MedPally

Legal

Privacy

This notice explains what information MedPally handles and why.

Last updated 2 August 2026

Who is responsible

MedPally is responsible for the personal information described in this notice. We process information as needed to provide the service you request, for legitimate interests such as securing and improving the service, to meet legal obligations and, where we specifically ask, with your consent.

Information we collect

When you create an account, we collect your email address and authentication information. You may also provide your name, workplace, specialty, timezone, preferred journals and update frequency.

As you use MedPally, we record actions needed to run your personal feed, including papers shown, opened, saved, liked or dismissed. Our infrastructure may also process ordinary technical information such as IP addresses, browser details, request logs and error diagnostics.

How we use information

We use this information to operate and secure MedPally, personalise your feed, remember your preferences, provide account support, improve reliability and communicate about your account.

AI summarisation

The summarisation service receives publication details, the PubMed abstract and a specialty label. It does not receive your account details, personal reading activity, saved papers or journal preferences. See AI summarisation for more information.

Service providers

MedPally relies on service providers for application hosting, database hosting, transactional email, optional Google sign-in, error monitoring and AI summarisation. They process information only for the functions they provide and under their own security and privacy commitments.

Some providers may process information outside the UK. Where data protection law requires it, we rely on an applicable adequacy arrangement or contractual safeguards for those transfers.

Cookies

MedPally uses essential cookies for sign-in, account security and session continuity. We do not currently use advertising cookies or sell personal information for targeted advertising.

Retention and deletion

We keep account information while your account is active and as reasonably necessary for security, legal obligations and service operation. You can delete your account from the Account page. Deletion removes the account and its associated preferences and reading state from the active service, subject to limited backups and records we must retain.

Your choices

You can update your profile and journal preferences inside MedPally. Depending on where you live and the relevant legal basis, you may also have rights to access, correct, restrict, object to processing, export or erase personal information, and to withdraw consent where processing relies on it.

You can raise privacy questions or rights requests using the contact details provided in MedPally account communications. In the UK, you also have the right to complain to the Information Commissioner's Office.

Security and changes

We use reasonable technical and organisational safeguards, but no online service can guarantee absolute security. We may update this notice as MedPally changes and will revise the date above when we do.