Privacy

What we collect

• Your account: your email address and name, and a sign-in method (email and password, or Google).
• What you enter: your applicant type, specialty, programs, notes, interview details, letters, rank scores and criteria, and your settings.
• Your plan: which plan you chose, your trial and renewal dates, and a customer reference from our payment provider. Your card or other payment details go straight to the payment provider. We never see or store them. We also keep a one-way fingerprint of your email address (a hash, never the address itself) so a free trial can be used once. It stays after you delete your account.
• Emails you forward to your private address: only if you use that feature. If we can’t read one with confidence, we keep a short excerpt so you can review it. We don’t keep the full email.

If you link with a partner (couples mode)

Linking is optional and needs both of you to agree. Once linked, each of you can see the other’s name, whether they’ve marked their list certified, and their ordered list of interviewed programs (program name, code, city and state). Nothing else is shared: no scores, notes, letters, dates or settings. Either of you can unlink at any time, and sharing stops at once. Deleting your account also removes the link.

What we never collect

• Your logins for MyERAS, R3, Thalamus, ECFMG or any other official system. We never ask for them.
• Data from those systems. We don’t log in to them, scrape them or read them.

How we use it

To run the app for you: show your timeline, track your programs, detect interview overlaps, send the reminders you turn on, and keep your rank list. We don’t sell your data, and we don’t use it for advertising.

Who can see it

You. Your records are stored under your account and only your signed-in session can read them. We don’t show anyone else’s data to you or yours to anyone else. Our systems are run by a small team who may need technical access to keep the service working.

Where it’s stored and who helps us

Your data is stored with Google Firebase (Authentication and Firestore), which encrypts it in transit and at rest. We use Google as a service provider to run the app. Reminder emails are sent through Resend, and push notifications through Google Firebase Cloud Messaging. They receive your email address (or device token) and the text of the reminder, nothing else.

Payments are handled by Paddle, our payment provider and merchant of record. Paddle collects your payment details and billing country, takes the payment, and handles sales tax and VAT. It tells us your plan, billing period and renewal dates. Paddle’s own privacy policy covers what it holds. Our website is served by Cloudflare. If you use the forwarding feature, Cloudflare also receives the emails you forward to your private address and passes them to us; it doesn’t keep them for us.

Cookies

One essential cookie keeps you signed in. It is set by us, isn’t readable by scripts on the page, and is removed when you sign out. We don’t use advertising or tracking cookies.

Your choices

• Download everything: Settings → Your data → Download my data (a JSON file). Programs and your rank list can also be exported as CSV.
• Delete your account: Settings → Your data → Delete account. This permanently removes your account and everything in it. It can’t be undone.
• Reminders: turn push, email and the weekly digest on or off in Settings.

How long we keep it

Until you delete your account. Backups made by our hosting provider may keep copies for a short period afterwards.

Children

Residency Mate is for adults applying to residency programs. It isn’t directed at children.

Changes and contact

If we change this page in a way that matters, we’ll tell you in the app. Contact details will be listed here before launch.