Privacy Policy

What we collect

Everything ClinBound stores about you falls into these categories:

• Account: your email address and a password (stored only as a secure hash — we cannot see it).
• Profile: your name, whether you're pre-med or pre-dental, your school year, state of residency, and expected application cycle.
• Academic record: courses, grades, GPA calculations, and standardized test scores (MCAT/DAT) that you enter.
• Experience: clinical, volunteer, research, and other activities you log, including organizations and hours.
• Applications and schools: your saved schools, application statuses, goals, to-dos, and letters-of-recommendation tracking.
• Documents: essays and personal statements you write in the app, and files you upload (such as a resume).
• Learning activity: which practice questions you've answered and whether you got them right.
• AI Advisor conversations: the messages you exchange with the advisor.
• Device token for notifications: if you enable push notifications, a device token — not your location, contacts, or anything else on your phone.
• Usage analytics: which screens you open and when, plus counts of actions you take (for example, that a practice question was answered and whether it was correct). These records never include anything you wrote — no essay text, no question content, no school names, no grades or scores. You can turn this off at any time in Settings → Privacy.

ClinBound contains no advertising and no third-party analytics or tracking SDKs. The usage analytics described above are recorded in ClinBound's own database and are not shared with any analytics vendor, ad network, or data broker. We do not collect your location, contacts, photos, or browsing history. We do not sell personal information, and we have never done so.

How we use it

Your data is used to do the things you can see the app doing: calculating your GPA and readiness score, tracking your pace against your goals, personalizing the AI Advisor's answers, and sending the notifications you've asked for. That's the list. We don't build advertising profiles and we don't use your data to train AI models.

AI features, honestly described

When you use the AI Advisor or AI-generated planning features, a summary of relevant parts of your profile (such as your track, GPA, test scores, and activity hours) is sent to our AI provider, Anthropic, to generate the response — from our servers, never directly from your device, and only the minimum needed for the feature. You can exclude specific parts of your profile from advisor context inside the conversation screen. AI-generated content is always labeled as such in the app, and it can be wrong — it is not admissions advice, and no AI output is a promise about your chances.

Voice recording and transcription

Interview practice can record your answer so you can hear yourself back. That recording stays on your device and is deleted when you move to the next question. It is never uploaded to ClinBound, and we have no way to listen to it.

Live transcription is different, and worth being precise about: it is performed by your browser's or your phone's own speech service, not by us. On most devices — Chrome on the web, and the standard iOS and Android speech engines — that service sends the audio to Apple or Google to turn it into text, governed by their privacy policies rather than this one. We do not receive the audio at any point. The transcribed text becomes your answer, and is stored only if you save that answer. Transcription is optional: typing your answer instead keeps everything on your device.

Who processes your data

ClinBound runs on a small number of infrastructure providers, each doing one job:

• Supabase — database, authentication, and file storage (hosted in the United States, us-east-2).
• Vercel — hosts our servers and this website.
• Anthropic — processes AI Advisor requests, as described above.
• Stripe — handles payment if you subscribe. Your card details go directly to Stripe; we never see or store them.
• Expo — delivers push notifications if you enable them.

These providers process data on our behalf under their own contractual and security obligations. We do not share your personal information with anyone else, except if required by law.

Security

All data is encrypted in transit (TLS) and at rest. Access to your records is enforced at the database level — every table is protected by row-level security policies that restrict rows to the account that created them, and anonymous requests can read nothing at all.

Cookies and device storage

We don't use advertising or third-party analytics cookies — on the website or in the app. There is no Google Analytics, no Facebook pixel, no ad networks, and no cross-site tracking of any kind. Our marketing site sets no cookies at all, which is why it shows no cookie banner: there is nothing to consent to.

The app itself stores only what it needs to work: your login session (so you stay signed in), and a local cache of your own data (so the app opens fast and works offline). On your phone the session is kept in the device's secure storage; in a browser it lives in local storage. Signing out clears the session and cache on that device.

The product analytics described above are first-party — collected by us, stored in our own database, never shared or sold, limited to which screens and features get used (never the content you type), and switchable off in Settings → Share usage analytics.

Retention and deletion

Your data is kept for as long as your account exists. You can permanently delete your account at any time from Settings → Delete my account inside the app. Deletion is immediate and irreversible: it removes your account and every category listed above, including uploaded files and AI conversations. There is no backup copy we can restore for you afterward.

Deleting an individual item — a course, an essay draft, a document — is slightly different: it disappears from your account immediately and you cannot get it back, and the record is then permanently erased by an automated purge within 30 days. The full detail, including what our service providers retain independently, is in the Data Retention and Deletion Policy.

Your rights

Depending on where you live (including under the GDPR and the CCPA), you may have rights to access, correct, export, or delete your personal information, and to not be discriminated against for exercising them. Most of these you can exercise directly in the app — your data is visible and editable on your Profile, and deletion is self-serve as described above. For anything else, contact us and we'll respond within 30 days.

Age

ClinBound is intended for students preparing for professional school. You must be at least 16 to use it, and it is not directed at children under 13. We do not knowingly collect personal information from anyone under 16; if we learn we have, we will delete it.

Changes and contact

If this policy changes in a way that matters, we'll say so in the app before the change takes effect — not just quietly edit this page. Questions or requests: 23quamoliv@gmail.com.