your accuracy, or which questions you got wrong. You can leave the leaderboard at any time in Profile, and doing so removes you immediately.
How long we keep it
For as long as you have an account. Ask us to delete your account and we remove your profile and all of your study data within 30 days. Backups are overwritten on a rolling basis and are fully cleared within 90 days.
Your rights
Under UK and EU data protection law you can ask for a copy of your data, ask us to correct it, ask us to delete it, or object to how we use it. Emailhello@tryresurface.com and we will respond within 30 days. There is no charge.
If you think we have handled your data badly, you can complain to the Information Commissioner's Office atico.org.uk. We would rather you told us first so we can put it right.
Legal basis
We process your account and progress data because it is necessary to provide a service you asked for (contract). We send account emails such as confirmations and password resets on the same basis. We rely on your consent, given by opting in, for the leaderboard. We do not send marketing email.
Children
Resurface is intended for university students and is not directed at anyone under 16. If you believe a child has created an account, tell us and we will remove it.
Changes
If this policy changes in a way that affects you, we will say so in the app rather than quietly updating the date at the top of this page.