Privacy Policy

Data We Collect

We collect the following types of information:

• Account Information: Email address, username, and password (encrypted)
• Profile Information: Name, professional title, organization
• Usage Data: Game progress, scores, and training completion records
• Technical Data: IP address, browser type, device information
• Cookies: Session cookies and preference cookies (with your consent)

How We Use Your Data

We use your personal data to:

• Provide and maintain our medical simulation training services
• Manage your account and provide customer support
• Track your training progress and generate certificates
• Improve our services and develop new features
• Comply with legal obligations
• Send important service updates and notifications

Data Protection

We implement appropriate technical and organizational measures to protect your personal data:

• Data encryption in transit and at rest
• Regular security audits and assessments
• Access controls and authentication mechanisms
• Regular backups and disaster recovery procedures
• Employee training on data protection

Your Rights

Under GDPR, you have the following rights:

• Right to Access: Request a copy of your personal data
• Right to Rectification: Request correction of inaccurate data
• Right to Erasure: Request deletion of your personal data
• Right to Restriction: Request limitation of processing
• Right to Data Portability: Receive your data in a structured format
• Right to Object: Object to certain types of processing
• Right to Withdraw Consent: Withdraw consent at any time

To exercise any of these rights, please contact us using the information below.

Data Retention

We retain your personal data for as long as necessary to provide our services and comply with legal obligations:

• Account data: Until account deletion requested
• Training records: 7 years for certification purposes
• Technical logs: 90 days
• Marketing preferences: Until withdrawn

Third-Party Services

We may share your data with the following types of third parties:

• Cloud service providers (Azure) for data storage
• Email service providers (Brevo) for communications
• Analytics providers to improve our services
• Legal authorities when required by law

All third parties are required to maintain appropriate security measures.

Contact Information

For any questions or concerns about this privacy policy or your personal data, please contact: