Privacy Policy

Account information. We collect information used to create and secure your account, such as your name, email address, authentication identifiers, and sign-in method.

Preferences and activity. We may collect your role, specialty and feed selections, saved or opened papers, feedback, waitlist responses, and similar actions needed to personalize and evaluate the pilot.

Technical and usage information. We may collect IP address, browser and device information, timestamps, pages or features used, diagnostic logs, and product-usage events. Browser storage is used to remember account-specific onboarding and feed choices on your device.

Email delivery information. When MedLit sends account or pilot email, we may receive delivery, bounce, and message-status information.

MedLit is not a patient-record system. Do not submit patient names, medical record numbers, dates of birth, clinical images, case narratives, or any other patient-identifying information through forms, feedback, or email.

The pilot is not offered as a HIPAA-covered workflow, and MedLit does not offer a business associate agreement for pilot use.

We use information to provide and secure accounts, personalize feeds, operate and troubleshoot the service, send requested account and pilot communications, respond to feedback, understand feature use, prevent misuse, and improve ranking, summaries, and visual presentation.

MedLit does not sell personal information or use it for third-party targeted advertising.

MedLit uses service providers to run the pilot. They may process information only as needed to provide their services. Current providers may include Supabase for authentication, database, and storage; Vercel for web hosting; Railway for background processing; Resend for email delivery; Sentry for error monitoring; and Google when you choose Google sign-in.

Providers maintain their own security and privacy terms. The provider list may change as the product develops.

Information may be disclosed to service providers, when reasonably necessary to protect users or the service, to comply with law or valid legal process, or as part of a merger, financing, acquisition, or transfer of the product. We do not disclose personal information to data brokers.

We retain information while it is reasonably needed to operate the pilot, maintain records, resolve disputes, enforce agreements, and meet legal obligations. Retention periods vary by the type of information and why it was collected.

MedLit uses reasonable technical and organizational safeguards, but no online service can guarantee absolute security.

You may update available account preferences in the product, unsubscribe from optional email using the instructions in the message, or ask to access, correct, or delete account information by emailing hello@medlitdiscovery.com. Some records may be retained where reasonably required for security, legal, or operational purposes.

MedLit is intended for adults and is not directed to children under 13. Do not create an account for a child or submit a child's personal information.

This policy may be updated as the pilot and its data practices develop. Material changes will be identified by a revised effective date or another reasonable notice.

Privacy questions and requests may be sent to hello@medlitdiscovery.com.