Information we collect
When you create an account, MedVellum receives identity information such as your name, email address and authentication status from Clerk. We store study progress, review history and selected specialty when you use signed-in synchronization. If you subscribe, we store Stripe customer and subscription identifiers, status and billing period dates; MedVellum does not receive or store full payment-card details.
How we use information
We use this information to authenticate your account, synchronize study state, provide subscribed features, prevent abuse, maintain service security, reconcile billing events and respond to support requests. We do not sell personal information or use medical-study activity for advertising profiles.
Service providers
MedVellum relies on Clerk for authentication, Stripe for payment processing, Neon for hosted database services, Vercel for application hosting, Vercel Blob for public educational images, and Google Analytics for aggregated usage measurement (page views and product events such as sign-up and checkout starts). Google Analytics is configured with IP anonymisation and without Google Signals or advertising personalisation. These providers process information under their own security and privacy terms only to deliver the relevant service.
Cookies and local storage
Authentication uses secure session cookies. Google Analytics sets first-party cookies to distinguish sessions; these are not used for advertising. Unsigned study progress and interface preferences may be stored in your browser. Signed-in synchronization copies supported study state to the MedVellum database so it can be restored across devices.
Retention and control
We retain account and study information while your account remains active and as required for security, billing, dispute resolution and legal compliance. You may request access, correction or deletion. Cancelling a subscription does not automatically delete your study history or account.
Security and children
We use managed authentication, encrypted transport, restricted service credentials and fail-closed authorization. No internet service can guarantee absolute security. MedVellum is intended for medical students and clinicians and is not directed to children under 13.
Contact
Privacy questions and data requests may be sent to navendugoyal@gmail.com.