Privacy policy

Optional quality measurement

Help measure loading, responsiveness, layout shifts, playback errors and completed study steps. Off until you choose it. Fixed categories and random measurement IDs go to our existing Cloudflare logs; answers, account IDs and private URLs are excluded. Hosting logs last up to seven days. Our reporting procedure keeps any local measurement export for no more than seven days; aggregate reports contain no measurement IDs. Analytics opt-out also stops this measurement.

Study use is self-declared, not a verified student identity. Declining does not affect studying.

What this policy covers

Meyshan Med is an educational study environment for medical students. This policy explains how information is handled when you browse the site, use guest practice, sign in, use analytics, or choose microphone-based Mitski voice support.

Guest practice and signed-in use

Guest study progress and preferences are stored locally on your device. If you sign in, identity details supplied by the sign-in provider and selected study progress may be used to provide private synchronisation. Signing out does not erase local offline study data; Settings provides a separate Clear device data control.

Sign-in and third-party identity processing

Optional account access uses Google Sign-In (operated by Google) or a one-time code sent to your email (delivered by Resend on our behalf). When you sign in, Meyshan Med receives only the identity the provider has verified: your email address and, for Google, your name. We use it to identify your private account, synchronise selected study records, protect personal voice sessions and associate authorised write actions with you. A sign-in method is linked to the account whose verified email matches; every link is recorded and the site owner can reverse it on request. Sessions are kept on our own servers as HttpOnly cookies and can be revoked. The earlier “Sign in with ChatGPT” option was retired on 13 September 2026 because OpenAI offers it only to selected partners; accounts created with it are reachable again by signing in with the same email address.

Optional newsletter

Newsletter signup is separate from signing in and remains closed until its sending identity and consent wording have been approved. If signup is opened and you explicitly request updates, we store your email address, selected Countdown, High-Yield or new-video topics, consent wording version, signup source, confirmation time and delivery records. Resend processes your address and messages on our behalf. Opening a confirmation link does not subscribe you; you must press Confirm. Each confirmation email includes a preference and unsubscribe link. Unsubscribe, bounce and complaint suppression records are retained to prevent unwanted re-enrolment; signing in does not override them. Contact support@meyshan.com to request access, deletion or review of a suppressed address. Confirmation links expire after 24 hours. Short-lived hashed connection identifiers limit abuse; newsletter links are not used for analytics.

Analytics and cookies

We use Google Analytics 4 to understand page visits and product interactions such as completed study pulses and practice activities. Google may set or read analytics identifiers. We do not send medical answers, uploaded book content, microphone audio, or the text of your Mitski conversations to GA4. We also classify visits into broad sources such as search, AI assistants, social, email or direct. Only allowlisted source categories are sent; raw referrer URLs, search terms and campaign text are not. A coarse source category may be kept in session storage while you browse. Your analytics opt-out remains available in Settings. Browser and hosting infrastructure may also process basic technical data needed for security, reliability and abuse prevention.

Microphone and Mitski voice

Microphone access is optional and begins only after you activate voice and grant browser permission. Audio is transmitted securely for real-time AI voice processing so Mitski can respond. Do not share patient-identifiable information, confidential hospital material, passwords, or sensitive personal data. You can revoke microphone permission in your browser at any time.

Uploads and educational content

Only upload material you have the right to use. Student uploads may be processed to generate educational questions, recall cards or feedback. Avoid copyrighted commercial question banks and remove all patient identifiers before uploading clinical material.

For Lecture Rescue, Meyshan does not write the original pasted lecture text to its application database. Generated maps, questions, answers and lessons are saved on your device; cards you explicitly accept can also be saved in your signed-in Recall account. Generated material can contain excerpts or ideas from your input. Meyshan also stores AI usage counters, signed-in case results and study state where account sync is supported. Other uploads, including your private Spotter images and Tube videos, are stored to provide those features. Pasted lecture text is excluded from analytics and is not added to a shared library.

AI provider retention

AI requests are processed by OpenAI. The store:false setting used for text requests does not disable abuse-monitoring retention. OpenAI may retain request and response content in abuse-monitoring logs for up to 30 days by default, with longer retention possible for legal or safety reasons. We have not established that this pilot has approved Zero Data Retention controls. See OpenAI’s data controls. Do not submit patient identifiers or confidential clinical records.

Your choices

You may use guest mode, decline microphone permission, block analytics cookies through browser controls, sign out, or clear device data in Settings. For privacy questions or deletion requests relating to synced data, contact privacy@meyshan.com.

Safety and retention

We use reasonable safeguards and retain information only as needed to operate, secure and improve the pilot. No internet service can promise absolute security. Meyshan Med is not designed to hold patient records or provide clinical care.