Privacy Policy

1. Information We Collect

When you sign in with Google, we receive your name, email address, and profile picture from Google. We also store study data you enter into the app, including study logs, test scores, and content mastery progress. All of your data is stored securely and kept private.

2. How We Use Your Information

Your information is used solely to provide the MCAT Pulse study dashboard experience. This includes authenticating your account, saving your study progress, and personalizing your dashboard. We do not sell, rent, or share your personal information with third parties for marketing purposes.

3. Data Storage

Your data is stored securely using Supabase, which provides encrypted database storage and authentication services. All data is transmitted over HTTPS. We retain your data for as long as your account is active.

4. Third-Party Services

We use the following third-party services:

• Google OAuth — for authentication
• Supabase — for database, file storage, and authentication infrastructure
• Stripe — for payment processing (we never store your card details)
• Anthropic (Claude) — to parse the question text from screenshots you upload via the Chrome extension. Anthropic processes the image to return a structured question; per Anthropic’s API terms, this data is not used to train their models.
• Resend — for transactional emails (welcome, account notifications)
• Vercel — for hosting

5. Chrome Extension

The MCAT Pulse Chrome extension lets Pulse+ subscribers log mistakes from prep sites (UWorld, AAMC, Blueprint, etc.). When you press Cmd/Ctrl+Shift+M or click “Capture this tab,” the extension takes a screenshot of the active browser tab. Screenshots are uploaded to your private Supabase storage bucket and sent to Anthropic’s Claude API for parsing. We do not capture screenshots automatically — only when you explicitly trigger them.

The extension does not read page content, track your browsing, inject scripts, or run in the background. It stores only your API key in chrome.storage.local. You can revoke access at any time by removing the extension or rotating your API key in dashboard settings.

6. Your Rights

You may request deletion of your account and all associated data at any time by contacting us. You may also export your data or request a copy of the information we hold about you.

7. Cookies

We use essential cookies only for authentication and session management. We do not use tracking cookies or third-party advertising cookies.

8. Changes to This Policy

We may update this policy from time to time. Changes will be posted on this page with an updated date.

9. Contact

If you have questions about this privacy policy, contact us at hello@mcatpulse.com.