Effective Date: June 13, 2025 | Last Updated: June 13, 2025
Signal MCAT ("Signal," "we," "us," or "our") operates the Signal web application, an MCAT study tool. This Privacy Policy describes how we collect, use, disclose, and protect information about you when you use our Service. By using Signal, you agree to the practices described here.
When you register for an account, we collect:
As you use the Service, we collect and store:
When you upload a screenshot of a missed practice question, the image is transmitted to our server and to our AI provider (OpenAI) for analysis. The image and its verbatim content are NOT stored permanently. We retain only the extracted learning metadata (topic, concept, miss type) — never the original image file or the verbatim question text.
We use a signed session cookie (HMAC-SHA256) to maintain your login session. This cookie expires after 30 days of inactivity. No persistent tracking cookies are used beyond session management.
We log anonymous usage events (e.g., which tabs you view, feature interactions) to understand how the product is used and improve it. These logs are not linked to your identity in any form that can be used for advertising.
If you voluntarily submit in-app feedback, we store the text of that feedback along with your account identifier to allow us to follow up.
We do not collect or store:
We use the information we collect to:
| Service | Purpose | Data Shared | Privacy Policy |
|---|---|---|---|
| OpenAI | Screenshot analysis; mirror question generation; readiness summaries | Screenshot image (transient); question metadata | openai.com/policies/privacy |
| Supabase | User authentication; PostgreSQL database hosting | Account info; all study data | supabase.com/privacy |
| Stripe | Subscription billing and payment processing | Email address; subscription status | stripe.com/privacy |
| Google Fonts | Typography (Manrope, Plus Jakarta Sans fonts) | IP address (CDN request only) | policies.google.com/privacy |
We may disclose your information if required to do so by law, court order, or governmental authority, or if we believe in good faith that disclosure is necessary to protect our rights, protect your safety or the safety of others, or investigate fraud.
If Signal MCAT is acquired, merged, or undergoes a change of control, your information may be transferred as part of that transaction. We will notify you via email or a prominent notice on the Service before your information becomes subject to a different privacy policy.
We do not sell, rent, or trade your personal information to third parties for their own marketing or commercial purposes.
We retain your account information and study data for as long as your account is active. If you delete your account, we will delete or anonymize your personal data within 30 days, except where retention is required by law or for legitimate business purposes (e.g., fraud prevention records).
Uploaded screenshot images are not retained after AI analysis is complete; they are discarded from our servers within minutes of upload.
We implement technical and organizational security measures to protect your information, including:
No security system is impenetrable. We cannot guarantee absolute security of your information and encourage you to use a strong, unique password.
The Service is intended for users who are 18 years of age or older. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal information, please contact us at legal@signalmcat.com and we will delete that information promptly.
If you are between 13 and 17 years of age, you must have verifiable parental consent to use the Service. By using the Service, you represent that either (a) you are 18 or older, or (b) you are 13 or older and have obtained parental consent.
You may access and update your account information at any time through your account settings.
You may request deletion of your account and associated personal data by using the "Delete account" option in your account settings or by contacting us at legal@signalmcat.com. We will process deletion requests within 30 days.
You may export your study data (question metadata, review history, score logs) at any time using the "Export study data" option in your account settings.
You may unsubscribe from non-essential emails by clicking the unsubscribe link in any such email or contacting us directly.
Signal MCAT is operated from the United States. If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, your information will be transferred to and processed in the United States. We rely on Standard Contractual Clauses (SCCs) or other appropriate safeguards as our transfer mechanism where required under GDPR.
EEA/UK users also have the right to: lodge a complaint with your local data protection authority; object to processing; restrict processing; and withdraw consent where processing is based on consent. For more information, see our Data Processing Addendum.
We may update this Privacy Policy from time to time. We will notify you of material changes by email and/or by posting a prominent notice on the Service at least 14 days before the change takes effect. Your continued use of the Service after the effective date constitutes acceptance of the updated policy.
| legal@signalmcat.com | |
| App | Signal MCAT — signalmcat.com |