Privacy Policy

The most important thing first

ClinicSims simulates conversations with fictional patients. Never enter real patient information or any protected health information (PHI). The cases and patients are invented for training. Anything you type or say is treated as practice content, not as a medical record, and is processed by the third-party AI services described below.

What we collect

• Account information. Your name and email address, handled by our authentication provider (Clerk) when you sign up.
• Encounter content. The text you write to the simulated patient, your notes and presentations, and the transcripts of your spoken encounters. This is stored so we can show your history and generate feedback.
• Voice audio.During a voice encounter, your microphone audio is streamed in real time to our voice AI provider (Google) so the patient can respond. See “Voice and recording” below.
• Usage and billing data.How much voice you've used (for plan limits), and — if you subscribe — billing details handled by Stripe. We never see or store your full card number.
• Product analytics and errors. Anonymous-by-default usage events and error reports, used to keep the product working and improve it.

Voice and recording

Voice encounters use a real-time speech service (Google's Gemini Live API; OpenAI's Realtime API may be used as a fallback). When you start a voice encounter and speak, your audio is sent to that service so the AI patient can hear and reply. We store the transcriptof the conversation as part of your encounter; we do not retain a copy of the raw audio recording after the session. Audio sent to the voice provider is handled under that provider's terms. You can always practice in text instead of voice.

How we use your information

• To run your encounters and generate your feedback and scores.
• To show your history and progress, and (for faculty) cohort summaries.
• To enforce free-trial and subscription limits and process payments.
• To keep the service secure, debug problems, and improve it.

We do not sell your personal information, and we do not use your encounter content to advertise to you.

Service providers we share data with

We rely on a small set of processors to run ClinicSims. Each receives only what it needs:

• Clerk — sign-in and account management (name, email).
• Google (Gemini Live)— real-time voice conversation (microphone audio, persona prompt). OpenAI's Realtime API is an optional fallback voice provider.
• Anthropic — generating feedback on your transcripts, notes, and presentations.
• Stripe — subscription billing and payment processing.
• PostHog — product analytics and session replay, with on-screen text and form inputs masked.
• Sentry — error monitoring.
• Hosting and database — our app and encounter data are hosted on Vercel with a managed Postgres database.

We keep internal audit logs of actions (e.g. “an encounter was finalized”) using only record identifiers and small metadata — never your transcripts or notes.

Data retention and your choices

We keep your account and encounter content while your account is active so your history stays available to you. You can ask us to delete your account and associated encounter content at any time by emailing support@clinicsims.com. We will delete it within a reasonable period, except where we must retain limited billing records for legal and accounting purposes.

Cookies

We use cookies that are necessary to keep you signed in (set by Clerk) and, where enabled, a small number of analytics cookies. We do not use third-party advertising cookies.

Children and eligibility

ClinicSims is intended for medical and health-professions students and is not directed at children under 13.

Changes to this policy

We may update this policy as the product evolves. We'll update the “last updated” date above, and for material changes we'll make a reasonable effort to notify you.

Contact

Questions about privacy, or a deletion request? Email support@clinicsims.com.