Legal
Privacy Policy
This Privacy Policy explains what information the Service collects, how we use it, and who we share it with. It applies to the free pilot of the Service.
1. Summary
- The Service is an exam-preparation tool. It is designed to receive de-identified case information only, and we ask you to attest to that at every upload.
- We do not want, and ask you not to provide, Protected Health Information (PHI). Because we hold only de-identified data, we are not a HIPAA covered entity or business associate.
- We use a small number of third-party processors to run the Service (hosting, database, voice AI, sign-in).
2. Information we collect
2.1 Account information. When you sign in with Google, we receive your name, email address, and Google account identifier. We use this to create and secure your account.
2.2 Case content you provide. The de-identified clinical details of the case you upload or enter. You agree under the Pilot Participation Agreement and De-Identification Attestation that this content is de-identified.
2.3 Practice-session data. When you run a mock-oral session, we process the audio of the session and a text transcript so the AI examiner can question you and produce a scorecard. We may retain the transcript and session results associated with your account.
2.4 Usage and device data. Basic logs such as access times, pages used, approximate session length, and error events, used to operate and improve the Service.
2.5 We do not knowingly collect PHI. If you provide information that is not de-identified, you do so in breach of the Pilot Participation Agreement. If we learn that PHI was provided, we may delete it.
3. How we use information
- To provide, operate, and secure the Service.
- To run mock-oral sessions and generate scorecards and practice feedback.
- To select which of your cases to present.
- To debug, monitor, and improve the Service.
- To communicate with you about the pilot.
- To comply with law and enforce our agreements.
We do not sell your personal information. We do not use your case content to train third-party foundation models outside the operation of the Service.
4. Third-party processors
We use reputable third-party providers to operate the Service — for hosting, data storage, authentication, and voice AI. We share only the data each provider needs to perform its function, under their terms and security commitments. Each maintains its own privacy and security practices, which we do not control and are not responsible for.
5. Data retention and deletion
We retain your account and case content for as long as your account is active or as needed to operate the pilot. You may request deletion of your account and case content by emailing hello@obmob.ai. We will delete or de-associate your content within a reasonable period, except where we must retain limited records to comply with law or resolve disputes. Backups are purged on our normal cycle.
6. Security
We use reasonable administrative and technical safeguards, including access controls and row-level data isolation so that you can access only your own content. No system is perfectly secure. Because the Service is designed to hold only de-identified data, the privacy impact of any incident is reduced by design.
7. Your choices
- You can stop using the Service at any time.
- You can request access to or deletion of your account data by contacting us.
- Depending on where you live, you may have additional rights under your local privacy law. Contact us to exercise them.
8. Children
The Service is for licensed physicians and is not directed to anyone under 18. We do not knowingly collect information from children.
9. Changes
We may update this Policy. If we make a material change, we will notify pilot participants by email or in the Service. Continued use after the effective date of a change means you accept it.
10. Contact
Questions about this Policy or your data: hello@obmob.ai, ObMob LLC.