Privacy Policy

We collect only the information needed to run MedLearn and deliver your learning experience:

• Account information: your name, email address, profile image, and Clerk account identifier when you create or use an account.
• Learning records: mock-exam access, attempts, answers, scores, review markers, and related progress data.
• Payment records: membership plan, payment status, and Stripe transaction references. We do not store full payment-card numbers.
• Support information: information you choose to send us when you contact support. Please do not send health information or sensitive patient information.
• Optional analytics: when you allow analytics, we store a pseudonymous browser identifier, session identifier, page path, limited referrer information, and timestamp. This information is not linked to your MedLearn account.

• To create and secure accounts, authenticate users, and provide mock-exam access.
• To save attempt progress, calculate results, and show answer review.
• To process payments, manage memberships, prevent fraud, and respond to support requests.
• To improve site performance and understand page-level usage only when analytics consent is provided.
• To comply with legal obligations and enforce our Terms and Conditions.

We use carefully selected providers to operate the platform. Clerk processes authentication, Stripe processes payments, and Neon hosts our application database. These providers process information only as needed to provide their services and under their own privacy terms. We may also use hosting, email, and infrastructure providers to operate the site.

Analytics are optional. Before we record page-visit analytics, we ask for your choice. If you decline, or your browser sends a Do Not Track signal, page-visit analytics are not recorded. We do not use advertising trackers and do not connect analytics records to your account.

You can change your browser-based analytics choice by clearing this site's browser storage and choosing again when prompted.

Consented analytics records are automatically removed after 90 days. We keep account, learning, and payment records only for as long as necessary to provide the service, resolve disputes, prevent fraud, meet legal or accounting obligations, and enforce our Terms.

When Clerk notifies us that an account has been deleted, we remove the local profile name, email address, and profile image. We retain a non-identifying internal record where necessary to preserve exam, payment, and audit integrity.

We do not sell your personal information. We share it only with service providers described above, when required by law, to protect the platform and its users, or as part of a business transfer permitted by law.

We use reasonable technical and organizational safeguards designed to protect information. No online service can guarantee absolute security, so you should protect your account credentials and notify us promptly if you suspect unauthorized access.

Depending on applicable law, you may request access to, correction of, or deletion of personal information we hold about you. To make a request, contact us through the MedLearn contact page. We may need to verify your identity before responding.

Our service providers may process information in countries other than where you live. Those locations may have different privacy laws. We take reasonable steps to use providers with appropriate safeguards for the services they provide.

We may update this Privacy Policy when our services, providers, or legal obligations change. The latest version will be posted here with a revised effective date.