Privacy policy

Who processes your data

The processing described here is carried out by the publisher of Simunara, which is responsible for the platform available at simunara.com. For any question about your personal data, there is a single address: contact@simunara.com.

Data we collect

We follow a simple principle: nothing is collected without an identified use.

Sign in with Google

You can sign in to Simunara with your Google account. In that case, we only ask for the following minimal permissions:

• openid: the unique, stable identifier of your Google account, which lets us recognise you from one session to the next.
• email: your email address and its verification status, which identify your Simunara account.
• profile: your first name, last name and profile photo, to prefill your profile and personalise the interface.

Google sends us this information when you sign in, after your explicit consent on the Google authorisation screen. We access no other service of your Google account: not Gmail, Drive, Calendar or Contacts, nor any data beyond the three permissions listed above.

We never receive your Google password. We do not store any long-lived Google access token: the token received is used to verify your identity when you sign in, then Simunara issues its own session.

Why we use it

• Create your account, authenticate you and secure your sessions.
• Give you access to the scenarios that match your role and level.
• Record your progress and produce your debriefs and statistics.
• Let your professor follow their cohort’s progress, within the scope of their institution.
• Let your institution’s administrators, if it is a Simunara customer, manage its accounts and cohorts and view results (gradebook, analytics).
• Handle your access request and send you the emails the service needs (address verification, password reset, invitation).
• Give you your free cases and one more patient for each friend who joins you, collect your opinion to improve the platform, and tell you when the pass opens if you asked to be told.
• Keep the platform running: incident diagnosis, abuse prevention, limits on sign-in attempts.
• Protect the learning content from being copied and shared. Screenshots, printing and page inspection are blocked as far as the browser allows; each attempt detected on a signed-in account is recorded and reported to the Simunara team, and to it alone. The different cases an account opens during the day are counted: well beyond what a day of work calls for, the Simunara team is alerted and opening new cases resumes the next day.
• Measure visits to the site and the platform, anonymously, to improve them (see Cookies and local storage).

We do not use your data for advertising. We never resell data. Simulation scores are calculated automatically (see Artificial intelligence and voice): they are learning benchmarks. If your institution uses them in its gradebook, any decision about you (pass, progression) is still made by its teaching staff, never by Simunara.

Artificial intelligence and voice

Several Simunara features rely on artificial intelligence models:

• The simulated patient: it answers you, in writing or by voice, following the scenario written by your professor.
• Transcription: what you say to the patient, or the case you dictate, is converted into text.
• Marking: your written reasoning, and in a case played at a pharmacy counter the advice you give the patient during the conversation, is analysed for part of the score; the rest of the score applies the scenario’s rules.
• The debrief and the coach: comments on your decisions are written from your simulation.
• Case images and films: they are generated from the scenario, lines and voices included, never from your data.

The providers of these models receive the case content and your answers, written or spoken. They receive neither your name, nor your email address, nor your institution. They act on our instructions (see Data sharing).

Spoken consultations. Your browser asks your permission to use the microphone. During the consultation, the microphone stays on and your voice is sent in real time to be transcribed and to let the patient answer you; it turns off when you leave the room. The written transcript is kept with your session; Simunara does not keep the audio recording. If you refuse the microphone, the consultation continues in writing.

Case dictation. A teacher can describe a case out loud instead of typing it. The microphone only turns on when they click and turns off when they finish, or by itself after a minute of silence. Their voice is sent in real time to be transcribed; only the text, which they review and correct, is used to create the case. Simunara does not keep the audio recording.

An artificial intelligence can make mistakes. A score or comment that seems wrong to you can be reported to your professor or to contact@simunara.com: a person then reviews it.

Legal basis for processing

• Performance of the service: account, profile, affiliation, learning activity and voice data are needed to provide the platform you ask for.
• Consent: signing in with Google and sending the contact form rely on your voluntary action, which you can withdraw at any time.
• Legitimate interest: technical logs and anti-abuse measures protect the platform and its users; content protection keeps the learning cases from being shared outside the platform; anonymous audience measurement helps improve the site and the service.
• Legal obligation: where applicable, to respond to a request from a competent authority.

Data sharing

Your data is never sold. It is shared in only three cases:

• Within your institution: a professor sees the progress of students linked to their scenarios or institution. If your institution is a Simunara customer, its administrators also see enrolment, cohorts, the gradebook and monitoring indicators. No one sees your password, or your data from another institution.
• Technical service providers, who act on our instructions, only for the purposes described here, with no right to use your data for their own purposes:
  • hosting of the platform and its data;
  • sending of service emails;
  • artificial intelligence models: text, voice and transcription, case images;
  • storage and delivery of case media;
  • sign-in with Google, if you choose it.
  The list of our providers by name is available on request from contact@simunara.com.
• Legal obligation: on a formal request from a competent authority, within the limits of the applicable law.

Several of these providers are based in the United States. These transfers rely on appropriate safeguards: European Commission standard contractual clauses or certification under the EU-US Data Privacy Framework.

Retention period

• Account and profile: for as long as your account is active, then deleted within 30 days of your deletion request.
• Learning activity, including consultation transcripts: kept for as long as you have access, then anonymised or deleted with the account.
• Audio recordings: never kept by Simunara.
• Active session: 6 hours, held in memory while the page is open.
• Session cookie: 7 days at most, revoked immediately when you sign out.
• Access requests that did not go ahead: 12 months at most.
• Technical logs: 12 months at most.
• Blocked capture attempts: 6 months, then deleted automatically.
• Count of cases opened during the day: 2 days, then deleted automatically.
• Audience statistics: daily totals, with no personal data, kept for 25 months.

Security

• Encrypted exchanges between your browser and the platform, on every page.
• Passwords never stored in readable form: only an irreversible fingerprint is kept.
• Time-limited sessions, renewed regularly, with detection of stolen sessions.
• Session cookie inaccessible to the page’s scripts.
• Limits on the number of sign-in and password reset attempts.
• Separation of rights: a student only reads published scenarios, a professor only edits their own.

No system is infallible. In the event of a data breach likely to put your rights at risk, we will inform you and the competent authority within the time limits set by the applicable regulations.

Your rights

You have the following rights at all times:

• Access: obtain a copy of the data we hold about you.
• Rectification: correct inaccurate information, directly from your profile or on request.
• Erasure: ask for your account and its data to be deleted.
• Restriction and objection: ask for processing based on our legitimate interest to be suspended.
• Portability: receive your data in a structured, machine-readable format.
• Withdrawal of consent: with no retroactive effect on processing already carried out.

To exercise these rights, write to contact@simunara.com. We reply within one month at most. If you are not satisfied with the answer, you can contact the data protection authority of your country of residence.

Cookies and local storage

Simunara uses no advertising cookies and no third-party trackers. Only the mechanisms strictly needed for the service to work are used:

• Session cookie: it saves you from signing in again on every visit and stays inaccessible to the page’s scripts. Your active session itself stays in memory while the page is open and is never saved in the browser.
• Language cookie: if you choose the interface language (French or English), it remembers it for 12 months across the site and the platform. It holds nothing but that choice. When you are signed in, your choice is also saved in your profile, for your other devices and for the language of our emails.
• Browser local storage: your display preferences, your email address if you tick “Remember me”, the tracking code of your access request, scenario drafts in progress, the level of your voice on the microphone (to tell it from the noise around you) and, if you ask for it, your refusal to be counted in audience measurement. This information stays on your device and is not sent to us.

Audience measurement. Simunara counts its own visits, with no cookie, no identifier and nothing saved in your browser. Each page view is added to a daily total; your IP address is not kept and no third-party service is involved. If your browser signals that you refuse tracking, nothing is counted. You can also object here, at any time:

Everything our pages display, fonts included, is served by the platform or by our providers: no third-party service receives your IP address for its own purposes.

Clearing Simunara’s cookies signs you out and forgets the chosen language. Clearing local storage erases your preferences, the remembered address and unpublished drafts.

Minors

Simunara is intended for people in higher education in health or in professional practice. The platform is not meant for people under 16 and we do not knowingly collect their data. If you find that an account has been created for a minor under 16, let us know: it will be deleted.

Changes to this policy

This policy may change as the platform evolves. The date of the last update appears at the top of the page. In the event of a substantial change affecting your rights or the purposes of processing, we will inform you by email or by a message visible in the application before it takes effect.

Contact us

Questions, requests to exercise your rights, incident reports: one address, contact@simunara.com.

See also our terms of use.