Privacy policy

Who is responsible

For students and staff, your medical school decides how MedSim is used and is responsible for your data; we process it on the school's behalf and only as our agreement with the school allows. For visitors to this website, the free trial and the demo request form, VirtualVerse Studio is responsible.

Write to contact@virtualverse.studio with any question about your data.

What we keep

• Your account: your name, your institutional email address, your school, your role and your classes. You sign in with a code we email you; if your school gave you a password, only a one-way hash of it is stored.
• Your consultations: what you say or type to the patient and what the patient answers (the transcript), what you examine, the tests you order, your diagnosis, differentials and plan, your score, and any change an educator makes to it with their reason.
• How long each consultation lasted, and your school's voice minutes used.
• When you sign in on a headset or phone: which kind of device, the app's version, and a token that keeps it signed in (we store only its hash).
• From visitors who try MedSim without an account: nothing that names you. To limit free consultations, we count them against a one-way code made from your internet address, and the count expires after a day.
• From the demo request form: your name, work email, school, role, country, number of students and your message.

Voice

When you talk to a patient, your voice is turned into text and the patient's reply into speech as you speak. No recording of your voice is kept: the audio is deleted, and our voice provider deletes its copy of the transcript after 7 days. The transcript MedSim keeps is the one described above.

What we use it for

• To run MedSim for your school: sign-in, assignments, consultations, scores and the results educators see.
• To score consultations: an AI reads the transcript and your plan against the case's score sheet. Educators can change any mark.
• To answer demo requests and to keep the service secure and working.

We do not sell your data, show advertising, or use students' data to train AI models.

Who processes it, and where

These companies run parts of MedSim for us, under their data processing terms, and see only what their part needs:

• Supabase: the database and sign-in, in Frankfurt, Germany.
• Vercel: the website and app servers, in Frankfurt, Germany, with pages delivered from locations near you. On the free trial page it counts visits without cookies.
• ElevenLabs: the patients' voices and speech-to-text, in the United States.
• Anthropic: the AI that scores consultations and helps educators write cases, in the United States.
• Amazon Web Services: the emails that carry sign-in codes and replies, in the United States.

Data that leaves your country

Because these services run in Germany and the United States, your data leaves Egypt or Saudi Arabia. We transfer it only to the services above, for the purposes above, with the safeguards the data protection laws of Egypt (Law No. 151 of 2020) and Saudi Arabia (the Personal Data Protection Law) require.

How long we keep it

• Accounts and consultations: while your school uses MedSim. A school can ask us to delete a student's data at any time, and when its agreement ends we delete its data within 90 days.
• Demo requests: up to two years, unless you ask us to delete yours sooner.
• The free trial's daily counts: one day.

Cookies

MedSim uses only the cookies it needs: those that keep you signed in, one that remembers your time zone so times show on your own clock, and the browser's own storage for settings such as the language you chose. There are no advertising or tracking cookies.

Your rights

You can ask to see the data MedSim keeps about you, to correct it, to delete it, or to object to how it is used. Students and staff can ask their school or write to us; we pass requests about school data to the school and help it answer. You can also complain to the data protection authority in your country.

Security

Data is encrypted between your device and our servers. The database keeps each school's data apart from every other school's, and staff see only what their role allows. Access on our side is limited to the people who run the service.

Age

MedSim is for medical students and the staff who teach them. It is not meant for anyone under 18.

Changes

When this policy changes, we update the date above and tell schools of any change that matters to them before it applies.