Privacy Policy

Who we are

Clinical Case Simulator is operated by AI Medical Training, LLC ("we", "us"). This policy explains what the app collects, where it goes, how long it is kept, and what you can ask us to do with it.

Questions or requests: kevin@clinicalcasesimulator.com.

What we collect

Your account. Your email address and a password. Passwords are handled by our sign-in provider, Supabase, which stores them in hashed form; we never see them. Supabase also records when you signed up, confirmed your email and signed in, and its logs of sign-in events can include your IP address.

Your voice during a case. When you start a case, your browser streams your microphone audio to Deepgram, which turns your speech into text, runs the examiner, and speaks the examiner's replies. We do not record or store your audio.

Your cases and reports. For each case you finish, we store the text transcript of the conversation, your written report and your score, so you can review them later. For every case you start, we also store a record of the attempt: which case, when it started and ended, how long it was connected, which examiner you chose, the technical settings used, and identifiers we use to troubleshoot problems and decide refunds.

Purchases. Payments are made through Stripe Checkout. We never receive your card number. We store the Stripe checkout reference, the number of cases bought, the amount paid, the date, and your current case balance.

Messages you send us. If you email us, we keep the email.

Storage on your device. We do not set cookies. Your browser's local storage keeps you signed in, remembers a few preferences (such as captions and your chosen examiner), and holds what is needed to resume a case that was interrupted. You can clear it in your browser settings at any time; you will be signed out.

Site usage. We use Vercel Web Analytics to count page views. It records the page address, the referring site, your browser, operating system, device type and approximate location (country, region and city). It uses no cookies, and identifies visitors only by a hash that is discarded after 24 hours. Page addresses can include the ID of one of your reports, but not your name or email. We do not allow third parties to collect personal information about your activity over time and across other websites through this site, and Vercel Web Analytics does not track you across websites.

Please do not share real patient information

Every case is fictional, and nothing in a case requires details about real people. Do not say anything during a case that could identify a real patient, such as a name, date of birth or record number. What you say is sent to the providers listed below.

Practice patient encounters

If you do a practice patient encounter, your audio goes to Deepgram in the same way as a case. When the encounter ends, we store its text transcript, then send the transcript to OpenAI to write your review and to check it against the encounter's scoring list. We store the review, a score from 0 to 100, and for each item on the list whether you showed it, with the words from the transcript that show it. We also keep a count of how many reviews your account has requested each day, to limit use.

If you belong to a residency program

A residency program can arrange accounts for its residents. If your account is a member of a program, the program's administrators (such as the program director or coordinator) can see your activity and results in Clinical Case Simulator from the date you joined the program until your membership ends, and can still see that period's records after you leave: your cases, transcripts, reports and scores, and your patient encounters, transcripts, reviews, scores and item-by-item results. They cannot see anything from before you joined, your purchases or your case balance. When you join, the app tells you that your program can see your activity. If you already have an account when a program adds you, we also email you to say which program added you and that it can see your activity from then on.

Who receives your information

We share information only with the service providers that run the app, and only what each one needs.

Deepgram receives your microphone audio during a case, and the conversation text. It converts speech to text, runs the examiner and produces the examiner's voice. By default, Deepgram may keep portions of audio and transcripts to improve its speech models under its Model Improvement Program. We do not currently opt out of that program. Deepgram's privacy policy: https://deepgram.com/privacy

OpenAI provides the language models. During a case, Deepgram sends the conversation text to OpenAI to generate the examiner's replies. After a case, we send the transcript and the case details to OpenAI to grade it and write your report, and we do the same to review and score practice encounters. Under OpenAI's API terms, the data we send OpenAI directly is not used to train its models, and OpenAI may keep it for up to 30 days to monitor for abuse. https://openai.com/policies/privacy-policy

Anthropic provides a backup language model. If OpenAI is unavailable during a case, Deepgram sends the conversation text to Anthropic for the examiner's replies instead. This is rare. https://www.anthropic.com/legal/privacy

Supabase provides sign-in and our database, which holds your account, transcripts, reports, scores, case records, encounter results, program memberships, balance and purchase records. https://supabase.com/privacy

Stripe processes payments. https://stripe.com/privacy

Vercel hosts the site and provides the page view analytics described above. Like any web host, it processes your IP address and request details to serve pages. https://vercel.com/legal/privacy-policy

Twilio SendGrid delivers our account emails (email confirmation, invitations, password reset, and a notice when you are added to a residency program), so it receives your email address and the content of those emails. https://www.twilio.com/en-us/legal/privacy

Cloudflare manages our domain and forwards email sent to kevin@clinicalcasesimulator.com. https://www.cloudflare.com/privacypolicy/

If you are an invited case reviewer, we also store your display name and review permissions, and your review decisions and comments are recorded in Google Sheets. https://policies.google.com/privacy

We may also disclose information if the law requires it, to protect the safety or rights of our users or of us, or as part of a sale or merger of the business.

We do not sell your personal information, we do not share it for advertising, and the app shows no ads.

How we use it

To run your cases and encounters, grade and score them, and show you your reports and progress. If you belong to a residency program, to show your results to its administrators as described above. To process purchases and decide refunds. To send account emails (email confirmation, invitations, password reset, and a notice when you are added to a residency program); we do not send marketing email. To answer your messages. To find and fix problems, and to prevent abuse, such as limits on how often some features can be used. To understand, in aggregate, how the site is used.

How long we keep it

Your account, transcripts, reports, scores, case records, encounter results and purchase records are kept for as long as your account exists, until you ask us to delete them. Records of payments may be kept longer where tax or accounting law requires it.

Information held by the providers above is kept under their own policies, as described in that section.

Your requests: access, correction and deletion

There is no self-service export or deletion in the app yet. Email kevin@clinicalcasesimulator.com from the address on your account and we will: - send you a copy of the information we hold about you; - correct it; or - delete your account and the information linked to it.

We may ask you to confirm the request from your account's email address. Deleting your account removes any cases you have not used. Information already held by a provider is then governed by that provider's retention, described above.

California residents

Under the California Consumer Privacy Act, you have the right to know what personal information we collect and how we use it, to have it corrected, and to have it deleted, and we will not treat you differently for using these rights. The information we collect, and who receives it, is described above. We do not sell or share personal information as the Act defines those terms. To make a request, email kevin@clinicalcasesimulator.com.

Children

Clinical Case Simulator is for medical trainees and physicians and is not intended for anyone under 13 (or 16 in some jurisdictions). If we learn we hold information from a child under that age, we will delete it. Contact us at kevin@clinicalcasesimulator.com.

Security

Connections to the app and to our providers are encrypted. Our database restricts each account to reading its own records, except that a residency program's administrators can read their members' records as described above. No system is perfectly secure, and we cannot guarantee that information will never be accessed without permission.

Where your information is processed

We and the providers above are based in the United States. Your information is processed in the United States and may be processed in other countries where those providers operate.

Changes to this policy

When we change this policy, we will update the date at the top of this page. If a change is significant, we will also tell you in the app or by email.

Contact

AI Medical Training, LLC. Email kevin@clinicalcasesimulator.com.