Privacy policy

Who answers for the data

Responsible: MedSimulator.
Contact for data requests: My account › Contact, on this site.
Can't access your account? Recover your password on the sign-in screen and use the same contact.

Account: email, name (when recorded), password kept only in an irreversible encrypted form, signup and email confirmation dates, permissions and account status.
Access: date of last activity and a history of sign-ins, with IP address, city, region, country, date and time.
Free trial and abuse protection: protected identifiers, calculated from the email and the IP with a secret key, and attempt counters. They do not store the email or the IP as text.
Study: completed lessons, quiz questions and answers, attempts and notes in Imaging, preferences (such as language) and tutorial progress.
Payments: plan, amount, currency, country, status, dates, coupon and Mercado Pago identifiers. Payment is completed on the Mercado Pago site; we do not receive your card details.
Support: subject, messages, attached images, the module and page the request came from, and the refund reason.
Signup source: campaign labels from the link you arrived through (source, medium and campaign).
Visits by campaign: daily totals of site visits by source, medium and campaign, to compare with signups. We do not store who visited or the IP, and we use no new cookie.
News emails: when we sent them, which template, the delivery status, your opt-out and when you redeem the extra Premium day.
We do not ask for your date of birth, ID number or health data. In notes and messages, do not write data that identifies patients.

Providing the service (account, simulators, progress, support and payment): performance of the contract.
Protecting accounts and preventing abuse (sign-in history, attempt limits, one free trial per person and network): legitimate interest.
Keeping payment records: legal obligation.
Account, support and payment emails: performance of the contract. Opting out does not affect them.
News and coupons by email: legitimate interest, with an opt-out in every message.
Internal reports (signups, campaign sources, module usage): legitimate interest.

We only send them to accounts with a confirmed email, without active Premium, that have not opted out, and at most once every 30 days.
Each email identifies the sender, says why you received it and has an opt-out link that needs no login.
First-days emails: a welcome right after you confirm your email, a reminder the day after signup if you have not come back, and a notice the day before your free trial ends if you have not subscribed. At most one of each, with the same opt-out link. They do not count toward the 30-day limit.
Opting out does not affect account, support and payment emails.

Session: keeps you signed in for up to 7 days.
Language: keeps your chosen language for 1 year, including when it comes from the link you opened.
Source: keeps the campaign labels for up to 30 days and is deleted when you create an account.
Notice: remembers for 1 year that you saw the cookie notice.
Your browser also keeps Imaging choices and the progress of one quiz, only on your device.
On phones, for the invitation to install the site: how many times you came back, whether you completed an activity and when you closed the invitation. It stays on the device and is not sent to us.
We do not use third-party advertising or analytics cookies. The site is under review by Google AdSense, but it shows no ads and loads no ad scripts. This page will be updated before that changes.

ValueHost: hosts the site, the database and the server that sends email.
Google Drive: keeps a daily backup copy of the database, in a private folder, for 30 days.
Mercado Pago (Brazil and Argentina): receives the account email and order details to process the payment.
ipwho.is: receives the sign-in IP to estimate city, region and country.
MedSimulator administrators see this data to run the service. Internal notices about signups, payments and support carry the account name and email, or the request subject.
The system does not send personal data to any other recipient.

Account and linked data, support requests and the email log: while the account exists. There is no automatic deletion.
Sign-in history: the last 10 per account.
Looked-up location of an IP: 7 days.
Session: up to 7 days, or until you sign out.
Confirmation and new-password links: valid for 24 hours and 30 minutes.
Free-trial network block: for the period set in the system, 30 days by default.
Internal email notices: 90 days after sending.
Technical log of Mercado Pago notifications: the last 1,000.

The LGPD (Brazil) and Law 25.326 (Argentina) provide rights such as confirming processing, and accessing, correcting, deleting and objecting to the use of your data.
You can change your password and language and opt out of news emails yourself. For other requests, use the contact above.
You can also complain to the ANPD (Brazil) or the AAIP (Argentina).