Privacy
What MedGrasp collects about you, why, and who else sees it. Today that is very little.
NoteDraft for review
This page is a draft. It was written to say exactly what the site does today, for the owner and a lawyer to review before launch. It is not legal advice.
To be completed before launch: the business name, the registered address, the governing law, the contact email address.
The short version
- You do not need an account to read MedGrasp, and there are no accounts yet.
- MedGrasp does not run analytics and does not track you across pages or sites.
- No advertising runs, so no advertising company receives anything about you.
- MedGrasp sets no cookies.
- A few small settings are kept in your own browser and are never sent to MedGrasp: your theme, your recent searches and whether you dismissed the install suggestion.
- Topics you open are saved on your device so you can read them offline. That is a record of your reading, kept only on your device. You can clear it at any time.
- What you type in the search box is not sent to MedGrasp.
Who is responsible
Whoever runs the site decides how information about you is used on it. You can reach MedGrasp through the contact page.
What happens when you read a page
Your browser asks MedGrasp’s host, Vercel, for the page. Like every web host, Vercel keeps ordinary technical logs of requests, such as the address asked for, the time, the network address it came from and the type of browser, in order to deliver the site and keep it secure. MedGrasp does not use these logs to build a profile of you, and it does not add anything to identify you across visits. Vercel handles them under its own policy: Vercel privacy policy.
The pages load no scripts, fonts, images or trackers from other websites. The fonts are served by MedGrasp itself. Links in the references go to other websites; if you follow one, that website’s own policy applies.
What is kept on your device
MedGrasp writes to your browser’s local storage only for settings you asked for, and never sets a cookie. These stay on your device and are not sent to MedGrasp:
mg-theme: The word light or dark. Shows the theme you chose from the first moment of the next page, instead of flashing the other one.mg-recent-searches: Your last searches, up to six. Offers them again as quick choices in the search box.mg-install-dismissed: The date and time you pressed Not now on the Install MedGrasp suggestion. Hides the suggestion for 90 days so it does not keep asking.
For offline reading, the site also saves copies of the topics you open, their figures, its own files and the search files you used, in your browser’s cache on your device. Up to 50 topics are kept, none longer than 30 days. Nothing from another website, nothing you submit and no search results page is saved. Press Clear offline data in Privacy settings (footer) to delete it.
The full list, with how to remove each, is on the cookies and storage page.
Search
Search runs in your browser, from index files that MedGrasp publishes: what you type while searching is not sent to MedGrasp. The search page puts your search in its address (/search?q=). If you reload that address, share it, or search without JavaScript, the host receives the address like any other page request, as described above. MedGrasp does not store or analyse it.
Advertising
No advertising runs on MedGrasp today, so no advertising company receives anything about you. If MedGrasp turns advertising on, this page will describe it first, and advertising will load only if you agree in a privacy banner.
Analytics
MedGrasp runs no analytics: it does not count visits, record what you read or measure how you use the site.
Who else handles information
- Vercel hosts the site and keeps the request logs described above.
- Supabase provides the database that accounts will use. Today the only use is a health-check address that reads a single status row; nothing about visitors is read from it or written to it. See Supabase’s privacy policy.
- No AI provider receives anything from you today: the site has no AI features yet.
MedGrasp does not sell information about you and does not share it for other companies’ marketing.
Your rights
Depending on where you live (for example under the UK and EU GDPR, or Uganda’s Data Protection and Privacy Act 2019), you may have the right to ask what information a service holds about you, to have it corrected or deleted, to object to how it is used, and to complain to your data protection authority. Because MedGrasp has no accounts and does not identify visitors, it holds no information about you that it could look up. What is in your browser’s local storage is yours to see and delete (see the cookies page). If you think MedGrasp holds something about you, tell us through the contact page.
Children
MedGrasp is written for students of medicine and for doctors. Reading it needs no account, and the site adds nothing to identify you, whatever your age. Accounts, when they exist, will be for people aged 16 and over.
Changes to this page
This page is updated in the same change as any change to what the site does with information. The date at the top shows when it last changed.
Not in effect yet
When accounts launch
MedGrasp has no accounts today. This section describes what will apply once accounts exist, so that you can see it beforehand. It does not describe anything the site does now.
Accounts are for people who want to save their progress and use the study tools. Reading will stay free without one. When they exist, this is what will apply.
What an account will hold
- Your email address, to sign you in, and, if you choose to give them, your name, your level of study and your country.
- What you do in the study tools: reading progress, bookmarks, highlights and notes, exams and results, flashcards, summaries, slide decks, practice sessions and study plans.
- Your plan and its status. A payment provider handles card details; they never reach MedGrasp’s servers.
- How much of the AI features you have used, so limits can be applied.
AI features
When you ask an AI feature for something (an exam, a summary, an answer from a topic), the request, including the topic text it works from and anything you type, is sent to Anthropic to be processed. The AI key stays on MedGrasp’s server and never reaches your browser. No real patient information belongs in any request.
Your control
- You will be able to export your data and delete your account yourself, at once, from your settings. See account deletion.
- Each person’s study data will be visible only to that person, enforced in the database.
- Analytics and advertising will stay off unless you agree.
How long each kind of data is kept will be stated here before accounts open.