Privacy Policy

This policy explains how Peter Chapman ("we", "us") collects, uses, stores and discloses your personal information when you use ClinicalSim (the "Service"). It complies with the Australian Privacy Act 1988 (Cth) and the Australian Privacy Principles.

1. What we collect

• Account details: your name, email address, and password (hashed).
• Professional context: profession, discipline, and institution (if you provide it).
• Session data: cases you've simulated, differential diagnoses, exam and imaging orders, and diagnostic outcomes.
• Payment metadata: subscription plan and Stripe customer ID. Card details are handled directly by Stripe and are never stored on our servers.
• Usage analytics: pages visited, clicks, and timing, used to improve the Service.

2. How we use it

• To operate the Service, generate simulations, and issue CPD certificates.
• To manage subscriptions and process payments (via Stripe).
• To send transactional emails (receipts, password resets, subscription notices).
• To improve case content, AI models, and educational outcomes (using aggregated, non-identifying data).
• To meet legal obligations.

3. Third parties

We share limited data with:

• Stripe — for payment processing (their privacy policy: stripe.com/privacy).
• AI providers (Anthropic, Google, OpenAI) — case content and your typed/spoken clinical reasoning are sent to their APIs to generate patient dialogue, illustrations, and coaching feedback. These providers do not use your data to train their public models under our current terms.
• Emergent — our hosting and infrastructure provider.

4. Data retention

We retain your account and session data for as long as your account is active. If you delete your account, we delete personal information within 30 days, except where retention is required by law (e.g. tax records).

5. Security

Passwords are stored using industry-standard hashing. Data is encrypted in transit (TLS). Access is limited to authorised personnel. We take reasonable steps to protect your information but no online service can guarantee absolute security.

6. Your rights

You may request access to, correction of, or deletion of your personal information at any time by emailing support@clinicalsim.health. You may also lodge a complaint with the Office of the Australian Information Commissioner (oaic.gov.au).

7. Cookies

We use minimal essential cookies for authentication and preferences. We do not currently use advertising or tracking cookies.

8. Changes to this policy

We may update this policy from time to time. Material changes will be communicated to you via email or a notice in the Service.

9. Contact

Privacy questions or requests: support@clinicalsim.health

This is a placeholder version of our Privacy Policy, drafted in plain language. A lawyer-reviewed version will replace it before public launch.