Privacy Policy

1. Who we are and what this policy covers

ClinBound LLC, an Arizona limited liability company, operates ClinBound. This policy covers our website and application for pre-medical and pre-dental educational planning. Contact support@clinbound.com about privacy. Our service is offered in the United States.

We use personal information to provide and secure the service, support users, administer subscriptions, and meet legal obligations. We do not sell personal information, share it for cross-context behavioral advertising, or use your private content to train general-purpose AI models. Deletion has specific, limited exceptions described below; it is not an assurance that every record everywhere disappears instantly.

2. Information we collect

• Account and authentication: email, name, date of birth, account identifiers, verification status, and login information. Your date of birth is entered at sign-up, shown and editable on your profile, and used to apply our minimum-age requirements; it is self-reported and we do not check it against identity documents. Supabase handles password authentication using password hashes. If you use Apple or Google sign-in, we receive identifiers and information those services authorize; Sign in with Apple may provide a relay email. We retain the Apple authorization credentials needed for revocation on account deletion in restricted server storage.
• Profile and planning: track, academic year, residency state, application cycle, timezone, goals, readiness inputs and results, saved schools, tasks, calendar events and your own deadlines, saved opportunities, and generated plans.
• Academic and experience information: courses, grades, test scores, GPA estimates, organizations, roles, supervisors, hours, dates, notes, and related information you provide.
• Application content: essays and their drafts, application statuses and events, recommendation tracking, uploaded documents or selected images, and attachments. Imports can contain personal information about you or others.
• Practice and AI activity: study attempts and results, interview questions, typed or transcribed answers that are saved, timing and attempt history, optional AI feedback, Advisor messages, and AI request/token counts and timestamps.
• Billing and consent: customer, product, transaction and subscription identifiers; provider, status, price and currency where supplied; billing periods; legal acceptances; purchase attestations; AI acknowledgments; and renewal-notice records. We do not collect your full card number or card security code.
• Support and communications: messages or feedback you send, delivery records, and account-related correspondence. Feedback sent through the app can include app version and platform.
• Device and operational information: push tokens if notifications are enabled, app/browser/platform versions, network requests and IP addresses processed by infrastructure providers, error details, and a pseudonymous account identifier in diagnostics. Optional first-party usage analytics record allowed screen and feature events, timestamps, and limited outcomes such as whether a practice answer was correct.

We receive information from you, from use of the service, from authorized sign-in and payment providers, and from the device permissions you grant. We do not request precise location or contacts, scan your photo library, or monitor your browsing outside ClinBound. A residency state you enter is different from device location. Selecting an image or using the camera shares the image you choose, not unrestricted access to your library.

3. Why we use information

We use information to authenticate you; save and synchronize records; calculate and display planning information; provide requested AI and import features; deliver enabled reminders; process subscriptions and access; answer support requests; diagnose faults; prevent abuse; maintain consent evidence; and satisfy legal obligations. Optional usage analytics help us understand feature use and improve the product.

Authorized personnel may access information when reasonably necessary for support, security, or these operational purposes. We do not promise that no human can ever access stored text. Private content is not published for other users by these features. Your reports to ClinBound are handled as support, not permission to send your private content to an AI provider for model training.

4. AI processing and your choices

Our generative AI provider is Anthropic, accessed through our servers. Advisor messages and relevant profile context, such as grades, test scores, hours, goals, and saved schools, may be sent to produce guidance. Plan generation and monthly targets use relevant planning context. A document import sends the supplied PDF, image, or text, including names and other information it contains. Interview feedback sends the answer text and question, which can include details drawn from your own records.

AI features are optional. We describe the sharing before requesting permission. After you enable AI, planning features may generate monthly targets from the relevant context; do not enable AI if you do not want this processing. You can keep using manual features, and you can turn AI off at any time in Settings → AI features, which stops anything further being sent to the AI provider, including monthly targets. Withdrawal does not recall requests already sent and does not cancel your subscription.

Under Anthropic’s commercial API policy, inputs and outputs are not used for model training by default. Its standard API retention is generally up to 30 days, with exceptions for legal and safety obligations, particular services or models, and contract settings. ClinBound does not promise zero retention or immediate deletion of an individual request from Anthropic’s systems. See Anthropic’s commercial training policy and retention policy.

Full feature details and limits are in the AI and Educational Information Disclaimer. Remove patient identifiers and unnecessary confidential information before using any text or upload feature.

5. Interview recording, transcription, and saved text

Local playback recording: optional interview audio is kept in temporary storage on your device for playback. ClinBound does not upload that playback file to its servers or Anthropic. The app attempts to remove it when you discard the take, move on, or leave practice. Device or app failures can delay local cleanup; this is not a guarantee of secure erasure from device backups or operating-system storage.

Speech transcription: if you enable speech recognition, your browser or operating-system speech service may send live audio to Apple, Google, or the speech provider used by your device. That provider’s handling is governed by its own privacy terms and your device settings. It is separate from the local playback file and from Anthropic’s text feedback. Permission to use the microphone is not a promise that recognition happens entirely on-device.

Saved answer text: typed and transcribed answers are saved to your ClinBound account when you finish an answer and the save succeeds, together with practice metadata. Typing avoids speech processing but does not mean saved text stays on your device. Asking for AI feedback sends the question and answer text to Anthropic; merely saving the answer does not request that feedback.

6. Providers and other disclosures

• Supabase: authentication, application database, and file storage.
• Vercel: website, API hosting, and related operational request processing.
• Anthropic: the optional AI processing described above.
• Stripe: web checkout, subscriptions, billing contacts, transactions, refunds, and payment-dispute handling. Payment details are entered with Stripe.
• Apple and RevenueCat: Apple purchases and subscription reconciliation. RevenueCat receives the ClinBound account identifier and purchase/entitlement information. Events can include product, transaction, price/currency, renewal, refund, cancellation, transfer, and expiration information. Apple does not supply us with your full card details.
• Apple and Google: optional sign-in; also device speech services if you use transcription. These are separate functions with separate provider settings.
• Expo: push delivery using a device token and notification content, plus app updates and related technical requests.
• Resend: transactional email delivery and feedback digests, including recipient addresses and the email or feedback content needed for delivery.
• Sentry: diagnostic errors, stack information, route/scope context, and a pseudonymous account identifier. We apply redaction to avoid sending credentials, email addresses, essays, messages, and document contents. Redaction is a safeguard, not a claim that accidental inclusion is impossible.

Providers receive information needed for their functions, subject to the contracts and legal duties applicable to them. Payment, sign-in, and speech providers may also act for their own purposes under their policies. We may disclose necessary information to professional advisers under confidentiality obligations, to comply with law or valid legal process, protect legal rights or safety, investigate abuse, or handle a business transfer with appropriate safeguards. We do not disclose more than reasonably needed for those purposes.

For a merger, financing, reorganization, or transfer of the relevant business, information may be reviewed or transferred under confidentiality and privacy safeguards. The receiving operator must honor applicable commitments; a materially different use requires any additional notice or permission required by law. This paragraph does not retroactively authorize a past transfer.

7. Cookies, storage, analytics, and tracking signals

ClinBound does not use cookies. Our website and app set no cookies of any kind — none for advertising, none for analytics, and none for keeping you signed in. What we do store sits on your own device: enough to keep you signed in, a cache so the app works when you are offline, and your preferences. It stays on that device, we do not read it for tracking, and nobody else can see it. Signing out clears it. Other companies’ pages you reach from ClinBound, such as the payment page, follow their own practices, which are not ours.

Native sign-in credentials use secure device storage. Working caches, drafts, queued offline changes, and some preferences use ordinary application storage; a browser uses browser storage for the session and cache. Protect your device and browser profile. Signing out clears the application’s session and designated caches on that device, but does not delete separately exported files or copies outside the app.

ClinBound does not use advertising pixels, cross-site behavioral advertising, or a third-party marketing analytics SDK. Its optional product analytics are stored in its own database and exclude essay text, Advisor messages, and uploaded content. Turn them off in Settings → Share usage analytics. Essential security, billing, and operational records continue when this optional setting is off.

Our current service does not vary its behavior based on a browser Do Not Track signal. Because we do not sell or share personal information for cross-context behavioral advertising, there is no such activity for a Global Privacy Control signal to opt out of. We will honor applicable opt-out requirements if our practices change. External sites you visit, payment pages, and sign-in or speech providers have their own storage and tracking practices.

8. Security and processing locations

We use safeguards including encrypted connections, provider-supported encryption at rest, access controls, database row policies, restricted server credentials, and redacted diagnostics. Public reference information is intentionally readable; private account information is subject to account permissions and necessary administrative access. No system is completely secure. These measures do not remove our legal duties if an incident occurs.

ClinBound operates from the United States. Information is processed in the United States and may also be processed in other countries where providers operate, subject to applicable contractual safeguards and law. The service is not currently offered as an EU, UK, or Canadian launch. Contact us about processing or rights questions rather than assuming geography removes any right that applies to you.

9. Retention and deletion

We generally retain your account content while your account exists and the relevant feature needs it. Item deletion and account deletion follow the Retention Policy. Account deletion removes active account records and uploaded files through a staged process; completion is irreversible for you, but it is not a single transaction across every provider.

Limited subscription-consent evidence is retained for as long as needed to meet legal, tax, and dispute-resolution obligations, and no longer than required. Initiated, uncompleted checkout records are removed after one year. Necessary legal holds may extend retention for the affected records only. These exceptions do not permit keeping all coursework or essays indefinitely. Provider records and operational backups have separate retention schedules.

Deleting ClinBound does not cancel an Apple subscription. Manage it with Apple before or after account deletion to stop further renewal. The app provides a warning and an acknowledgment path; you do not have to wait until the subscription expires to request deletion.

10. Your controls and requests

You can edit information in the app, use Settings → Export my data, request account deletion, change notification permissions, turn optional analytics off in Settings → Share usage analytics, and turn AI off in Settings → AI features. Exports contain personal information: keep them private and download linked files before the links expire.

Email support@clinbound.com to request access, correction, a copy, or deletion, or to ask about a decision. Depending on applicable law, you may also have rights to restrict or object to processing, withdraw consent, use an authorized agent, appeal a denied request, or complain to a regulator. We do not discriminate for exercising applicable privacy rights.

We may verify identity or an agent’s authority proportionately, and may decline or limit a request where law allows, with an explanation. We aim to respond within 30 days and will meet the legally applicable response period, informing you of a permitted extension when required. Withdrawal does not undo lawful processing already completed or require deletion of records we must retain.

11. Age and changes to this policy

ClinBound is for people 16 and older, and buying a subscription requires you to be 18 or older, which you confirm before checkout. We are not directed to children under 13. We rely on a self-reported date of birth and your age affirmation, not independent identity-age verification; accounts created through Apple or Google sign-in do not supply us a date of birth and are gated by that affirmation instead. If we learn an account belongs to someone under 16, we will restrict it and arrange appropriate deletion, subject to legal obligations. A parent or guardian can contact us with a concern. Do not submit information about child or adult patients.

We will identify revisions by date and notify you of material changes through the app or appropriate account contact before they take effect. When additional permission is required, we will ask for it. The LLC operator change and this version do not rewrite earlier notices or acceptances, or waive claims about earlier conduct.

All legal documents