1. Scope
This Privacy Policy applies to USCEAI websites, applications, accounts, training cases, scoring, public profiles, leaderboard, support communications, billing flows, emails, and related services. It does not apply to third-party websites or services that we do not control.
USCEAI is designed for simulated clinical education. You must not submit real patient information, protected health information, or confidential third-party information.
2. Information we collect
- Account information, such as name, email, authentication identifiers, login provider, profile photo, display name, country, time zone, referral code, plan, and subscription status.
- Training information, such as selected categories, simulated case activity, interview messages, notes, scoring results, rubric feedback, completion history, quality rating, level, XP, and leaderboard data.
- Public profile information, such as display name, avatar, headline, country, links, level, completed-case count, average score, and quality rating.
- Payment and subscription information processed through payment providers, such as checkout status, customer identifiers, subscription identifiers, billing cycle, and payment status. We do not intentionally store full payment card numbers.
- Support and communications information, such as emails, support messages, attachments you send, delivery status, and administrative notes.
- Device, usage, and technical information, such as IP address, browser, device type, operating system, pages viewed, feature usage, timestamps, local storage, cookies, crash data, diagnostic logs, and security signals.
- Information from service providers, authentication providers, payment processors, email providers, analytics tools, and infrastructure providers as needed to operate the service.
3. No PHI and no HIPAA relationship
USCEAI is not intended to receive, create, maintain, or transmit protected health information. Unless we separately sign a written agreement expressly stating otherwise, USCEAI is not acting as a HIPAA covered entity or business associate for you, your school, your employer, your practice, or any patient.
If you submit real patient information despite this restriction, you are responsible for that submission and for any legal, institutional, ethical, or professional obligations that result.
4. How we use information
- Provide, operate, authenticate, secure, maintain, and improve USCEAI.
- Generate simulated cases, patient dialogue, scoring, feedback, summaries, notes, progress records, and leaderboard rankings.
- Create and manage accounts, subscriptions, referrals, billing, trials, and access controls.
- Provide support, respond to requests, send service messages, and manage email communications.
- Detect, prevent, investigate, and respond to fraud, abuse, security incidents, unlawful conduct, policy violations, and technical problems.
- Debug, analyze, measure, test, develop, and improve service performance, reliability, safety, and usability.
- Enforce legal terms, comply with law, resolve disputes, preserve rights, and protect users, USCEAI, and third parties.
- Create aggregated, de-identified, or anonymized information that does not reasonably identify you.
5. AI processing
USCEAI may send prompts, simulated case context, user-entered training content, notes, and related metadata to AI and infrastructure providers to generate responses, score notes, and provide feedback. Do not include real patient information or confidential information in prompts, notes, chats, or support requests.
We may use automated systems to detect abuse, improve quality, and protect the service. Automated outputs may be inaccurate and are not medical advice.
6. How we disclose information
- Service providers and processors that help provide hosting, storage, authentication, AI processing, analytics, payments, email, support, security, and infrastructure.
- Payment processors for checkout, billing, subscription management, fraud prevention, taxes, disputes, and payment compliance.
- Other users or the public when information is part of your public profile, leaderboard entry, or content you choose to publish.
- Legal, safety, and enforcement recipients when we believe disclosure is required or appropriate to comply with law, enforce terms, protect rights, investigate abuse, or prevent harm.
- Business transaction recipients in connection with a merger, acquisition, financing, reorganization, bankruptcy, sale of assets, or transition of service.
- Other recipients with your consent or at your direction.
7. No sale of personal information
We do not sell personal information for money. We do not knowingly sell or share personal information for cross-context behavioral advertising. If our practices change, we will update this Privacy Policy and provide legally required choices.
8. Cookies and local storage
We use cookies, local storage, SDKs, and similar technologies for authentication, session continuity, checkout, preferences, security, performance, analytics, and fraud prevention. Strictly necessary technologies are used to provide the service. Where consent is required for analytics, we do not enable analytics storage unless you allow it through the cookie settings.
You may change cookie settings where available, and browser settings may allow you to block or delete certain technologies. Parts of the service may not work correctly if necessary technologies are disabled.
9. Data retention
We retain information for as long as reasonably necessary to provide the service, maintain accounts, support billing and subscriptions, comply with law, resolve disputes, enforce agreements, protect security, maintain backups, and preserve legitimate business records.
Retention periods vary depending on the type of information, account status, legal requirements, security needs, and operational requirements. We may retain aggregated, de-identified, or anonymized information indefinitely.
10. Security
We use administrative, technical, and organizational safeguards designed to protect information. No internet service, AI system, storage platform, or transmission method can be guaranteed to be perfectly secure. You are responsible for protecting your credentials and limiting what you submit.
11. Your choices and requests
- You may update many profile fields in your profile settings.
- You may request access, correction, deletion, or export of certain account information by contacting support@usceai.com.
- You may cancel paid subscriptions through the billing flow where available or by contacting support.
- You may choose not to publish optional profile fields or links.
- You may stop using the service at any time.
12. U.S. state privacy rights
Depending on where you live and whether applicable legal thresholds are met, you may have rights to know, access, correct, delete, port, restrict, or opt out of certain processing of personal information. You may also have the right not to be discriminated against for exercising privacy rights.
California residents and residents of other states with applicable privacy laws may submit requests to support@usceai.com. We may need to verify your identity and authority before acting on a request. Authorized agents may be required to provide proof of authorization.
- Categories collected: identifiers, account information, commercial information, internet or electronic activity, user-generated content, approximate location such as country or time zone, support communications, and inferences related to training progress.
- Sources: you, your device, service providers, authentication providers, payment providers, email providers, and your use of the service.
- Purposes: service delivery, training simulation, scoring, billing, support, security, analytics, legal compliance, and improvement.
- Disclosures: service providers, public profile viewers, payment processors, infrastructure providers, AI providers, legal recipients, and transaction recipients.
13. International users
USCEAI is operated primarily for users in the United States. If you access the service from outside the United States, your information may be processed in the United States or other countries where privacy laws may differ from those in your location.
Where GDPR, UK GDPR, or similar laws apply, our legal bases may include performance of a contract, legitimate interests, consent, legal obligations, and protection of rights. You may have rights to access, correct, delete, restrict, object, port data, and lodge a complaint with a supervisory authority.
14. Children and minors
USCEAI is not directed to children or minors and is not intended for users under 18. We do not knowingly collect personal information from children under 13. If you believe a child has provided personal information, contact support@usceai.com so we can review and take appropriate action.
15. Communications
We may send service, security, support, billing, policy, and account communications. You cannot opt out of messages necessary to provide or secure the service. Marketing messages, if any, may include unsubscribe instructions where required.
16. Changes to this Privacy Policy
We may update this Privacy Policy from time to time. The updated version will be posted with a new effective date. Continued use of USCEAI after an update means the updated policy applies to information collected and processed after the effective date, unless law requires otherwise.
17. Contact
Privacy questions and requests may be sent to support@usceai.com. Do not include real patient information, government identifiers, payment card numbers, or other highly sensitive information in support messages.