🔒 Privacy Policy

Last Updated: April 12, 2026

Rad Onc Oral Board Sim ("we," "our," or "the App") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application.

1. Information We Collect

1.1 Personal Information

• Email address (required for account creation)
• Display name (optional)
• Password (stored securely, never in plain text)

1.2 Usage Data

• Case attempts and completions
• Performance scores and evaluations
• Study progress and statistics
• App usage patterns and preferences

1.3 Voice Data

• Voice input processed on-device using Apple's Speech framework
• Transcribed text (not raw audio) may be sent to OpenAI for evaluation
• No voice recordings are stored or transmitted to our servers

1.4 Technical Data

• Device type and operating system version
• App version and crash reports
• IP address (for security purposes)

1.5 Purchase Information

• Credit purchases and subscription status
• Transaction history
• Payment information (processed by Apple, not stored by us)

2. How We Use Your Information

We use your information to:

• Provide and maintain the App's functionality
• Create and manage your account
• Generate AI-powered clinical scenarios and feedback
• Track your progress and performance
• Process purchases and manage subscriptions
• Send verification emails and important account updates
• Improve the App and develop new features
• Prevent fraud and ensure security
• Comply with legal obligations

3. Third-Party Services We Use

These services have their own privacy policies. We encourage you to review them:

• Firebase Privacy Policy
• OpenAI Privacy Policy
• Apple Privacy Policy

4. Data Storage and Security

We take data security seriously and implement industry-standard measures:

• Email verification required for account access
• Passwords encrypted using industry-standard algorithms
• Data stored on secure Firebase servers
• HTTPS encryption for all data transmission
• Regular security audits and updates

5. Data Retention

• Account data retained while your account is active
• Usage data retained for analytics and improvement
• Deleted account data removed within 30 days
• Some anonymized data may be retained for analytical purposes

6. Your Privacy Rights

You have the right to:

• Access — Request a copy of your personal data
• Correction — Update incorrect or incomplete data
• Deletion — Request deletion of your account and data
• Portability — Receive your data in a machine-readable format
• Opt-Out — Decline non-essential communications

7. How We Share Your Data

We may share your data with:

• Service providers (Firebase, OpenAI) as necessary to operate the App
• Law enforcement if required by law or to protect rights and safety
• Business successors in case of merger or acquisition

We never share identifiable medical or patient information, as this app is for educational purposes only.

8. Children's Privacy

This App is intended for medical professionals and students 18 years or older. We do not knowingly collect information from individuals under 18. If we discover we have collected data from a child, we will delete it immediately.

9. International Data Transfers

Your data may be transferred to and stored on servers located in the United States and other countries. By using the App, you consent to this transfer. We ensure appropriate safeguards are in place for international transfers.

10. Cookies and Tracking

We use minimal tracking technologies:

• Firebase Analytics for app usage patterns
• Crash reporting to identify and fix bugs
• Session management for authentication

We do not use third-party advertising or tracking cookies.

11. California Privacy Rights (CCPA)

California residents have additional rights:

• Know what personal information is collected
• Know if personal information is sold or disclosed
• Opt-out of sale of personal information (we don't sell data)
• Request deletion of personal information
• Non-discrimination for exercising privacy rights

12. GDPR Compliance (EU Users)

If you are in the European Economic Area, you have additional rights under GDPR:

• Right to access your personal data
• Right to rectification of inaccurate data
• Right to erasure ("right to be forgotten")
• Right to restrict processing
• Right to data portability
• Right to object to processing
• Right to withdraw consent

Contact us at navfallahi@gmail.com to exercise these rights.

13. Data Breach Notification

In the event of a data breach that compromises your personal information, we will:

• Notify affected users via email within 72 hours of discovering the breach
• Describe the nature of the breach and the data involved
• Outline the steps we are taking to address the breach
• Provide guidance on steps you can take to protect yourself
• Report to relevant regulatory authorities as required by law

14. Changes to This Privacy Policy

We may update this Privacy Policy periodically. Changes will be posted in the App and on this page with a new "Last Updated" date. Continued use after changes constitutes acceptance of the updated policy. We will notify you of significant changes via email.

15. Contact Information

If you have questions about this Privacy Policy or our data practices:

• Email: navfallahi@gmail.com
• Developer: Navid Fallahi
• App: Rad Onc Oral Board Sim