Privacy Policy

1. What we collect

When you create an account and complete your profile, we collect:

• Contact information: email address
• Demographic information: age, sex assigned at birth, height, weight, ZIP code, race/ethnicity
• Health information: health conditions, medications, and other health-related details you voluntarily provide
• Preferences: topic interests, travel distance, study type preferences
• Usage data: studies you save, dismiss, or mark as applied

2. How we use your information

Your information is used solely to personalize your study feed — filtering and ranking studies based on your profile. We do not sell your personal information to third parties. We do not share your information with study teams; you initiate contact directly using your own email address.

3. Health information

Health conditions and related information you provide are sensitive. We collect this information only to show you relevant studies and for no other purpose. We do not sell or share your personal information with researchers, study sponsors, or advertisers. However, we use AI-assisted development tools (including Anthropic's Claude) to build and maintain this service. Limited user data may be processed by these tools.

4. Third-party services

We use the following third-party services to operate WorthDoing:

• Hetzner (EU) — server and database hosting
• Resend — transactional email delivery (e.g., account verification, password reset)
• Anthropic — AI tools used to generate study summaries and to build and maintain this service. Limited user data may be processed by Anthropic's systems in the course of development and operations.
• Stripe — payment processing for subscriptions. Stripe handles all payment card data; we do not store card numbers on our servers. See Stripe's Privacy Policy.
• Cloudflare — DNS and network security

5. AI-generated content

Study summaries and eligibility descriptions are generated with AI assistance and may contain errors. We do not use your personal data to train AI models.

6. Data storage and security

Your data is stored on servers in the EU (Hetzner). Passwords are hashed using a strong one-way algorithm and never stored in plain text. We maintain regular backups.

7. Cookies and sessions

We use a single session cookie to keep you logged in. We do not use tracking cookies, advertising cookies, or third-party analytics.

8. Your rights

You have the right to access the personal information we hold about you, correct inaccurate information, delete your account, and export your data in a portable format. You can delete your account at any time directly from your profile page. For other requests, email [email protected]. We will respond within 30 days.

9. Data retention

We retain your account and profile data for as long as your account is active. You may delete your account at any time from your profile page. Upon deletion, we will immediately remove your personal information, including your email address, health profile, and preferences. Anonymized, non-identifiable usage data (such as which types of studies were saved or dismissed, with no link to your identity) may be retained for product improvement purposes.

10. Children

WorthDoing is intended for adults 18 and older. We do not knowingly collect information from anyone under 18.

11. Changes

We may update this policy from time to time. We will note the date of the most recent update at the top of this page.

12. Contact

Questions about your data? Email [email protected].