Privacy Policy

1. Information We Collect

When you create an account, we collect your email address and a hashed password(we never store your password in plain text). When you use our services, we also collect:

Practice question responses and scores (to power your analytics dashboard)
For MCAT practice blocks and full-length exams: your answers and the time each took, and the questions you mark, strike out or highlight. A report you send about a question is kept with your note.
Whether you use Medusa as a medical student or as a premed (your account's audience, chosen at sign-up and changeable in your account settings). It sets your defaults, such as your landing page and the term dictionary your add-on uses.
Documents you upload for card generation (temporarily stored, deleted within 24 hours)
The text of a lecture you upload for a set of QBank questions (see section 8)
Anki study data encoded in study codes: retention rates by category and, from add-on version 0.8.1, the text of up to 10 of the cards you miss most (300 characters each), so practice questions can test them
While you are signed in to the Anki add-on, daily totals of your Anki reviews: for each day, how many reviews you did, how many you didn't answer Again, and the time spent (to show on your analytics page). The first sync sends the past year. No card content, card IDs or individual reviews are sent. You can turn this off with sync_review_statsin the add-on's config.
The Anki notes you select when you make a lesson in the Anki add-on (see section 4)
The text of a document you match to your cards in the Anki add-on, and the cards that match it (see section 5)
What you type into a smart card search in the Anki add-on, and the cards it found, while the search runs (see section 6)
The cards you compare with another deck in the Anki add-on, and the cards they might match, while the comparison runs (see section 7)
Basic usage data: pages visited, features used, error logs

Tutor.When you ask the tutor about a card in Anki, Medusa sends that card's text and pictures with your question. Nothing is sent until you ask. They're kept with the tutor session in your account until you delete it, or until you haven't used it for 14 days, when it's deleted automatically. A change the tutor suggests to your cards (an edit, an action such as suspending or tagging cards, or new cards) is made in Anki only when you press Apply. When you ask the tutor how you're doing, the add-on works out your study numbers from your collection on your computer (retention, categories, most-missed cards, what's due) and sends them with that question and the rest of that card's session. The numbers themselves aren't stored; the tutor's answer stays in the session like any other.

2. How We Use Your Information

To provide and improve our services (explanations, card generation, analytics)
To show how other students did on the same MCAT questions, as totals per question that don't identify anyone
To process payments through Stripe (we never see your full card number)
To send transactional emails (verification, password reset)
To send occasional emails about new features. Each one has an unsubscribe link.
To detect abuse and enforce rate limits

We do not sell your data to third parties. We do not use your data for advertising.

3. Third-Party Services

Stripe — payment processing. Subject to Stripe's Privacy Policy.
EBANX: payment processing for Pix payments.
Anthropic (Claude API) — AI-powered explanations, card generation, lessons, card match, card search and QBank sets on a lecture. Document content, the text of the notes used for a lesson that is written or adapted by AI, the text of a document you match with the cards graded for it, the text of a lecture you upload for a QBank set, what you type into a smart card search, and the text of most-missed cards in a study code you practise with, is sent to the API for processing but is not stored by Anthropic for training.
OpenAI (API): the tutor. What you ask the tutor, the board you draw on, and, when you ask about a card from Anki or a practice question, that card's text and pictures or the question, are sent to the API for processing but are not used by OpenAI for training. For a QBank set on a lecture, the topics and facts found in it are sent too, to match them with reviewed questions and reference notes, on the same terms.
TypeSafe (Jev API) — ranks the cards a smart card search found, and compares your cards with another deck's in card swap. What you searched for and the first 250 characters of up to 100 of your cards are sent to it for each smart search; for card swap, the first 600 characters of each of your cards and the first 250 of each of up to 25 cards it might match. When you ask the tutor for AnKing cards, it also ranks the cards the tutor found, and what you asked (up to 400 characters) is sent with them.
Resend — transactional email delivery.
Brevo — emails about new features. It receives your email address to send them.

4. Lessons

When you make a lesson in the Medusa Anki add-on, the add-on reads the notes you selected:

their text
their note IDs (Anki note ID, note GUID and, for AnKing notes, the AnkiHub note ID)
their tags
how often you have forgotten each card

It works out on your computer which cards are weak. Only a yes/no "weak" flag per note is sent to us, not your review history.

The text of the selected notes is saved with the lesson in your account, so the lesson can show your cards on medusaprep.com. Images from your deck are never uploaded; the add-on shows them from your own collection.

Which steps of a lesson you have marked done is saved with it too, so your place follows you between Anki and medusaprep.com.

If a lesson has to be written or adapted by AI, the text of the selected notes is sent to our AI provider, Anthropic, to write it.

When AI writes or adapts a lesson, we also keep a copy of the lesson itself. The copy isn't linked to your account and doesn't include the text of your notes. It keeps only the lesson, the IDs of the notes it was made from, and a fingerprint of each note that tells us whether you had edited it.

To find images for a lesson, Medusa sends short search phrases (never the text of your notes) to Wikimedia Commons, Open-i and Brave Search. Those images load straight from the sites that host them, which can see your IP address, as with any website you visit.

You can delete any lesson on the Lessons page.
Deleting your account deletes all your lessons.
Deleting a lesson or your account doesn't delete the copy described above, because it isn't linked to you.
Lessons are included in your data export.

The add-on asks for your permission the first time you make a lesson.

5. Card Match

When you use Find cards for a document in the Medusa Anki add-on, the add-on reads the document's text on your computer. The file itself is never uploaded.

To find your cards, Medusa sends the document's text to be read by AI (our AI provider, Anthropic). The text is not kept.
The add-on then searches your cards on your computer and sends up to 400 matching cards (the first 250 characters of each, with their note IDs) to be graded.
To find what your cards don't cover, the add-on also sends, for each topic, the cards that might test its facts (the first 200 characters of each). Their text is not kept; the facts none of them test are saved with the result.
The cards that match are saved with the result in your account (the first 250 characters of each, its deck and its note ID), so you can see it on medusaprep.com/card-match. The note IDs and grades of the other cards that were graded are kept with it, without their text.
If you ask Medusa to make cards for facts your cards don't cover, the add-on sends the text of the pages those facts come from again, to write the cards. The text is not kept. The new cards are added to your Anki collection, and the match records which facts got cards.
To make a repeat match of the same document cheaper, we keep the list of topics and facts AI found in it, under a fingerprint of the document's text. That list isn't linked to you or your account, and it doesn't contain the document's text or your cards.

You can delete any match on the Card Match page.
Deleting your account deletes all your matches.
Card matches are included in your data export.

The add-on asks for your permission the first time you match a document.

6. Card Search

When you use Search my cards in the Medusa Anki add-on, or start a search in Anki's Browse window with ?, the results that appear as you type come from your computer. Nothing is sent until you press Enter.

When you press Enter, Medusa sends what you typed to AI (Anthropic), to work out what you mean.
The add-on then searches your cards on your computer and sends up to 100 of them (the first 250 characters of each, with their note IDs) to be ranked by AI (TypeSafe).
Medusa does not save what you search, or the cards' text. For each smart search it keeps a record with the date, whether it finished, how many cards were ranked, the scores by note ID, and its cost and timing, for 30 days. That record counts your smart searches against your plan's daily allowance.

Deleting your account deletes these records.
Your data export lists them (dates and counts only).

The add-on asks for your permission the first time you run a smart search.

7. Card Swap

When you use Swap my cards for AnKing in the Medusa Anki add-on, the add-on reads the cards you picked and the deck you compare them with on your computer. Nothing is sent until you confirm the number of cards to compare.

For each of your cards, the add-on finds the 25 cards of the other deck that look most like it, and sends your card (its first 600 characters) and those cards (the first 250 characters of each, with their note IDs and whether you already study each one) to be compared by AI (TypeSafe).
Medusa does not save your cards' text or the results on its server. The results are kept on your computer. For each comparison it keeps a record with the date, how many cards were compared and matched, and its cost and timing, for 30 days. That record counts your cards against your plan's daily allowance.

Deleting your account deletes these records.
Your data export lists them (dates and counts only).

The add-on asks for your permission the first time you compare your cards.

8. Data Retention

Account data is retained until you delete your account.
Uploaded documents are automatically deleted within 24 hours of processing.
The text of a lecture you upload for a QBank set is kept for 14 days so your sets on it can be written, then deleted automatically. The questions written from it stay with your practice sets for the lifetime of your account. To make another set on the same lecture cheaper, we keep the list of topics and facts AI found in it, under a fingerprint of the text. That list isn't linked to you or your account.
Quiz session data, and your MCAT blocks and full-length exams, are retained for the lifetime of your account to power analytics. Deleting your account deletes them.
Smart card search records (no search text) are deleted after 30 days.
Card swap records (no card text) are deleted after 30 days.

9. Your Rights

You can at any time:

Access your data through your dashboard and analytics pages
Correct your email via account settings
Delete your account and all associated data from your dashboard
Export your data by contacting team@medusaprep.com

10. People in Brazil (LGPD)

This section is for people in Brazil. Brazil's General Data Protection Law (Lei Geral de Proteção de Dados, Law No. 13,709/2018, the "LGPD") gives you the rights below. The rest of this policy applies to you as well.

Who is responsible. Medusa, the service at medusaprep.com, decides how your personal data is used. Under the LGPD that makes us the controller (controlador) of your personal data, and you the data subject (titular dos dados). For anything about your personal data, email team@medusaprep.com.

Why we may use your data (legal bases). The LGPD allows us to use personal data only on a legal basis (art. 7). For the uses in section 2, ours are:

To provide the service you use and charge for it (your account, practice questions and analytics, lessons, card match, card search, card swap, the tutor, payments and transactional emails): performing a contract with you, or taking steps you ask for before one (art. 7, V).
To improve the service, send emails about new features, detect abuse and enforce rate limits, and measure aggregate traffic: our legitimate interests (art. 7, IX). Each email about new features has an unsubscribe link.

For some Anki add-on features (sections 4 to 7), the add-on asks for your permission before it sends anything. You can say no: only that feature then stops working, and the rest of Medusa keeps working.

Your rights (art. 18). As the data subject, you can ask us for:

confirmation that we use your personal data;
access to your data;
correction of data that is incomplete, inaccurate or out of date;
anonymization, blocking or deletion of data that is unnecessary or excessive, or that is used in a way that does not follow the LGPD;
portability of your data to another service provider, under the rules of the ANPD (Brazil's data protection authority);
deletion of personal data that we use with your consent;
information about the public and private entities we share your data with (the providers in section 3);
information about whether you can refuse consent, and what follows if you do;
withdrawal of your consent.

You can also object to a use of your data that relies on something other than consent, if it breaks the LGPD. As section 9 says, you can already see your data on your dashboard and analytics pages, correct your email in your account settings, and delete your account from your dashboard.

How to use your rights. Email team@medusaprep.com and say which right you want to use.

Sending data outside Brazil. The providers listed in section 3, and Google Analytics where we run it (section 12), handle the data described here on our behalf, as processors (operadores), and they may do so on servers outside Brazil. We send them data to provide the features you use. The LGPD allows that when it is needed to perform a contract with you (art. 33, IX, with art. 7, V).

Complaints. You can complain to the ANPD (Autoridade Nacional de Proteção de Dados), which oversees the LGPD in Brazil, at gov.br/anpd.

11. Security

We use industry-standard security measures including encrypted connections (HTTPS), hashed passwords (bcrypt), scoped authentication tokens, rate limiting, and security headers. However, no system is 100% secure.

12. Cookies & Analytics

We use a single authentication token stored in your browser's localStorage for sign-in, and a small CSRF cookie tied to that session. We do not sell or share this data.

In some environments we run Google Analytics 4 (the @next/third-parties loader) to measure aggregate traffic — page views, referrers, and broad device class. Google Analytics sets first-party cookies (typically _ga and _ga_*) and may process IPs in transit. We do not run advertising trackers, retargeting pixels, or any third-party cross-site analytics beyond GA4. If you would rather not be measured, browser-level DNT/ad blockers will block GA fully.

13. Children

Medusa is designed for medical students, premeds preparing for the MCAT, and professionals. We do not knowingly collect data from children under 13.

14. Changes to This Policy

We may update this policy from time to time. We will notify registered users of significant changes via email.

15. Contact

Questions about this policy? Email us at team@medusaprep.com.