Privacy and cookie policy

Data controller

The data controller is Riccardo Binco. For any request about your data, write to ragionamentoclinico@gmail.com.

What data we process

• Account data, if you sign in with Google: name, email address, profile picture and the identifier Google assigns to your account. We never receive or store your Google password.
• Simulator usage: the cases you open, the exams and manoeuvres you request, the diagnoses you propose, your scores, day streaks and attempt history.
• The questions you type or dictate to the virtual patient and its answers.
• Technical data needed to run the site: a random identifier for visitors without an account, your chosen language, when you last downloaded your data (to limit repeated requests), and the data every web request carries (IP address, browser type), processed by the hosting provider for security and abuse prevention.

Why we process it and on what legal basis

We do not use your data for advertising, we do not sell it and we do not build commercial profiles.

• To provide the service (account, exercises, scores, progress): performance of the contract with you, i.e. your acceptance of the Terms of use (Art. 6(1)(b) GDPR).
• To protect the service from abuse, fraud and unauthorised access, and to limit excessive use: legitimate interest (Art. 6(1)(f) GDPR).
• To meet legal obligations, where they apply (Art. 6(1)(c) GDPR).

The interview with the virtual patient

Your questions to the patient reach our servers. For subscribers the answers are generated by a language model run by Cloudflare (Workers AI); for other users by a keyword engine on our server. For subscribers the conversation is kept with the exercise for 30 days, then deleted; for other users the server does not keep it, it stays only in your browser (see below).

The patient is fictional: do not type your own personal data, or data about real people, or health information about real patients into the interview.

Voice dictation

If you use the button to dictate a question, speech recognition is done by your browser, not by our site. Some browsers, such as Google Chrome, send the audio to their maker's servers to transcribe it, under that company's privacy policy. If you prefer not to, type the question instead. The patient's voice is synthesised locally by the browser.

Who we share data with

Data is processed on our behalf, only to provide the service, by these providers:

• Cloudflare, Inc.: hosting of the site, database, image storage and the interview language model.
• Google LLC: sign-in with your Google account, only if you use it.

Transfers outside the European Union

Cloudflare and Google may also process data in the United States. Both participate in the EU-U.S. Data Privacy Framework and use the European Commission's standard contractual clauses.

How long we keep data

• Sign-in session: 30 days from your last visit, or until you sign out.
• The log of each exercise, including the conversation with the patient for subscribers: 30 days. Once deleted it stays in the automatic database backups for at most 30 more days, then it can no longer be recovered.
• Account, progress and attempt history: as long as the account exists. If you delete the account from Settings we erase them immediately; if you ask us by email, within 30 days. Once deleted they stay in the automatic database backups for at most 30 more days, then they can no longer be recovered.
• Identifier for visitors without an account and language preference: 12 months in your browser.

Cookies and browser storage

The site only uses technical cookies, needed for it to work. The law does not require consent for these, which is why there is no banner. We use no profiling, analytics or third-party cookies.

• session: keeps you signed in (30 days).
• anon: random identifier for visitors without an account, for the daily case and usage limits (12 months).
• lang: your chosen language (12 months).
• Two temporary cookies during Google sign-in, to protect it against attacks (10 minutes).
• In the browser tab storage (sessionStorage) we keep the exercise in progress, so it survives a page reload. It is cleared when you close the tab.
• In the browser storage (localStorage) we keep, for each exercise, the interview, your notes and the vital signs you saw, so you find them again in another tab or after closing the browser. This copy stays in the browser: we do not send it to our servers. After 30 days without use we delete it on your next visit; if you use an account, we also delete it when you sign out. You can delete it at any time from your browser settings.

Your rights

You can ask at any time to access your data, correct it, delete it (including the whole account), restrict its processing, receive it in a readable format (portability) and object to processing based on legitimate interest. Write to ragionamentoclinico@gmail.com: we reply within 30 days. With an account you can also download your data and delete the account yourself, from Settings.

If you believe the processing breaks the law, you can lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali, www.garanteprivacy.it) or the authority of the country where you live.

Minimum age

The service is meant for students and healthcare professionals. You must be at least 14 to create an account.

Security

Connections are encrypted (HTTPS). Of each session we store only a fingerprint (hash), from which the access code cannot be recovered, and an exercise's data is accessible only to whoever started it.

Changes

If we change this policy we update the date at the bottom of the page; for significant changes we notify registered users.