Legal
Privacy Policy
USMLE+ takes student privacy seriously. This policy explains what data we collect, why we collect it, how we use it, and the rights you have over your information.
Last updated: May 31, 2026
What We Collect
Account information (name, email, school), subscription and billing details, and study activity data (questions answered, time spent, scores) used to power performance analytics.
How We Use Data
To provide the service, personalise your study experience, surface weak areas, generate self-assessments, and email you progress summaries. We never sell personal data to third parties.
Data Sharing
We share data with payment processors (Stripe), email providers (Postmark), and analytics tools (PostHog) strictly to operate the service. All processors are bound by data-processing agreements.
Your Rights
You can request a copy of your data, correct inaccuracies, or request deletion at any time by emailing privacy@usmleplus.com. We respond within 30 days as required by GDPR and CCPA.
Data Retention
Account data is retained as long as your account is active. After account deletion, anonymised performance data may be retained for research; identifiable data is removed within 90 days.
Cookies
We use essential cookies for authentication and analytics cookies for product improvement. You can opt out of analytics cookies in account settings.