Legal

Privacy Policy

MatchPath helps International Medical Graduates explore US residency programs. This policy explains what we collect, why, who we share it with, and the choices you have.

Last updated October 18, 2026

Who We Are

MatchPath aggregates publicly available data on US residency programs into a single catalog for applicants. When we say we or MatchPath in this policy, we mean the operator of the matchpath.app website and its dashboard.

What We Collect

We aim to collect the minimum needed to run the product:

  • Account details — your email and authentication credentials when you create an account, handled by our auth provider.
  • Your activity in the app — programs you track, notes, rank lists, and alert preferences you create. This is data you enter, stored so the product works for you.
  • Usage and device data — pages visited, approximate location, browser, and similar analytics, collected only with your consent (see cookies).
  • Payment data — if you subscribe to Pro, billing is processed by our payment provider; we never see or store full card numbers.

How We Use Your Data

We use your data to provide and secure the product, save the programs and lists you build, send the alerts you ask for, process subscriptions, and — with consent — measure usage so we can improve the catalog. We do not sell your personal data.

Cookies and Analytics

We use cookies and similar technologies, governed by Google Consent Mode v2. Analytics and advertising storage stay denied until you accept in the banner. The categories we control are analytics (the analytics_storage signal) and advertising (the ad_storage, ad_user_data, and ad_personalization signals). Our Cookie Policy lists every category and lets you change your choices.

If you reach us by starting a WhatsApp conversation from one of our ads, we store the phone number WhatsApp identifies you by together with the identifier for the ad you tapped, so that a later sign-up can be credited to the right campaign. That record exists only for campaign measurement: it is never used to contact you outside the conversation you started, is never published or shared, and is deleted automatically once the measurement window has passed. The conversation itself is governed by WhatsApp’s own terms, not by the cookie choices on this site.

Who We Share It With

We share data only with the service providers that run MatchPath, each bound to handle it on our behalf:

  • Google (Tag Manager and Analytics) — usage analytics, only with consent.
  • Hetzner — the servers that host the site.
  • Convex — the database that stores your account and saved items.
  • Our payment processor — subscription billing.
  • Product analytics and experimentation tools — to understand features and improve them, only with consent.
  • Meta (Facebook, Instagram, WhatsApp) — so we can tell which of our ads brought applicants to MatchPath. We report sign-ups and subscriptions to Meta from our own servers, identified by an advertising click identifier rather than by you. Those reports carry the plan purchased and its price, and never your name, email address, phone number, or anything about your health.

The program catalog itself is built from publicly available information and is not personal data about you.

Data Retention

We keep account and activity data for as long as your account is active. When you delete your account we remove your personal data within a reasonable period, except where we must retain limited records for legal or accounting reasons.

You can delete your account yourself, at any time, under Settings → Profile in the web app or in Settings in the mobile app. Deleting it erases your tracker, rank list, interview notes, saved notes and alerts, and cancels an active Pro subscription. It cannot be undone.

Your Rights

Depending on where you live — including under the GDPR — you may have the right to access, correct, export, or delete your personal data, and to object to or restrict certain processing. Where we rely on consent, you can withdraw it at any time without affecting prior processing. To exercise any of these, contact us at the address below; you also have the right to complain to your local data protection authority.

Children

MatchPath is intended for medical graduates and is not directed at children under 16. We do not knowingly collect data from children.

Changes to This Policy

We may update this policy as the product evolves. When we make a material change we will revise the date at the top of this page and, where appropriate, notify you in the app.

Contact Us

For any privacy question or request, reach us at privacy@matchpath.app.