Privacy Policy

Last Updated: 5 July 2026

1. Introduction

Spranki (“Spranki”, “we”, “us”, or “our”) is committed to protecting your privacy and being transparent about how we collect, use, store, and share personal data.

This Privacy Policy explains what personal data we collect when you visit our website, create an account, download Spranki content, purchase a Premium Spranki Subscription, subscribe to emails, submit a form, or otherwise interact with Spranki.

This Privacy Policy should be read together with our Terms & Conditions, Legal Disclaimer, and Cookie Policy or cookie notice.

2. Who We Are

Spranki provides educational and revision resources for UK-based medical students and healthcare professionals.

Website: www.spranki.com
Email: info@spranki.com
Location: United Kingdom
Legal entity: SPRANKI LTD
Company number: 16683133
Registered office / business address: 5 Brayford Square, London, England, E1 0SG

For the purposes of UK data protection law, Spranki is the controller of the personal data described in this Privacy Policy, unless stated otherwise.

3. Personal Data We Collect

We may collect the following personal data:

Account and contact details
This includes your name, email address, account details, subscription status, and email preferences.

Payment and subscription details
If you purchase a Premium Spranki Subscription, our payment provider processes payment and billing information, including transaction details, renewal status, cancellation status, and refund information. Spranki does not store your full payment card details.

Email and marketing preferences
If you opt in to Spranki update emails, we may process your email address, consent status, unsubscribe status, and email engagement information such as opens and clicks.

Feedback and communication data
If you submit a feedback form, report an error, or contact us, we may process your name, email address, message, and any information you choose to provide.

Website and technical data
When you use our website, we may collect technical information such as IP address, browser type, device type, pages visited, approximate location, cookies, analytics data, and security logs.

Geo-blocking data
Because Spranki is intended for users in the United Kingdom, we may use IP address or approximate location data to help restrict access from outside the UK.

4. How We Use Your Personal Data

We use personal data to:

  • provide access to the Spranki website, Free Spranki Deck, and Premium Spranki Subscription;
  • create and manage user accounts;
  • process payments, subscriptions, renewals, cancellations, and refunds;
  • send essential service emails, such as account, payment, access, subscription, legal, or security notices;
  • send Spranki update emails where you have opted in;
  • manage email preferences and unsubscribe requests;
  • respond to support queries, feedback, and error reports;
  • improve Spranki content, website performance, and user experience;
  • protect Spranki against fraud, misuse, unauthorised access, account sharing, and unauthorised redistribution of content;
  • comply with legal, accounting, tax, and regulatory obligations; and
  • enforce or defend our legal rights.

5. Lawful Bases for Processing

We only use personal data where we have a lawful basis under UK data protection law.

We may rely on:

Contract — to provide your account, downloads, subscription, payments, and related service communications.

Consent — where you opt in to Spranki update emails, marketing emails, or non-essential cookies.

Legitimate interests — to operate and improve Spranki, protect our content, prevent misuse, respond to queries, secure the website, and understand how users interact with our services.

Legal obligation — where we need to keep records or comply with tax, accounting, consumer, or regulatory requirements.

Where we rely on consent, you can withdraw consent at any time.

6. Emails and Marketing

If you opt in, we may send Spranki update emails about deck releases, card updates, corrections, new subjects, tag improvements, revision tips, premium content updates, Spranki offers, and relevant partner offers.

You can unsubscribe at any time by clicking the unsubscribe link in our emails or contacting us at info@spranki.com.

Unsubscribing from marketing or update emails will not stop essential service emails relating to your account, purchase, subscription, access, legal notices, or security.

7. Cookies and Analytics

We use cookies and similar technologies to operate the website, support account and checkout functionality, improve performance, and understand website usage.

Some cookies are strictly necessary for the website to work. Other cookies, such as analytics or marketing cookies, may require your consent.

You can manage cookies through your browser settings and, where available, through our cookie banner or cookie preferences tool. Disabling some cookies may affect website functionality, account access, checkout, or downloads.

8. Third-Party Service Providers

We use trusted third-party providers to operate Spranki, including:

Webflow — website hosting, forms, and website functionality.
Memberstack — accounts, memberships, access control, and subscription status.
Stripe — payments, billing, renewals, cancellations, refunds, and receipts.
Mailchimp — email updates, mailing lists, email preferences, unsubscribe management, and email analytics.
Google Analytics — website analytics and usage insights, where enabled.
AMBOSS and other partners — where relevant to sponsorships, affiliate links, offers, or partner communications.

These providers may process personal data for the purposes described in this Privacy Policy. Their use of personal data is also subject to their own privacy policies.

We do not sell your personal data.

9. International Transfers

Some of our service providers may process or store personal data outside the United Kingdom, including in the United States or the European Economic Area.

Where this happens, we rely on appropriate safeguards where required, such as adequacy regulations, standard contractual clauses, the UK International Data Transfer Agreement, or other lawful transfer mechanisms.

10. How Long We Keep Personal Data

We keep personal data only for as long as necessary for the purposes described in this Privacy Policy.

In general:

  • account data is kept while your account is active and for a reasonable period afterwards;
  • payment and transaction records are kept as needed for tax, accounting, legal, and dispute purposes;
  • marketing data is kept until you unsubscribe, withdraw consent, or your data is deleted in line with our retention processes;
  • unsubscribe records may be kept to ensure we do not send further marketing emails;
  • feedback and support messages are kept for as long as needed to respond, improve Spranki, and keep appropriate records;
  • analytics and security data are kept for a limited period according to the settings of the relevant service.

We may keep certain data for longer where required by law or where necessary to establish, exercise, or defend legal claims.

11. Data Security

We take reasonable steps to protect personal data, including using secure third-party providers, SSL encryption, account authentication, access controls, and payment processing through Stripe rather than storing full card details ourselves.

However, no website, online service, or email system can be guaranteed to be completely secure.

12. Your Rights

Under UK data protection law, you may have rights to:

  • access your personal data;
  • correct inaccurate personal data;
  • request deletion of your personal data;
  • restrict how we use your personal data;
  • object to certain processing;
  • request data portability;
  • withdraw consent where processing is based on consent; and
  • complain to the Information Commissioner’s Office.

To exercise your rights, contact us at info@spranki.com.

We may need to verify your identity before responding. Some rights are subject to legal exceptions, including where we need to keep data for legal, accounting, security, contractual, or legitimate business reasons.

13. Patient Information and Sensitive Data

Spranki is an educational platform. You must not submit patient-identifiable information, confidential clinical information, medical records, or unnecessary sensitive personal data through Spranki forms, feedback links, or emails.

If you submit such information, we may delete it and may not be able to respond fully.

14. Children

Spranki is intended for users aged 18 and over. We do not knowingly collect personal data from children under 18.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated “Last Updated” date.

Where changes are significant, we may also notify users by email, website notice, or account notice.

16. Contact Us

If you have questions about this Privacy Policy or how we handle personal data, contact:

Email: info@spranki.com

You also have the right to complain to the Information Commissioner’s Office, the UK data protection regulator.