Legal

Privacy Policy

Last updated: April 2026

Draft notice

This page is a working draft. Final policy will be reviewed by counsel before MedPath accepts paying users.

What we collect

When you create a MedPath account we collect your email address and (optionally) your first name. As you practise we record the questions you answer, your answers, and the time taken — this powers the adaptive engine and your progress dashboard.

What we do with it

We use your practice data to personalise question selection, show you progress, and improve the platform. We do not sell personal data to third parties.

Where it lives

Your data is stored on Supabase infrastructure (PostgreSQL). Payments are processed by Stripe — we never store your card details. Email is sent via Resend.

Your rights

You can request export or deletion of all data tied to your account at any time. Contact us at the address on the Contact page.

Cookies

We use a session cookie to keep you signed in and a privacy- friendly analytics cookie (Plausible) to understand traffic patterns. No third-party advertising trackers.