Legal
Privacy Policy
Last updated: April 2026
Draft notice
This page is a working draft. Final policy will be reviewed by counsel before MedPath accepts paying users.
What we collect
When you create a MedPath account we collect your email address and (optionally) your first name. As you practise we record the questions you answer, your answers, and the time taken — this powers the adaptive engine and your progress dashboard.
What we do with it
We use your practice data to personalise question selection, show you progress, and improve the platform. We do not sell personal data to third parties.
Where it lives
Your data is stored on Supabase infrastructure (PostgreSQL). Payments are processed by Stripe — we never store your card details. Email is sent via Resend.
Your rights
You can request export or deletion of all data tied to your account at any time. Contact us at the address on the Contact page.
Cookies
We use a session cookie to keep you signed in and a privacy- friendly analytics cookie (Plausible) to understand traffic patterns. No third-party advertising trackers.