Privacy Policy

MatchPath aggregates publicly available data on US residency programs into a single catalog for applicants. When we say we or MatchPath in this policy, we mean the operator of the matchpath.app website and its dashboard.

We aim to collect the minimum needed to run the product:

• Account details — your email and authentication credentials when you create an account, handled by our auth provider.
• Your activity in the app — programs you track, notes, rank lists, and alert preferences you create. This is data you enter, stored so the product works for you.
• Usage and device data — pages visited, approximate location, browser, and similar analytics, collected only with your consent (see cookies).
• Payment data — if you subscribe to Pro, billing is processed by our payment provider; we never see or store full card numbers.

We use your data to provide and secure the product, save the programs and lists you build, send the alerts you ask for, process subscriptions, and — with consent — measure usage so we can improve the catalog. We do not sell your personal data.

We use cookies and similar technologies, governed by Google Consent Mode v2. Analytics and advertising storage stay denied until you accept in the banner. The categories we control are analytics (the analytics_storage signal) and advertising (the ad_storage, ad_user_data, and ad_personalization signals). Our Cookie Policy lists every category and lets you change your choices.

We share data only with the service providers that run MatchPath, each bound to handle it on our behalf:

• Google (Tag Manager and Analytics) — usage analytics, only with consent.
• Vercel — hosting and cookieless web analytics.
• Convex — the database that stores your account and saved items.
• Our payment processor — subscription billing.
• Product analytics and experimentation tools — to understand features and improve them, only with consent.

The program catalog itself is built from publicly available information and is not personal data about you.

We keep account and activity data for as long as your account is active. When you delete your account we remove your personal data within a reasonable period, except where we must retain limited records for legal or accounting reasons.

Depending on where you live — including under the GDPR — you may have the right to access, correct, export, or delete your personal data, and to object to or restrict certain processing. Where we rely on consent, you can withdraw it at any time without affecting prior processing. To exercise any of these, contact us at the address below; you also have the right to complain to your local data protection authority.

MatchPath is intended for medical graduates and is not directed at children under 16. We do not knowingly collect data from children.

We may update this policy as the product evolves. When we make a material change we will revise the date at the top of this page and, where appropriate, notify you in the app.

For any privacy question or request, reach us at privacy@matchpath.app.