This Privacy Policy explains what information MedRecall (“we”, “us”) collects, how we use it, and the choices you have. MedRecall is a study tool for MCAT preparation operated by MedRecall.
Information we collect
- Account information. Your email address and a securely hashed version of your password. We never store your password in plain text.
- Study data you create. Your decks, flashcards, review history, practice-question attempts, practice-test scores, exam date, and the study activity used to compute streaks and progress.
- Content you submit to AI features. Notes, topics, uploaded PDFs, and tutor messages you send to our AI generation and tutoring features.
- Usage metering. Counts of AI generations and token usage, used to enforce plan limits and prevent abuse.
- Subscription status. Your plan, trial status, and whether you are subscribed.
- A session cookie. A single HttpOnly cookie that keeps you signed in. We do not use advertising or third-party tracking cookies.
How we use your information
- To provide the service — schedule spaced-repetition reviews, run practice questions, and show your progress.
- To generate and explain study content through our AI features.
- To operate accounts, enforce plan limits, and secure the service.
- To communicate with you about your account when necessary.
We do not sell your personal information, and we do not use your study content to serve ads.
Third parties we share data with
We use a small number of service providers to run MedRecall. They process data only to provide their service to us:
- Anthropic — powers our AI card/question generation and tutor. The content you submit to those features is sent to Anthropic to produce a response, subject to Anthropic’s terms and privacy policy.
- Hosting & database — our application host (Vercel) and database provider (Supabase) store and serve your data.
- Payments — when paid subscriptions are enabled, a payment processor (Stripe) will handle billing. We do not store your full card details.
Data retention & your choices
We keep your data for as long as your account is active. You can request a copy of your data or deletion of your account by contacting us at amenaker07@gmail.com; we will delete your account data within a reasonable period, except where we must retain records to meet legal obligations.
Security
Passwords are hashed, sessions use HttpOnly cookies, and traffic is served over HTTPS in production. No system is perfectly secure, but we take reasonable measures to protect your information.
Children
MedRecall is intended for users who are at least 18 years old and is not directed to children. We do not knowingly collect data from anyone under 18.
Changes
We may update this policy from time to time. Material changes will be reflected by the “last updated” date above.
Contact
Questions about this policy? Contact us at amenaker07@gmail.com.
MCAT is a registered trademark of the Association of American Medical Colleges (AAMC). MedRecall is not affiliated with, endorsed by, or sponsored by the AAMC. AI-generated study content may contain errors and is not a substitute for official preparation materials or professional advice.