Privacy Policy
Data collected
Account (email, name), profile (nationality, school country, budget, languages), school record (PDF transcripts or manually entered grades), billing data (processed by Stripe), declared application status.
Minors
Users under 15 must obtain consent from a holder of parental authority before any record analysis. This consent is recorded and timestamped.
Retention
School records and analyses are kept for the duration of the current application cycle, then automatically deleted unless the user requests retention.
Your rights
In accordance with the GDPR, you have the right to access, rectify, erase and port your data, exercisable directly from the Profile page (export / account deletion) or by email to privacy@euromedpath.eu.
Hosting
Data is hosted via Supabase (database, authentication, storage) and Railway (application), with server location prioritized within the European Union to limit transfers outside the EU.
Template to be validated by a lawyer before going into production — see §11.