Privacy Policy

1. Introduction

Interactive Cases ("we", "us", or "our") is dedicated to protecting your privacy and ensuring transparency about how your data is collected, stored, and utilized. This Privacy Policy governs your use of the Interactive Cases website (https://www.interactive-cases.com) and the Interactive Cases Android mobile application (package: com.interactivecases.app).

By registering, accessing, or using our platform, you acknowledge and agree to the practices described in this Privacy Policy.

2. Data We Collect

We collect only the minimum necessary information required to provide, secure, and personalize our educational simulation platform:

A. Account & Profile Information

• Email Address: Used as your unique account identifier, for authentication, password resets, and critical account security notices.
• Full Name / Display Name: Displayed on your profile, completion certificates, and leaderboard if opted in.
• Authentication Credentials: Passwords are cryptographically hashed using salted bcrypt before storage; we never store or have access to raw plaintext passwords.
• Optional Professional Details: Medical school/university, graduation year, country, and clinical specialty interests provided voluntarily to customize recommended cases.

B. Simulation & Educational Analytics

• Simulation Progress: Case completions, choices selected, diagnostic hypotheses, score breakdowns, feedback logs, streak counts, and clinical experience points (XP).
• Community & Discussion: Comments, study group participation, and user-generated case submissions you choose to publish.

C. Device & Technical Telemetry

• Log Data: IP address, device model, operating system version, browser type, and diagnostic error logs collected strictly to maintain platform stability and detect unauthorized access.
• Push Notification Tokens: If you grant permission, a device token is stored to deliver study reminders and group notifications. You can revoke this permission at any time in device settings.

D. No Real Patient Health Information (PHI)

Interactive Cases does not request, collect, or store any real protected health information (PHI) or personal medical records. Users must never upload or submit real patient identifiers or records to our platform.

3. How We Use Your Data

Your information is used strictly for legitimate educational, operational, and security purposes:

• Authenticating and managing your account across web and mobile devices.
• Delivering interactive medical simulations, adaptive feedback, and AI-driven attending reviews.
• Calculating clinical mastery scores, rankings, and issuing digital completion certificates.
• Enforcing platform integrity, anti-abuse mechanisms, and rate limits.
• Providing responsive technical and customer support.

4. Data Sharing & Third Parties

We do not sell, rent, or monetize your personal data. We share information only with trusted infrastructure and service providers bound by strict confidentiality and security requirements:

• Cloud Infrastructure: Amazon Web Services (AWS) for secure database and backend hosting in encrypted, hardened environments.
• Authentication Providers: Google Identity Services (Google OAuth) if you choose to sign in using your Google account.
• Payment Gateways (Web Only): PCI-DSS compliant processors (Stripe / Paymob). Sensitive payment card details are transmitted directly to the payment processor and never touch our servers.

5. Security of Your Data

We implement defense-in-depth technical safeguards:

• All network communications are encrypted in transit via TLS 1.3 / HTTPS.
• Authentication uses short-lived, cryptographically signed JSON Web Tokens (JWT) and secure HTTP-only cookies.
• Databases are hosted in isolated virtual private clouds with automated daily backups and restricted administrative access.

6. Account Deletion & User Rights (Google Play & GDPR Compliant)

You maintain full ownership and control over your personal data:

• In-App Account Deletion: You can permanently delete your account directly inside the mobile app or web platform by visiting Profile → Account Settings → Delete Account.
• Public Web Deletion Portal: If you have uninstalled the app or cannot log in, you can request full account and data deletion via our public deletion page: https://www.interactive-cases.com/delete-account.

What Happens Upon Account Deletion:

• Your personal identifiers (name, email, profile picture, social links) are immediately wiped and anonymized.
• All active authentication tokens, sessions, and cookies are revoked across all devices.
• Device push notification tokens are permanently removed.
• Any active recurring subscription records are marked cancelled.
• Where required by applicable law, tax regulations, or financial auditing standards, anonymized transaction and invoice records may be retained in accordance with statutory retention requirements.
• Associated database backup archives are purged within our standard 30-day retention cycle.

7. Children's Privacy

Interactive Cases is designed for adult medical students, physicians, and healthcare trainees. We do not knowingly solicit or collect data from children under 13 (or under 16 in certain jurisdictions). If we discover that personal information has been collected from a child without parental consent, we will promptly delete such records.

8. Policy Updates

We may update this Privacy Policy from time to time to reflect platform enhancements or regulatory changes. Material changes will be accompanied by an updated effective date and a notice within the platform.

9. Contact & Data Protection Officer

For questions, data access requests, or privacy concerns, please contact our support team: