Privacy Policy

Last updated: 2/26/2026

1. Introduction

Welcome to the Nursing Simulation AI Platform ("Platform", "we", "us", or "our"). The Platform is owned, developed, and operated by Lőrincz Attila ("Owner", "Developer", "Operator", "Data Controller"). We are committed to protecting your personal data and respecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your information when you use our educational simulation platform.

This Platform is operated for educational purposes only and is designed to help nursing students practice clinical communication skills through AI-powered simulations.

2. Data Controller

The data controller responsible for your personal data is:

Lőrincz Attila
Platform Owner, Developer & Data Controller
Address: HU 1088 Budapest, Vas u. 17.
Email: [email protected]

3. Data We Collect

3.1 Account Information

When you create an account, we collect:

  • Name
  • Email address
  • Login method (OAuth provider)
  • Account creation and last login timestamps

3.2 Simulation Data

During your use of the Platform, we collect:

  • Simulation session records (start/end times, scenario details)
  • Conversation transcripts between you and AI patients
  • Audio recordings of your speech (stored securely in cloud storage)
  • Performance evaluations and feedback
  • Progress statistics and achievement data

3.3 Payment Information

If you make a donation or purchase, payment processing is handled by Stripe. We do not store your credit card information. We only receive:

  • Transaction ID
  • Payment amount and currency
  • Payment status
  • Optional message from supporter

3.4 Technical Data

We automatically collect:

  • IP address
  • Browser type and version
  • Device information
  • Usage analytics (page views, session duration)

4. Legal Basis for Processing (GDPR)

We process your personal data under the following legal bases:

  • Consent: You provide explicit consent when creating an account and using our services.
  • Legitimate Interest: We have a legitimate interest in improving our educational platform and preventing abuse.
  • Contract Performance: Processing is necessary to provide the services you requested.

5. How We Use Your Data

We use your personal data to:

  • Provide and maintain the Platform
  • Generate AI-powered patient simulations
  • Evaluate your performance and provide feedback
  • Track your progress and achievements
  • Process donations and payments
  • Send important service notifications
  • Improve our services and develop new features
  • Ensure platform security and prevent fraud
  • Conduct scientific research to improve nursing education (with your consent)

5.1 Research Data Usage

With your explicit consent, we may use anonymized simulation data for scientific research purposes, including:

  • Publishing research papers on nursing education effectiveness
  • Analyzing learning patterns and skill development trends
  • Improving AI-based educational methodologies
  • Contributing to evidence-based nursing education practices

Important: All research data is fully anonymized. Your name, email, and other personally identifiable information are removed before any research analysis. You can opt-out of research data collection at any time in your account settings, and this will not affect your access to the Platform.

6. Educational Use & Teacher-Student Relationships

If you are enrolled in a class or assigned to a teacher, additional data processing occurs:

6.1 Teacher Access to Student Data

Teachers with verified accounts can:

  • View simulation performance data of students enrolled in their classes
  • Access OSCE evaluation results for students they supervise
  • Monitor progress and provide personalized feedback

Important: Teachers can only access data of students explicitly enrolled in their classes. They cannot access data from other teachers' students or users not enrolled in any class.

6.2 Student Privacy Protection

We implement strict access controls to protect student privacy:

  • Students must explicitly consent to join a teacher's class
  • Students can leave a class at any time
  • Teachers cannot access audio recordings without explicit student permission
  • All teacher-student relationships are logged and auditable

6.3 Institutional Use

If your institution has an agreement with us, your data may be shared with authorized institutional administrators for educational quality assurance purposes. You will be informed of such arrangements during account creation.

7. Data Retention

We retain your personal data for the following periods:

7.1 Educational Use

  • Account data: Until you request deletion or 3 years of inactivity
  • Simulation records (educational): 2 years from creation, or until you leave your class
  • Audio recordings: 1 year from creation (or until you request deletion)
  • Teacher-student relationships: Retained while class is active, deleted 1 year after class ends

7.2 Research Use

  • Anonymized research data: Retained indefinitely for scientific purposes
  • Research consent records: 7 years from consent withdrawal (legal requirement)
  • De-identification logs: 3 years (to ensure proper anonymization)

7.3 Other Data

  • Payment records: 7 years (legal requirement for financial records)
  • Analytics data: 26 months (standard web analytics retention)

Note: You can request early deletion of your data at any time, except where retention is required by law (e.g., payment records) or where data has been fully anonymized for research purposes.

7. Data Sharing and Third Parties

We share your data only with the following trusted third parties:

  • Stripe: Payment processing (PCI-DSS compliant)
  • Cloud Storage Provider: Secure storage of audio files and data
  • AI Service Providers: To generate patient responses (data is anonymized)
  • Analytics Services: To understand platform usage (anonymized data)

We do not sell your personal data to third parties. All third-party processors are contractually bound to protect your data in compliance with GDPR.

8. Informed Consent for Research Participation

Participation in research studies is entirely voluntary. When you create an account, you will be asked whether you consent to your anonymized data being used for research purposes.

8.1 What Research Participation Means

If you consent to research participation:

  • Your simulation performance data will be anonymized and used for scientific research
  • Anonymized data may be published in academic journals or presented at conferences
  • Your data may be shared with research collaborators (always anonymized)
  • Research findings may inform improvements to nursing education practices

8.2 Your Rights as a Research Participant

  • Voluntary participation: You can decline research participation without affecting Platform access
  • Withdraw at any time: You can opt-out of research in your account settings
  • No impact on services: Opting out does not affect your ability to use the Platform
  • Anonymization guarantee: All research data is fully anonymized before use

8.3 Ethical Review

All research conducted using Platform data is subject to ethical review by appropriate institutional review boards (IRBs) or ethics committees. Research protocols comply with the Declaration of Helsinki and relevant national regulations.

9. Your Rights (GDPR)

Under the General Data Protection Regulation (GDPR), you have the following rights:

  • Right to Access: Request a copy of your personal data
  • Right to Rectification: Correct inaccurate or incomplete data
  • Right to Erasure: Request deletion of your personal data
  • Right to Restrict Processing: Limit how we use your data
  • Right to Data Portability: Receive your data in a structured format
  • Right to Object: Object to certain types of processing
  • Right to Withdraw Consent: Withdraw consent at any time

To exercise these rights, please contact us at [email protected]. We will respond within 30 days as required by GDPR.

9. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction:

  • Encryption of data in transit (HTTPS/TLS)
  • Encryption of sensitive data at rest
  • Regular security audits and updates
  • Access controls and authentication
  • Secure cloud infrastructure

10. Cookies and Tracking

We use the following types of cookies:

  • Essential Cookies: Required for authentication and core functionality
  • Analytics Cookies: Help us understand how you use the Platform
  • Preference Cookies: Remember your language and settings

You can control cookies through your browser settings. However, disabling essential cookies may affect Platform functionality.

11. International Data Transfers

Your data may be transferred to and processed in countries outside the European Economic Area (EEA). We ensure appropriate safeguards are in place, such as:

  • Standard Contractual Clauses (SCCs) approved by the European Commission
  • Adequacy decisions for certain countries
  • Certification schemes (e.g., Privacy Shield successors)

12. Children's Privacy

The Platform is intended for nursing students aged 18 and above. We do not knowingly collect personal data from children under 16. If you believe we have collected data from a child, please contact us immediately.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by email or through a prominent notice on the Platform. Your continued use after changes constitutes acceptance of the updated policy.

14. Contact and Complaints

If you have questions about this Privacy Policy or wish to exercise your rights, please contact us at:

Email: [email protected]
Address: HU 1088 Budapest, Vas u. 17.

You also have the right to lodge a complaint with your local data protection authority if you believe your rights have been violated.