Effective date: August 3, 2026 · Last updated: August 3, 2026
This Privacy Policy explains how Stratton Software Solutions ("we", "us") collects, uses, and protects your information when you use MDPrep at mdprep.xyz and mdprep.web.app (the "App").
1. What we collect
Account information. You sign in with Google. From your Google account we receive your name, email address, and a unique account identifier. We do not receive your Google password.
Learning data. Your progress in the App: XP, streaks, completed levels, settings, study pod memberships, and similar activity. This is what lets your progress follow you across devices.
Payment information. Payments are powered by Stripe. Your card details go directly to Stripe and never touch our servers. We store only your subscription status (including whether you are on a monthly or annual plan) and Stripe reference identifiers so the App knows what you have paid for.
Usage and technical data. Basic product events (for example, that a checkout was started or an account was created) and technical logs such as error reports, browser type, and approximate timestamps. We use these to fix bugs and understand how the App is used.
2. What we do with it
- Run the App and sync your progress to your account.
- Process subscriptions and manage billing through Stripe.
- Fix errors, prevent abuse, and keep accounts secure.
- Improve lessons and features based on how the App is used.
We do not sell your personal information. We do not show ads, and we do not use advertising trackers.
3. Where your data lives
Your account and learning data are stored with Google Firebase (Google LLC), and payment records are held by Stripe, Inc. These providers may store and process data on servers in the United States and other countries. By using the App you understand that your information may be processed outside your home country, where privacy laws may differ.
4. Who we share it with
Only the service providers needed to run the App: Google (sign in, database, hosting) and Stripe (payments). Each processes your data under its own privacy and security commitments. Beyond that, we disclose information only if the law requires it or to protect the rights and safety of users and the service.
5. How long we keep it
We keep your data while your account is active. If you delete your account, your profile, learning data, and pod memberships are erased and any active subscription is cancelled. Stripe retains transaction records for as long as financial regulations require. Error logs and product events are kept only as long as needed for debugging and analysis.
6. Deleting your account and your rights
You can permanently delete your account at any time in Settings, then Data, then Delete account. This removes your data as described above and cannot be undone.
Depending on where you live, you may have legal rights to access, correct, export, or delete your personal information, including rights under Canada’s PIPEDA and similar laws. You can exercise access and deletion directly in the App, and you can reach us for any privacy request through the Contact page in the App.
7. Security
All traffic to the App is encrypted in transit. Database rules ensure each user can read and write only their own data, and subscription status can be changed only by our servers after Stripe confirms a payment. Secret keys are never included in the App itself.
8. Age requirement
MDPrep is for adults 18 years of age or older. The App is not directed to anyone under 18, and we do not knowingly collect personal information from people under 18. If we learn that we have collected such information, we will delete it promptly.
9. Cookies and local storage
The App uses only what Google sign in needs to keep you logged in. There are no advertising cookies and no third party trackers.
10. Changes to this policy
If we change this policy, we will update the date at the top. For significant changes we will let you know in the App before they take effect.