Skip to main content
← Back to Home

BeMedResident Privacy Notice

Effective date: September 10, 2026 Last reviewed: September 10, 2026

This Privacy Notice explains how BeMedResident processes personal information when you use bemedresident.com. It applies to the website, interview-practice tools, optional email updates, and support requests. For privacy questions or a deletion request, email [email protected].

1. Information we process

Depending on how you use the service, we process:

  • account information supplied through your chosen sign-in provider, such as your email address and account identifier;
  • practice data you submit, including question selections, written responses, transcripts, AI feedback, and progress history;
  • audio recordings when you choose to upload or transcribe audio;
  • payment and subscription status from Stripe; we do not receive or store full payment-card numbers;
  • feedback, support messages, and marketing-email signups for which you opt in;
  • campaign attribution such as UTM parameters in a link you open; and
  • limited technical and security information needed to operate and protect the service, such as request metadata and fraud-prevention signals.

2. How we use information

We use information to provide and secure the service, authenticate accounts, process purchases, deliver AI feedback and transcription, respond to support, improve reliability, prevent abuse, and send optional product or Match-season updates when you have opted in.

We do not sell or rent your practice responses, audio recordings, or personal information for third-party advertising. We do not use practice responses or audio recordings to create targeted advertising audiences.

3. Service providers and transfers

We use providers that process information on our behalf to operate the service:

  • Cloudflare for hosting, security, authentication, databases, storage, and speech-to-text through Cloudflare Workers AI;
  • DeepSeek for AI-assisted analysis and suggested answers; and
  • Stripe for payment processing and subscription records.
  • Google for Google Ads conversion measurement. Google may process technical information associated with an ad click or conversion under its own policies.

Your chosen identity provider also processes authentication information under its own terms. We may disclose information when required by law, to protect rights or safety, or as part of a business transfer. Providers may process information in countries other than your own.

Do not submit protected health information, patient identifiers, financial account details, passwords, or other sensitive information. The service is not HIPAA-compliant and is not intended to receive protected health information.

4. Advertising measurement and marketing choices

Advertising measurement is optional and is separate from account access, payments, and marketing-email consent. Our current measurement policy is versioned as 2026-09-10-r1. We use an edge-provided regional policy only to decide whether an explicit opt-in is required or a reviewed US notice and opt-out setting is available; we do not store the location returned for that choice. If the regional policy cannot be determined, we require an explicit opt-in.

Before measurement is enabled, we do not load the Google Ads tag or store UTM campaign parameters. When you allow measurement, we may retain bounded UTM parameters in local browser storage and associate them with an account only after sign-in so we can understand which campaign led to activation. You can choose No thanks or reopen Privacy settings in the site footer at any time. A Global Privacy Control signal and an explicit denial keep measurement off. With a permitted US regional default, the Google Ads tag is configured for restricted data processing; the business must separately confirm that any such configuration is appropriate for its campaigns.

We use Google Ads measurement only to understand whether an ad led to a completed first AI analysis. We do not send practice responses, audio recordings, email addresses, or other sensitive information to Google Ads, and we do not use enhanced conversions. After you revoke a prior permission, we stop future app conversion calls and update the Google consent setting. A tag previously fetched while permission was active may still make limited consent-protocol requests as described by Google; revocation cannot retrieve data already received by Google.

Marketing email is optional. Each marketing email will include an unsubscribe method. You may also opt out by contacting us. We will honor an opt-out request within the period required by applicable law and retain only the minimal record needed to ensure you are not contacted again.

5. Retention, security, and your choices

We retain information only as long as reasonably necessary to provide the service, maintain security and records, resolve disputes, and meet legal obligations. You may request access to, correction of, or deletion of account data by emailing us. We may retain limited information for security, fraud prevention, accounting, or legal compliance.

We use reasonable administrative and technical measures designed to protect personal information. No online system is completely secure. If a security incident requires notice under applicable law, we will provide it as required.

6. Children

The service is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child has provided information, contact us so we can investigate and take appropriate action.

7. Changes and contact

We may update this Privacy Notice when our practices or legal requirements change. The effective date above identifies the current version. Questions can be sent to [email protected].