Privacy and analytics

We use account and payment records to provide course access and support customers. Your saved practice work, transcripts and assessments let you resume encounters and review your progress. Account sign-in uses a secure session cookie.

Optional two-factor authentication adds an authenticator app after email verification. Authenticator secrets are encrypted in the service database; recovery codes are stored as one-way hashes. Short-lived cookies and verification records support the second sign-in step and security changes.

The Feedback button sends the message and contact email you choose to provide, the page path, and the station reference and mode when available. Signed-in submissions are linked to your account and appear in the administrator feedback inbox. We retain these reports to investigate issues and improve the service. The button does not automatically capture screenshots, recordings, transcripts, other page inputs or URL query parameters. Please leave out security codes and real patient-identifying information.

Simulation and speech features send the text, case context or audio needed for your request to the configured AI and speech providers. Payment details are handled by Stripe or BTCPay’s hosted checkout. The application does not store card numbers.

First-party visit analytics help us understand how people discover the service. The analytics records contain public landing paths, approximate visits, referring domains and campaign labels. They do not include IP addresses, full referring URLs, clinical transcripts or microphone recordings. We do not use a third-party advertising tracker.

A random visit identifier stays in this browser tab’s session storage and expires after 30 minutes without a measured page visit. Visit analytics do not set cookies. If you create an account, the first recorded source is associated with that account to understand signup and purchase conversion. Traffic older than 180 days is removed by scheduled daily cleanup; acquisition labels remain with the account.

The administrator dashboard shows account and payment records plus aggregate completed-practice activity. It does not expose learner transcripts or assessment scores. Account, payment and saved-practice history is retained by the service; contact the course owner about your records.