Privacy Policy

We collect information that you provide directly, information generated through your use of the Service, and information processed by third-party service providers.

Journey is not designed to collect:

• Protected health information for medical treatment
• Medical records
• Insurance information
• Patient data
• Government-issued identification numbers
• Information from children under 13

Users should not enter patient-identifying information, medical records, or confidential third-party information into the Service.

Journey is not intended for children under 13.

Users under 13 are not permitted to create accounts or use the Service.

If we learn that we have collected personal information from a child under 13, we will take reasonable steps to delete the information and terminate the account.

If you believe a child under 13 has provided information to TOPmed, contact us at:

We use information to:

• Provide the Service
• Create and manage accounts
• Save user progress
• Generate roadmaps
• Calculate GPA and academic summaries
• Track activities and logged hours
• Provide insights and planning tools
• Process subscriptions and payments
• Respond to support requests
• Improve the Service
• Maintain security
• Debug errors
• Prevent fraud or misuse
• Comply with legal obligations

If you are located in a jurisdiction requiring a legal basis for processing personal information, we process information based on:

• Performance of a contract
• Your consent
• Legitimate business interests
• Compliance with legal obligations
• Protection of rights, security, and safety

We do not sell your personal information.

We may share information with service providers that help us operate the Service, including:

• Clerk for authentication
• Supabase for database and backend infrastructure
• Vercel for hosting and deployment
• Paddle for payments, subscriptions, taxes, invoices, and billing
• Google Workspace for business communications

These providers may process information according to their own terms and privacy policies.

We may also disclose information:

• To comply with law
• To protect rights, safety, and security
• To prevent fraud or abuse
• In connection with a merger, acquisition, financing, reorganization, or sale of assets
• With your consent

Journey may be available internationally.

If you access the Service from outside the United States, you understand that your information may be processed in the United States or other countries where our service providers operate.

Data protection laws in those countries may differ from those in your jurisdiction.

We retain personal information for as long as reasonably necessary to:

• Provide the Service
• Maintain your account
• Comply with legal obligations
• Resolve disputes
• Enforce agreements
• Maintain security
• Keep business and tax records

If you request deletion, we will take reasonable steps to delete or de-identify your account information, subject to legal, security, tax, backup, and compliance requirements.

You may request deletion of your account and associated data by emailing:

We may need to verify your identity before fulfilling the request.

Deletion may not be immediate in backups or logs, but we will take reasonable steps to remove or de-identify your active account data.

TOPmed does not currently offer a self-service data export feature for Journey.

Users may request access to or deletion of their account information by contacting:

We may need to verify your identity before responding to such requests.

Depending on your location, you may have rights to:

• Access your personal information
• Correct inaccurate information
• Delete personal information
• Receive a copy of your information where required by law
• Object to certain processing
• Restrict certain processing
• Withdraw consent where processing is based on consent

To make a request, contact:

We may need to verify your identity before responding.

If applicable, California residents may have rights under California privacy laws, including rights to know, access, correct, delete, and opt out of certain sharing of personal information.

TOPmed does not sell personal information.

To submit a privacy request, contact:

If you are located in the European Economic Area, United Kingdom, Switzerland, or another jurisdiction with similar privacy laws, you may have additional privacy rights, including access, correction, deletion, portability, objection, and restriction rights.

You may exercise these rights by contacting:

We use reasonable administrative, technical, and organizational measures to protect information.

These may include:

• Authentication through Clerk
• Database access controls
• Row-level security
• HTTPS
• Environment variable protection
• Access restrictions
• Use of reputable infrastructure providers

However, no system can be guaranteed completely secure.

The Service may use cookies or similar technologies for:

• Authentication
• Session management
• Security
• Preferences
• Payment flows
• Basic functionality

If we later use analytics, advertising, or tracking tools beyond essential functionality, we may update this Privacy Policy or provide additional disclosures.

Journey does not include an AI Advisor at launch.

If TOPmed later introduces AI-powered features for Journey or another product, we may update this Privacy Policy to explain:

• What data may be used
• Whether AI personalization is optional
• Which providers process data
• How users can control AI-related data use

The Service depends on user-entered information. We are not responsible for incorrect outputs caused by inaccurate, incomplete, or outdated information entered by users.

We may update this Privacy Policy from time to time.

If changes are material, we may notify you through the Service, by email, or by updating the effective date.

Continued use of the Service after changes means you acknowledge the updated Privacy Policy.

For privacy questions, contact:

For deletion requests: