Privacy

Privacy Policy

MedRelay collects the data needed to train students, protect accounts, process payments, and improve clinical education.

1. Information We Collect

Account data, including name, email address, authentication identifiers, and profile settings.
Simulation session data, including scenario activity, actions, timing, scores, vitals shown, deductions, and debrief content.
NREMT outcome data that students voluntarily submit after an exam attempt.
Payment data processed by Stripe. MedRelay does not store full card numbers.

Operate and improve the simulator, question bank, PCR training, scoring, and study workflows.
Generate adaptive recommendations, weak spot review, certificates, and documentation feedback.
Support research, validation, and accreditation studies using anonymized or aggregated data where appropriate.
Protect accounts, prevent abuse, monitor errors, and maintain platform reliability.

We do not sell your data.
Instructors may see student performance for their assigned cohorts or programs. Medical directors may see anonymized outcome and protocol data for oversight and validation.
Supabase — database, authentication, and file storage.
Stripe — payment processing. Stripe's privacy policy governs its handling of payment data.
Anthropic — AI-assisted scenario generation and narrative formatting.
OpenAI — transcribes voice dictation you record for PCR narrative practice into text.
Google reCAPTCHA — bot and abuse prevention on public forms (contact, institutional pilot requests).
Resend — transactional email delivery.
Sentry — error monitoring and diagnostics.
PostHog — product analytics using anonymized usage data. Loaded only if you accept analytics cookies.
Google Analytics and Google Tag Manager — product analytics. Loaded only if you accept analytics cookies.
Google Ads — advertising measurement. If you accept analytics cookies, a hashed (non-reversible) version of the email address you provide MedRelay may be shared with Google to help match ad clicks to conversions such as account sign-ups. This does not share your name, payment details, or any other account data.
Upstash — rate limiting.
Vercel — hosting, deployment, edge delivery, and privacy-preserving, cookieless traffic analytics.
Each subprocessor is contractually bound to protect your data.

We retain account and training records while your account is active and as needed for billing, security, legal, educational, or accreditation purposes.
You may request deletion, subject to records we must retain for legal, security, or financial compliance.

You may request account deletion or a data export by contacting info@medrelayapp.com.
Depending on your location, you may have rights to access, correct, delete, restrict, or object to certain processing.

Essential cookies and local storage keep you signed in, remember preferences, and protect sessions. These are required for MedRelay to work and are not optional.
Analytics cookies (PostHog, Google Analytics, Google Tag Manager, Google Ads) are only set after you accept them in the cookie banner shown on your first visit. You can change your choice at any time by clearing your browser's local storage for this site.
You can control cookies through browser settings, though some parts of MedRelay may not work without essential cookies.

MedRelay is not intended for users under 18 unless authorized by a parent, school, program, or agency.
We do not knowingly collect personal information from children under 13.

We may update this policy as MedRelay evolves. Material changes will be reflected by updating the date on this page.