Your data

Privacy policy

Effective October 31, 2026

RadOS is a specialty learning workspace operated by Mei Carter. This policy covers the RadOS website and its ChatGPT connection, including features that may still display the earlier ALTURA name.

Information we handle

• Account information: your email, account identifier, selected specialty, email-confirmation status, and sign-in/session information. Passwords submitted through the sign-in form are passed to our authentication provider; they are not saved as study content.
• Learning information: content you save or submit, such as notes, flashcards, images, captions, source links, citations, study plans, goals, session summaries, practice responses, feedback, review ratings, and scheduling history. Edits may retain earlier versions.
• Connection information: permission scopes, account and client identifiers, authorization and revocation records, and technical information needed to connect ChatGPT to your account.
• Technical and support information: request and error information, timestamps, network/browser information processed by our hosting services, and messages you send for support. Your browser may also store unsent study drafts and pending-save information.

How we use it

We use this information to authenticate you, keep your saved learning associated with your account, provide curriculum and review tools, generate requested educational feedback, synchronize approved changes, recover interrupted saves, troubleshoot problems, prevent misuse, and respond to support or privacy requests. Study progress is for learning support; it is not a verified examination score or clinical credential.

Service providers and sharing

• Supabase: account authentication, the learning database, and private image storage.
• Stytch: authorization for the ChatGPT connection. When you approve a connection, RadOS sends your existing sign-in token to Stytch for verification, with your account ID and email. Your RadOS password and Supabase login tokens are not sent to ChatGPT.
• OpenAI: ChatGPT receives the learning information returned by the tools you use and sends tool inputs to RadOS. Website features that generate AI feedback send the relevant study context to the OpenAI API. Those API requests are configured with response storage disabled; this does not eliminate all provider logging or retention.
• Vercel and Cloudflare: website hosting, delivery, domain/DNS, and related technical services.
• Email services: account-confirmation messages and support correspondence are handled through the relevant email providers.

These providers process information to deliver their services and may process it in countries other than your own. Their own terms and privacy policies also apply. RadOS does not sell personal information or use advertising trackers in the application. Information may also be disclosed when required by law or necessary to address fraud, security incidents, or the protection of people's rights.

Your ChatGPT connection

Connecting grants the permissions shown on the consent screen. It does not automatically import your full chat history. RadOS receives the inputs sent to its tools, including content you approve for saving, and returns the requested account data. Depending on the feature, this may include selected notes, cards, progress, plans, or images.

You can revoke access on the connection page. Disconnecting prevents further authorized access through that connection; it does not delete saved RadOS learning or information already present in ChatGPT. Manage ChatGPT conversations and data separately through OpenAI's controls.

Retention and deletion

• Account and learning records: kept while your account remains open, unless removed through an available permanent-deletion process or a verified deletion request. There is currently no automatic inactivity purge. Items in Trash, prior content versions, and review/session history may remain stored.
• Authorization records: kept to operate, audit, and revoke connections; they do not automatically disappear when you disconnect. An authorization request expires after 10 minutes, but expiry is not deletion of its associated record.
• Browser storage: sign-in cookies have a maximum lifetime of 30 days and may be renewed. Device drafts remain until discarded, successfully saved where applicable, or cleared through browser site-data controls. Signing out may leave device drafts behind.
• Support correspondence, operational logs, and backups: retention depends on the systems and providers holding them. RadOS has not established a uniform automatic deletion interval for these records. A deletion request is reviewed for these copies as well; immediate removal from all backups or provider systems is not guaranteed.

Trash is reversible and is not permanent deletion. To request deletion of your account or specific data, email meiychin18@gmail.com from the account address if possible. We will verify your authority, explain the scope and expected handling time, and identify any records that must be retained for legal or security reasons. There is currently no self-service account-deletion button.

Your choices

You can review and edit supported saved content, choose what to submit, revoke your connection, and clear browser site data. Clearing site data can remove unsaved drafts. Contact the same email to request access to or a copy of your data, corrections, deletion, or help exercising applicable privacy rights. Never send a password or identity document by email.

Security, younger users, and updates

RadOS uses encrypted connections, account-based access controls, and private image storage. No service can guarantee perfect security. Keep your sign-in details private and use only educational content you are authorized to share.

RadOS is intended for learners studying professional specialties and is not directed to children under 13. Contact us if you believe a child under 13 has provided personal information.

We will update this page and its effective date when practices change. For a material change affecting your choices, we will provide an additional notice where appropriate.

Privacy contact: Mei Carter · meiychin18@gmail.com