The short version: your saved work stays on your device, we don't run ad trackers, and we collect as little as the product allows.
What MedStatica is. An app that provides a biostatistics consult and a library of calculators for clinicians, trainees, and health researchers. It helps you plan and interpret research methods. It is not a medical device, does not process patient records, and is not a substitute for a qualified statistician, your IRB, or clinical judgment.
Your saved study plans, tier selection, theme preference, and (if you use it) your own API key live in your browser's local storage. They are not sent to or stored on a MedStatica server, and clearing your browser data removes them. If you create an account (see below), your identity and subscription status are held by our authentication provider, not your saved plans — those remain on your device.
Signing in is optional; you can use the free tier without an account. If you choose to sign in, authentication is handled by Clerk, our identity provider. Depending on the method you pick (Google, Microsoft, Apple, or an email link), Clerk receives and stores your email address and basic profile identifiers to create and secure your account. Your subscription status (free or Pro) is stored on your Clerk account so it follows you across devices. We do not receive or store your social-login password. Clerk processes this data under its own privacy terms.
The Consult feature sends the study description you type to an AI model to generate a plan. How it travels depends on your tier:
Do not paste identifiable patient information into the consult. Describe your study in de-identified terms — populations and variables, not names or records.
| Anthropic | Processes consult text to generate study plans. Governed by Anthropic's own privacy and data-use terms. |
| Clerk | Handles sign-in and stores your account identity and subscription status. Only used if you create an account. |
| Stripe | Processes Pro subscription payments. MedStatica never sees or stores your card number — Stripe handles it directly. |
| Netlify | Hosts the site and serverless functions. May log standard request metadata (e.g. IP address) for security and rate-limiting. |
| PostHog | Privacy-first product analytics, used only if you accept analytics. Receives anonymous usage events (for example, that a plan was generated) and coarse, non-identifying properties — never your study text, name, or email. Autocapture and session recording are disabled. |
If you subscribe to Pro, Stripe collects and processes your payment details under its own privacy policy. MedStatica receives confirmation that a payment succeeded; when you're signed in, your Pro status is recorded on your account (via Clerk) so it applies across your devices. We never see or store your card details — Stripe handles them directly.
We use privacy-first product analytics (PostHog) to understand how the app is used — for example, how many plans are generated or which features are used — so we can improve it. We record only anonymous usage events and coarse, non-identifying properties. We never send your study text, name, or email to analytics, and autocapture and session recording are turned off. Analytics runs only if you accept it in the notice shown on your first visit; you can decline. To count repeat visits without knowing who you are, analytics uses a cookie or local storage to hold an anonymous device identifier; declining prevents this. We show no ads, use no advertising trackers, and do not sell your data. If a launch-list email form is present, the address you submit is used only to notify you about MedStatica and is not shared.
MedStatica is intended for clinicians, trainees, and health researchers, and is not directed to children under 13. We do not knowingly collect information from children.
If this notice changes materially, the effective date above will be updated. Continued use after a change means you accept the revised notice.
Questions about privacy? Email privacy@medstatica.com.
No. MedStatica shows no ads, uses no advertising trackers, and does not sell your data.
No. Describe your study in de-identified terms only — no names, MRNs, dates of birth, or other identifiers. Strip identifiers before entering anything.
In your browser’s local storage on this device — not on a MedStatica server. Clearing your browser data removes them.
On the Free and Pro plans it is relayed through our function to the AI provider to generate your plan and is not stored afterward. If you use your own API key, it is sent directly from your browser to Anthropic and never touches our servers.
Only privacy-first analytics (PostHog), and only if you accept it on your first visit. It records anonymous usage events — never your study text, name, or email — and sets a cookie or local-storage value to hold an anonymous device ID. Decline the notice, or clear your browser storage, to keep it off.