Privacy
Last updated 11 October 2026.
Short version: you can use almost all of this site without telling us who you are. We keep an anonymous tally of which pages and buttons get used, with nothing in it that points back to a person. If you choose to sign in, we store your list and your email address so you can get back to it. The one thing we charge for is optional: live mock interviews. A payment company (Razorpay or PayPal) handles any payment, so your card and bank details never reach us. Practicing with another applicant is the one exception: it needs an account and your name, and other applicants see your name only the way you choose. We do not sell or share what you save.
If you never sign in
Nothing that identifies you is sent to us. The programs you mark, the signals you plan, your notes and your profile answers are written into your own browser's storage and stay on that device. We cannot see them. Clearing your browser deletes them, which is why the save or move your list page exists. It packs everything into a link or a file that never touches a server.
If you do sign in
For your list and the fit calculator we store exactly three things:
- Your sign-in identity. Your email address, so we know which saved list is yours. If you sign in with Google, Google also tells us your name and a link to your profile picture; we never see your Google password, and we cannot read your Gmail, your contacts, your files or anything else in your Google account. If you sign in with a code instead, your email address is the only thing we get.
- Your list. The programs you marked, which tier you put them in, which ones you plan to signal or pinned, and any notes you wrote.
- Your profile answers. The figures you typed into the fit calculator: Step 2 score, years since graduation, visa need, whether you are a US or non-US IMG.
That is the complete list for those two. What we keep when you practice with another applicant is described in its own section below. Each row is locked to the account that created it by a database rule, so no other signed-in person can read yours.
If you book a mock interview
Payment. A payment company takes the payment under its own privacy notice: Razorpay for rupees, PayPal for US dollars. It tells us what we need to confirm the booking: your name, email address, phone number if you gave one, the amount, the date and the payment reference. We keep that record because tax law requires it. Until online payment is ready for a plan, the booking is arranged over WhatsApp instead, and the same details are kept.
Your CV and personal statement. You send them so your interviewer can prepare. They are used only to prepare and run your sessions and to write your feedback. Your interviewer sees them, and so do we; nobody else does. We delete your CV, personal statement and feedback after the Match, or sooner if you ask. Sessions are not recorded unless you ask for a recording. If you ask, your interviewer records the session and sends you the recording.
Arranging times. We write to you by email or WhatsApp to agree session times and send the video call link.
Practice with another applicant
What we keep. You need an account to practice with another applicant, because you talk with a real person. We keep your first and last name, how you chose to show your name (full name, first name only, or initials only), your specialty, your country, your time zone, and whether you meet on Zoom or Google Meet. We also keep the time slots you post, the times you book, the messages in your private chats, the meeting link you share, the ratings and notes you give after a session, and any report or block. We do not ask for your phone number or your AAMC ID, and we do not keep any video, photo or file.
What other applicants see. Only your name the way you chose to show it, your specialty, your country and the time zone of your time slots. They never see your email address. They see your real name only if you chose to show your full name. We use your first and last name only if there is a problem.
Your chat. Each booking has a private chat between you and the other person. It is text only, and the only link allowed is the Zoom or Google Meet link. We keep the messages, and we do not read them. We read a chat only if someone reports it, or if we need to for safety or because the law requires it. You can read the chat and write in it for 90 days after the session. Then we delete the messages. If a chat was reported, we keep it and the report for as long as we need to deal with the report.
Feedback. A rating and a short note you give after a session are seen only by the person they are about and by us.
Emails. We email you when someone books one of your time slots, when you get a new message (at most one email every 15 minutes for each chat), 1 hour and 24 hours before a session, and when the other person cancels. Our email provider, Resend, sends them.
Reports and blocks. A person reads every report. A block hides you and the other person from each other's list and ends any booking between you.
Deleting your account. Deleting your account removes your profile, your time slots, your messages and the ratings and notes you gave. The other person keeps their half of the chat and sees "This person deleted their account". A report may stay on record, so that we can keep other people safe.
Emails from us
If you have an account, we may occasionally email you about MatchMyProgram and its services, such as mock interviews. Every such email has a one-click unsubscribe link, and unsubscribing never affects your account or your sign-in codes.
What we count
We keep a plain tally of what gets used, so we know which parts of the site are worth improving. A row is written when:
- a program page or the Browse page is opened;
- the fit calculator produces a score;
- a program is given a priority, flagged, put in a signal tier, starred for a signal or pinned;
- a note is saved (we record its length, never a word of what it said);
- a list is exported;
- somebody starts or completes signing in;
- the ranked list asks a visitor to sign in first;
- somebody reports a problem with a program's figures (we record that it happened, not the text);
- the mock interview page is opened, and when a Book button is pressed (which plan, which currency, and whether it opened a payment link or WhatsApp).
None of it is attached to you. There is no account number in any of those rows, not for signed-out visitors and not for signed-in ones. There is a random value that lasts until you close the tab, so that two page views can be counted as one visit; it is thrown away with the tab and cannot recognize you tomorrow, on another device, or against your account.
If your browser sends a "do not track" or Global Privacy Control signal, we count nothing at all. Our host, Cloudflare, separately keeps a cookieless tally of page views for the whole site.
What we do not do
- We do not sell, rent or share your data with anyone, for money or otherwise.
- We never see or store your card, UPI or bank details.
- We do not use advertising trackers, and we do not build a profile of your browsing.
- We do not pass your name, your list or your CV to any program, school or application service.
Getting it back, or getting rid of it
The account page has a button to download everything we hold about your account as a plain file, and a button to delete your account. Deleting removes your sign-in record and your saved list from the database immediately. It does not touch the copy in your own browser, which stays yours. To have your CV, personal statement or booking messages deleted sooner than the Match, write to us.
Who else is involved
- Supabase holds accounts, saved lists, the anonymous tally and the weekly count of open interview slots, on our behalf.
- Cloudflare serves the site.
- Google, only at the moment you press "Continue with Google", to confirm who you are.
- Resend delivers sign-in codes and the emails described above, so it sees the address each one goes to.
- Razorpay takes rupee payments.
- PayPal takes US dollar payments.
- WhatsApp carries any conversation you start with us there, under its own terms.
- Your interviewer sees your CV and personal statement, and the video call service (Zoom or Google Meet) carries the session.
Nobody else receives your data.
Children
This site is for doctors applying to residency. It is not intended for anyone under 16 and we do not knowingly keep accounts for them.
Changes, and how to reach us
If this policy changes in a way that affects what we store, the date at the top changes and the change is described here. Questions, corrections or a request to delete something: hello@matchmyprogram.com.