Counseling requests and application tracking
Counseling booking requests store your account identifier, name, contact email, goals, preferred date and time, time zone, and creation date. They are stored for service review but do not confirm payment or an appointment. You can see and withdraw your requests on your dashboard. Owner email notifications are not currently enabled. Payments remain unconnected; this site does not currently collect payment credentials.
Your private application tracker stores school or program names, cycles, application statuses, portal links, deadlines and notes. Related requirements store essay drafts, recommendation-letter notes, task statuses and dates. We use these records to show your application progress. They are not automatically sent to schools, counselors, recommenders or AI tools. You can edit and delete them in your dashboard; deleting an application also deletes its related tracker requirements. Do not include confidential letters without authorization, patient information or unnecessary sensitive data. Keep independent copies of your application materials.
1. Who operates MedStride
MedStride LLC, an Arizona entity, operates MedStride and is responsible for the processing described here. Our intended domain is MedStride.ai. Contact legal@medstride.ai with privacy questions or requests. This policy covers our site and student tools, not independent schools or external sites linked from them.
2. Information you provide
Accounts use an email address and password or Google sign-in. Authentication providers process credentials; we also use your account identifier and optional display name. Saved quiz results include your stage, priorities, suggested routes, and next steps. Milestones include titles, dates, status, notes where provided, and reminder choices. Saved application plans include the selected quiz reference, target programs, timeline, generated content, and creation date.
AI question and recommendation fields may include academic background, coursework, grades or tests you choose to describe, general location, goals, constraints, and questions. Chat messages sent to the embedded PollyBot are processed through that provider. Do not submit patient data, government identifiers, financial credentials, or unnecessary sensitive data. Mentor requests store your stated goals, general location, availability, meeting preference, account identifier and creation date. Requests are collected for future review, with no mentor assigned or guaranteed match. You can withdraw requests on the mentor page. QR destination choices and comparison selections are handled in your browser; the QR tool does not need student records.
3. Technical information and browser storage
Hosting, authentication, security, and AI services may process request metadata such as IP address, browser/device details, timestamps, session identifiers, and error or security logs. Your browser stores authentication sessions, theme preferences, quiz progress, and temporary sign-in destinations. Tracked application-plan checklists are temporary page state for the current visit; they do not create saved milestones. Clearing browser storage can remove local progress and sign you out; it does not itself delete records saved to your account.
The site loads fonts from Google and an embedded PollyBot script. These providers receive technical requests when their resources load and may use their own storage or identifiers. Their exact retention and tracking settings depend on their services. We do not claim that all third-party scripts are tracking-free.
4. Why we use information
We use information to authenticate you, personalize and save guidance, show progress, generate the requested AI response, maintain and secure services, investigate misuse, handle support and legal requests, and comply with law. We store mentor requests for reviewing a future connection; no mentor contact details or student information are currently shared for a match. We store reminder choices, but email reminders are not currently being sent. If sending is enabled, the event and your email will be used for expected milestone notices.
Where a legal basis is required, we rely as appropriate on providing requested services, legitimate interests in security and operation subject to your rights, compliance with law, or consent where required. Accepting Terms is not consent to every possible optional processing activity.
5. AI processing and providers
AI requests are sent server-side through Lovable AI Gateway to the configured model provider, currently OpenAI for the on-site guidance and planning tools. A saved-plan request includes relevant quiz fields, targets, and timeline; a pathway recommendation includes your supplied background, location, and goals. Avoid identifiers where general circumstances are sufficient.
The application requests non-stored model responses where supported, but that setting does not establish that every gateway, hosting, or provider log is immediately deleted, never retained, or never used for another permitted purpose. Provider retention and processing depend on applicable terms and workspace settings. We do not promise zero retention or that all vendors prohibit training unless separately verified. Saved completed application plans remain in your account until deleted or otherwise handled under our retention practices.
6. When information is disclosed
Our service providers process information as necessary for their functions, including Lovable Cloud for hosting, account authentication and saved data, Lovable AI Gateway and its model provider for AI requests, Google for optional sign-in and fonts, and PollyBot for the embedded chat. Providers may have their own terms for independently controlled processing. Access to private saved records is intended to be limited to your account and authorized operational access, not other students.
We may disclose information where legally required, to protect rights and safety, to investigate fraud or security issues, with your direction or valid consent, or as part of a lawful corporate transaction subject to appropriate safeguards. We do not make an unverified representation about whether every provider activity constitutes a sale, sharing, or targeted advertising under every jurisdiction's definitions. Contact us to exercise applicable opt-out rights.
7. Storage, retention, and deletion
Information is retained as reasonably needed to provide requested services and address legal, security, dispute, and operational requirements. Retention varies by record type and provider; this policy does not promise a fixed deletion period. You can delete saved quiz results, milestones, and plans through the dashboard. Deleting a quiz does not necessarily delete a separately saved plan containing information drawn from it; delete that plan too.
For account deletion or broader requests, email our legal contact. We may verify your identity and retain only information required or permitted for legitimate purposes. Backups, logs, and third-party records may not disappear immediately when a displayed record is deleted; we will explain relevant limitations in responding to a request. Do not send passwords or identity documents unless a secure verification method is agreed.
8. Your controls and privacy rights
You may update your displayed name, delete saved records, stop submitting AI requests, sign out, and clear local browser data. Depending on your jurisdiction, you may have rights to access, correct, delete, receive a copy of information, restrict or object to processing, withdraw consent, opt out of legally defined sale/sharing or profiling, or appeal a denied request. Submit requests to legal@medstride.ai. We respond within applicable legal time limits and may ask for proportionate verification or authorization.
We will not unlawfully discriminate against you for exercising rights. Withdrawal does not affect earlier lawful processing. You may complain to the relevant privacy regulator. No recommendation is an official admissions decision; ask a qualified human adviser to independently review consequential choices.
9. Children and school records
Accounts and interactive tools are intended for ages 13 and older. Minors should use them with a parent or guardian. We do not intentionally solicit personal information from children under 13. Do not submit it. If you believe a child under 13 has provided information, contact us so we can investigate, stop inappropriate processing, and take required action. A policy statement is not a substitute for legally required parental notice or consent if children's-privacy laws apply.
MedStride is not automatically a school's official record system or a FERPA-covered institution. School-organized use and disclosure of education records require a separate assessment and appropriate arrangements. This policy does not certify FERPA, COPPA, HIPAA, or any other regulatory compliance.
10. Security and international processing
We use account authentication and access controls intended to protect saved information. No website, storage system, or transmission is perfectly secure, and we do not guarantee absolute security. Use a strong password and avoid shared-device exposure. Information may be processed in countries where our providers operate, with different legal protections. Where required, applicable safeguards must be used for cross-border transfers.
11. External links, QR codes, and policy changes
Opening an official resource or a QR destination takes you to the selected site, which may collect information under its own policy. QR codes do not contain your quiz or account information. Verify the address before scanning or distributing a code.
We may update this policy as services or legal obligations change. We post an updated effective date and provide additional notice or seek consent when required. Contact MedStride LLC at legal@medstride.ai for questions or requests.