Privacy

Who to contact

u-sim operates this service. For privacy questions, access requests, corrections, or deletion help, email admin@u-sim.org. We may need to verify that a request concerns your account before acting on it.

Use fictional teaching cases

u-sim is for educational simulation, not patient care or medical records. Do not enter identifiable patient information, confidential clinical records, or other information you do not have permission to provide. This applies to prompts, conversations, images, files, and voice input. Contact us promptly if you submit such information by mistake.

Information we collect

We store access applications, feedback, contact requests, account and sign-in information, optional profile details and photos, preferences, and administrative access decisions. Depending on the features you use, we also store scenarios and their revision history, uploaded teaching material, Builder conversations and generated content, publications, saved simulation progress, assessments, reflections, bookmarks, and usage records.

Authentication and hosting services process technical information such as IP addresses, browser and request information, session cookies, security events, and diagnostic logs. Your password is stored as a hash, not as readable text. Optional sign-in providers share the account information needed to sign you in.

How we use information

We use information to review applications, provide and personalize the service, save your work, manage access and allowances, communicate about your account, respond to support requests, investigate failures or abuse, and understand how the service is being used. Authorized administrators can review application details, account status, activity summaries, and usage. Support investigations may require access to relevant stored content.

Optional account emails require your communication preference; you can turn them off in Account & settings or use their unsubscribe link. Essential invitations, verification, password recovery, and service or security messages are separate.

AI and voice processing

When you use Cue or Sage, relevant prompts, scenario content, conversation context, and requested media are sent to the configured AI provider to generate a response. Enabled profile personalization can add your profession, specialty, experience, setting, intended learners, and learning focus. You can disable profile personalization in your account settings.

We use Microsoft Azure for text, image, and voice features. Microsoft processes this information under its Azure AI data practices, including applicable safety and abuse monitoring. This does not mean requests have zero retention. We do not use your private content to train our own AI models.

Voice requires microphone permission. Audio is forwarded for transcription or generated for playback; the voice feature does not save recordings in your account. Transcribed text can become part of a saved field or conversation. Some simulator conversation text is session-local, while saved run events and findings persist. Do not rely on the service as a complete transcript archive.

Service providers and sharing

We use providers to operate the service, including Vercel for hosting, Neon for hosted databases, Microsoft Azure for AI, and our email delivery provider. They process information necessary for those services. Processing may occur outside your country. We may also disclose information when legally required or necessary to address fraud, abuse, security threats, or the protection of users’ rights.

We do not sell personal information or use it for targeted advertising. Private workspace content is not made available to other users merely because you save it.

Publishing is different: a published scenario can be accessed by other signed-in users. Its author information, patient details, resources, facilitator content, and debrief may be included. Unpublishing stops new discovery and acquisition, but previously retained practice snapshots and imported copies remain with their users.

Cookies and device storage

We use cookies and browser storage for authentication, security, preferences, and application state. Blocking required cookies can prevent sign-in or normal use. Clearing browser storage does not delete server-side account data. We do not use advertising trackers.

Retention and deletion

We retain account and teaching content to provide the service and support its revision, recovery, and saved-practice features. Deleting an individual scenario does not necessarily erase its historical or retained content immediately. Ending access does not automatically delete the account or its work.

Account deletion removes the account and its owned workspace records through the application’s deletion process. Copies already acquired by other users remain. Access applications, feedback, support correspondence, limited administrative or security records, and provider logs can remain separately where needed for their purposes. Backup copies, where maintained, remain until those backups expire or are removed. Contact us to request review or deletion of separately retained information.

Your choices

Account & settings lets you update your profile, manage communication and personalization preferences, export your account data, and delete your account. Exports describe material they cannot include, such as external assets. If expired access or another issue prevents using these controls, email us for help. Depending on where you live, you may have additional rights to access, correct, delete, restrict, or object to processing, or complain to your privacy regulator.

Age, security, and changes

The service is intended for adults aged 18 or older. Do not create an account for a child. We use access controls and other safeguards, but no online service can guarantee absolute security. We will update this notice when practices change and provide appropriate notice of material changes.

Also read the Terms of use.