This Privacy Policy describes how PreMD ("PreMD," "we," "us") collects, uses, stores, and protects information in connection with the PreMD platform at premd.org (the "Service"). PreMD is an independent academic planning platform for students preparing for careers in medicine. It is operated on a noncommercial basis and is intended for future operation under a nonprofit organization; this policy is written to remain accurate under that structure.
Account information. When you create an account, we collect your email address and authentication credentials. If you sign in with Google, we receive your email address and basic profile information from Google in accordance with your Google account settings; we do not receive your Google password.
Records you create. The substance of the Service is a record you author yourself: coursework and grades, study plans and study logs, practice examination scores, clinical and volunteer experiences, activity descriptions, essays and drafts, school lists, interview records, expense entries, and similar material ("Student Records"). Student Records are stored solely so the Service can present them back to you.
Feedback and reviews. If you submit feedback or a review, we collect the content of the submission, the category you select, and your account identifier.
Google Calendar (optional). If you choose to sync your study plan to Google Calendar, Google issues the Service a short-lived permission, limited to calendar events, that is used in your browser to create and update your study-plan events. This permission is requested only when you click the sync button, is held only in the memory of that browser tab, and is never stored by us. We do not read, copy, or retain the contents of your calendar, and no Student Records are sent to Google other than the study-task titles and times you asked to place on your calendar. You can revoke the permission at any time from your Google account's security settings, and you can use the calendar-file (.ics) export instead without connecting anything.
What we do not collect. We do not collect advertising identifiers, we do not run third-party advertising or marketing trackers, and we do not sell or rent any personal information.
We do not use Student Records for advertising, profiling, or any purpose other than operating the Service for you.
Student Records are stored with Supabase, our database and authentication provider, in an access-controlled database. Row-level security policies are enforced at the database layer so that each account can read and write only its own records. Data is transmitted over encrypted connections (HTTPS/TLS). A copy of your most recent records may also be cached in your own browser's local storage to allow the Service to load quickly and operate offline.
No method of storage or transmission is perfectly secure; we cannot guarantee absolute security, but we apply reasonable administrative and technical safeguards appropriate to the nature of the data.
We do not sell, rent, or trade personal information. We share information only with the service providers necessary to operate the platform (database hosting and authentication by Supabase; site hosting and content delivery by Cloudflare; Google, if you choose Google sign-in or the optional Google Calendar sync), each acting on our instructions, or where disclosure is required by law. Study-plan events you sync to Google Calendar are thereafter governed by Google's own privacy policy, like anything else on your Google calendar.
The Service uses browser local storage and similar technologies strictly for functionality: keeping you signed in, caching your records, and remembering preferences such as display theme. We do not use advertising or cross-site tracking cookies.
Your records belong to you. From Settings you can, at any time and without asking us:
To delete your account entirely, or to make any access, correction, or deletion request you cannot complete in the app, contact us at [email protected] and we will respond within a reasonable period.
The Service is intended for students aged 13 and older. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided personal information to the Service, contact us at [email protected] and we will delete it.
We may revise this policy as the Service or the law evolves. Material changes will be reflected by a new "Last revised" date at the top of this page, and where appropriate, by notice within the Service. Continued use of the Service after a revision constitutes acceptance of the revised policy.
Questions about this policy or about your information may be directed to [email protected].