Privacy Policy

This Privacy Policy explains how Sim Tec MD Inc. (“we,” “us,” “our”), which operates Med Valley AI (the “Service”), collects, uses, shares, and protects your personal information. We are based in Alberta, Canada. By using the Service you agree to this Policy, which should be read together with our Terms of Service.

1. Information we collect

• Account information — your name, email address, and password when you register (or basic profile data from Google if you sign in with Google).
• Profile information — optional details you add, such as your school/institution, training level, and country/curriculum.
• Learning and usage data — the cases you complete, your typed and (if you enable voice) spoken responses, scores, ratings, streaks, feedback, and the knowledge-graph data we build to personalize your training.
• Billing information — your subscription status and history. Payments are processed by Stripe; we do not store your full card number.
• Communications — messages you send us (support chat, email, feedback) and email engagement (e.g. whether you opened or unsubscribed).
• Technical data — IP address, device/browser information, and diagnostic/error data, collected to operate, secure, and debug the Service.

2. How we use your information

• to provide, personalize, and adapt your training and track your progress;
• to create and manage your account, process your subscription, and provide support;
• to protect the Service — preventing abuse, fraud, and excessive automated usage, and monitoring for errors;
• to improve and develop the Service and our content; and
• to send you transactional emails (e.g. account, billing, trial status) and, where permitted, product and marketing emails you can unsubscribe from at any time.

Our legal bases for processing (where applicable, e.g. under GDPR) include performing our contract with you, your consent (which you may withdraw), and our legitimate interests in operating and securing the Service.

3. Service providers and sharing

We do not sell your personal information. We share it only with service providers who process it on our behalf to run the Service, under appropriate safeguards:

• Google Firebase — authentication, database, hosting, and abuse prevention (reCAPTCHA);
• OpenAI — AI processing of case generation, the simulated patient, and grading (your relevant inputs are sent to generate responses);
• Neo4j (Aura) — storage of your learning knowledge-graph;
• Stripe — payment processing;
• Resend — sending and receiving email;
• Sentry — error and performance monitoring.

These providers may process data in the United States or other countries. When personal information is transferred outside your country, we rely on appropriate legal mechanisms for that transfer. We may also disclose information if required by law or to protect our rights, users, or the public.

4. Data retention

We keep your information for as long as your account is active and as needed to provide the Service, comply with legal obligations, resolve disputes, and enforce our agreements. When you delete your account, we delete or de-identify your personal information within a reasonable period, except where retention is required by law.

5. Your rights and choices

Depending on your location (including under Canada’s PIPEDA and, if applicable, the EU/UK GDPR), you have rights to:

• access the personal information we hold about you and request a copy (portability);
• correct inaccurate information (much of which you can edit in your profile);
• delete your account and personal information;
• withdraw consent or object to certain processing; and
• unsubscribe from marketing emails at any time via the link in every email.

To exercise any of these rights, including account deletion or a data export, email us at support@info.medvalley.ai and we will respond within a reasonable time. You may also lodge a complaint with your local data-protection authority.

6. Security

We use industry-standard measures — including encryption in transit, access controls, and reputable infrastructure providers — to protect your information. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

7. Cookies and similar technologies

We use cookies and similar technologies (including browser storage) that are necessary to run the Service — for example, to keep you signed in and remember your preferences. Our abuse-prevention (Google reCAPTCHA) and error-monitoring tools may also set or read limited technical data. We do not use advertising cookies. If we introduce non-essential analytics, we will update this Policy and, where required, ask for your consent.

8. Children

The Service is intended for medical students, trainees, and professionals who are adults. It is not directed to children, and we do not knowingly collect personal information from anyone under the age of majority.

9. Changes to this Policy

We may update this Policy from time to time. We will change the “Last updated” date above and, for material changes, provide additional notice where appropriate.

10. Contact us

For any privacy question or request, contact us at support@info.medvalley.ai.
Sim Tec MD Inc., 223048 Township Rd 84, Lethbridge County, Alberta, Canada, T1J 5R6.