Privacy Policy · Lock In MCAT
Effective date: June 19, 2026 Last updated: July 11, 2026
This Privacy Policy explains how Lock In MCAT ("we", "us", "our") collects, uses, and shares information when you use Lock In MCAT and the underlying Educational Operating System (EOS) platform (the "Platform"). The Platform is an educational study tool. It does not provide medical care, diagnosis, or treatment, does not intentionally collect medical records, and is not a medical device. AI features provide educational support only and may be inaccurate.
1. Who we are & scope
Applies to all users 18 or older across our website, app, and related services.
2. Summary
We collect account, educational-planning, usage, telemetry, survey, engagement, AI-interaction, and learner-modeling data to operate and improve the Platform. Payment is processed by a third party; we do not store full card numbers. The Platform builds a learner model (ULM) and an adherence score (LAS) that are educational, not clinical. Research participation, if you opt in, is governed by a separate informed consent. You have rights to access, delete, correct, and exercise other choices described below.
3. Information we collect
Account information; educational planning information; platform usage data; educational telemetry; survey responses; educational engagement metrics; AI interaction data; content you upload or record (notes, documents, photos, flashcard decks, audio recordings); practice questions and your attempts captured into the Mastery Engine; screenshots you choose to share with AI coaching features; audio and video transmitted during study-room sessions; learner-modeling variables (ULM) and adherence scores (LAS); payment information (via processor); cookies & analytics.
4. How and why we use information
To provide and personalize the Platform; generate schedules, coaching, learner modeling, and adherence scoring; operate AI features; process subscriptions; communicate; maintain security; analyze and improve; comply with law.
5. AI features, learner modeling (ULM) & adherence scoring (LAS)
Automated processing personalizes your experience and generates a learner model and adherence/engagement score from your activity. These are educational only and are not clinical, diagnostic, or health assessments. AI output may be inaccurate; evaluate recommendations independently.
6. Research use of data
The Platform may serve as a data-collection instrument for IRB-approved educational research. You are not enrolled in research simply by using the Platform. If you choose to participate, the specific uses are governed by a separate informed consent reviewed by an IRB — not this policy. Research contact: support@lockinmed.com.
7. How we share information / processors
We do not sell your personal information. We share it with service providers acting on our behalf: hosting and file storage (Replit), payment processing (Stripe), AI text providers (OpenAI and Google AI), AI image/diagram generation (Google AI and OpenAI), AI speech synthesis (ElevenLabs and OpenAI), AI speech transcription (OpenAI), study-room video and audio sessions (Daily.co), transactional email (Resend), authentication (Replit Auth), and web fonts (Google Fonts). We may disclose to comply with law or protect rights/safety.
8. Cookies, analytics & tracking choices
We use cookies for essential functionality and, with your consent where required, analytics (Google Analytics, when enabled). Analytics never loads before consent in regions where consent is required, and you can withdraw consent at any time via the consent banner.
9. Data retention
We retain account and product data while your account is active and for up to 12 months after it is deleted or becomes inactive, after which we delete or de-identify it (backups purged within ~90 days). Research data is retained for at least three (3) years after study completion under the approved protocol.
10. Data security
We use reasonable administrative, technical, and physical safeguards including encryption in transit (HTTPS/TLS), access controls and authentication, hosting on managed cloud infrastructure, and limiting data access to authorized personnel. No system is perfectly secure.
11. Your privacy rights
You may have rights to access, delete, correct, or receive a copy of your information, and to opt out of certain processing. California residents (CCPA/CPRA) may request access, deletion, correction, and exercise "Do Not Sell or Share My Personal Information." To make a request, contact support@lockinmed.com.
12. Children / age
The Platform is intended for users 18 and older. Minors aged 13–17 may use it only under a parent or guardian. We do not knowingly collect personal information from children under 13.
13. International users / data transfer
Operated from the United States. Access from elsewhere may involve transfer to and processing in the United States.
14. Changes
We may update this policy and will post the new effective date; material changes get additional notice.
15. Contact
Privacy: support@lockinmed.com. Research: support@lockinmed.com. Mailing address: available on request at support@lockinmed.com.