Reflection AssistantPrivacy notice
Keep patient details out
Do not put patient names, NHS numbers, hospital numbers or dates of birth in your note or your answers. Describe the case without them. The panel may warn you if your note looks like it contains one of these.
What is sent
When you ask for a draft, the extension sends:
- your note;
- your interview answers, with the questions they answer;
- for the form's text, date and choice fields: each field's label, type, section, help text, the choices (options) it offers, and whether it is required, assessor and email fields included;
- the form's title, heading and page path;
- your invite code, so the service knows the request is from an invited tester.
It never sends what is already in the form. Search fields and tick boxes, which you fill by hand, are not sent at all.
Your notes are sent to Claude, an AI model made by Anthropic, to draft your entry. The note, answers and field details go to Anthropic for processing. Anthropic's own data-retention terms apply; see Anthropic's privacy policy.
The service runs on Cloudflare Workers, so your requests pass through Cloudflare.
What is stored
The service stores nothing beyond these:
- For each invite code: a one-way fingerprint of the code (not the code itself), the name and email it was issued to, and whether it is active, so the code can be checked and revoked.
- A daily count of requests for your invite code, used for the daily limit. It expires after 2 days.
- Problem reports you choose to send with Report a problem. A report holds your comment, the page's path (the part of the address after
training.rcog.org.uk, without any query), and the form's field labels, types, sections and options. It never holds what you typed in the form or your note. Reports are kept for 90 days, then deleted. - Invite requests sent from this website: your name, email, training grade and message, if you gave them. They are kept for 90 days, then deleted, and used only to reply to you.
Your note, your answers and the draft are not stored by the service. The extension keeps your invite code in Chrome on your computer.
To limit abuse, the service counts invite requests per day against a one-way fingerprint of your IP address, never the address itself; the count expires after 2 days.
What is logged
The service logs one line of metadata for each request. It holds only:
- your invite code ID (a short label, not the code itself);
- which part of the service was called and the phase (first draft or final draft);
- the number of fields;
- the time taken;
- the status and any error code;
- the number of retries and whether a fallback was used;
- for reports: the kind of report, your answer to "How much did you change the draft?", and whether you sent anyway or edited your note after a patient-details warning.
Logs never hold your note, your answers, field labels, anything you typed, or your name or email from an invite request. The warning count never records what triggered it.
How to stop
Uninstall the extension from chrome://extensions. Nothing more is sent after that. To have your invite code turned off, or your invite request deleted, email hello@reflectionassistant.uk and we will revoke or delete it.
Questions about this notice, or about your data, go to hello@reflectionassistant.uk.
Independence
Reflection Assistant is an independent tool. It is not affiliated with, or endorsed by, the Royal College of Obstetricians and Gynaecologists.