Privacy Policy

The kind of personal information that we collect from you will depend on how you use the website. The personal information which we collect and hold about you may include:

• Email address (required for account creation and authentication)
• Name and professional credentials (for account identification)
• Educational institution and course enrolment details (to verify student or professional status)
• Usage data and simulation performance metrics (to provide feedback on skill development)
• Login and session information (for security and platform functionality)
• Communication preferences (for service updates and educational content)
• Payment details (for subscription service provision)

Important: We do not collect sensitive health information or personal mental health data from our users. The platform is designed for educational simulation purposes only, and all scenario-based learning exercises use fictional case studies rather than real patient information.

The Privacy Act 1998 (Cth) ("Privacy Act") defines types of information, including Personal Information and Sensitive Information.

Personal Information means information or an opinion about an identified individual or an individual who is reasonably identifiable: (a) whether the information or opinion is true or not; and (b) whether the information or opinion is recorded in a material form or not. If the information does not disclose your identity or enable your identity to be ascertained, it will in most cases not be classified as "Personal Information" and will not be subject to this privacy policy.

Sensitive Information is defined in the Privacy Act as including information or opinion about such things as an individual's racial or ethnic origin, political opinions, membership of a political association, religious or philosophical beliefs, membership of a trade union or other professional body, criminal record or health information.

Sensitive Information will be used by us only:

• for the primary purpose for which it was obtained;
• for a secondary purpose that is directly related to the primary purpose; and
• with your consent or where required or authorised by law.

• We may collect Personal Information from you whenever you input such information into the Website, related app or provide it to Us in any other way.
• We may also collect cookies from your computer which enable us to tell when you use the Website and also to help customise your Website experience. As a general rule, however, it is not possible to identify you personally from our use of cookies.
• We generally don't collect Sensitive Information, but when we do, we will comply with the requirements set out above.
• Where reasonable and practicable we collect your Personal Information from you only. However, sometimes we may be given information from a third party, in cases like this we will take steps to make you aware of the information that was provided by a third party.

• We collect Personal Information to provide you with the best service experience possible on the Website and keep in touch with you about developments in our business.
• We customarily only disclose Personal Information to our service providers who assist us in operating the Website. Your Personal Information may also be exposed from time to time to maintenance and support personnel acting in the normal course of their duties.
• By using our Website, you consent to the receipt of direct marketing material. We will only use your Personal Information for this purpose if we have collected such information direct from you, and if it is material of a type which you would reasonably expect to receive from us. We do not use sensitive Personal Information in direct marketing activity. Our direct marketing material will include a simple means by which you can request not to receive further communications of this nature, such as an unsubscribe button link.

We store your Personal Information in a way that protects it from unauthorized access, misuse, modification, or disclosure. When we no longer require your Personal Information, we take reasonable steps to destroy, anonymize, or irreversibly de-identify it.

Under the General Data Protection Regulation (GDPR) and the Privacy Act, you have comprehensive rights regarding your personal data:

• Right of Access & Portability: You can view your information or instantly download a full, structured CSV record of your profile, session history, clinical evaluations, and reflections directly from your Account Settings page.
• Right to Erasure (Delete Account): You can permanently erase your entire data footprint. Triggering 'Delete Account' in your settings initiates an automated, immediate cascade purge that deletes your authentication profile, Firestore records, and all matching audio/video files from our Google Cloud Storage buckets.
• Right to Correction: You can correct any inaccurate details in your profile at any time, or contact us for assistance.

If you have a complaint concerning the manner in which we maintain the privacy of your Personal Information, please contact us as on the contact details set out at the bottom of this policy. All complaints will be considered by Dr. Tuki Attuquayefio and we may seek further information from you to clarify your concerns. If we agree that your complaint is well founded, we will, in consultation with you, take appropriate steps to rectify the problem. If you remain dissatisfied with the outcome, you may refer the matter to the Office of the Australian Information Commissioner.

To deliver our interactive clinical simulations, we work with specialised subprocessors who may process, store, or transmit your Personal Information across international borders. These subprocessors fall into the following generic categories:

• Cloud Infrastructure and Hosting Provider (Australia and USA)
• Generative Artificial Intelligence and Natural Language Processing API Providers (USA)
• Real-time Audio and Video Communication Network Gateway Providers (Global)
• Automated High-Fidelity Audio Synthesis and Text-to-Speech Providers (USA)
• Transactional and Incident Alert Email Dispatch Providers (USA)

When transferring Personal Information outside of Australia or the European Economic Area (EEA), we ensure that appropriate safeguards are in place in accordance with the General Data Protection Regulation (GDPR). This includes utilising Standard Contractual Clauses (SCCs) approved by the European Commission, and requiring our global subprocessors to adhere to rigorous data security and de-identification standards.

If you have any queries, or if you seek access to your Personal Information, or if you have a complaint about our privacy practices, you can contact us through: