Privacy Policy

Effective Date: March 25, 2026

Last Updated: March 25, 2026

Introduction

This Privacy Policy explains how TAATUB ("we," "our," or "us") collects, uses, and discloses your information when you use our mobile application, Pharmacy OSCE Simulator (the "App"). It also informs you about your privacy rights and our commitment to protecting your data.

We use your personal data to provide and improve the App. By using the App, you agree to the collection and use of information in accordance with this Privacy Policy.

1. Information We Collect

To provide our services, we collect the following types of information:

• Account Information: When you create an account, we collect your email address. If you sign up using Google or Apple, we may receive basic profile information from them, such as your name.
• Practice Session Data: This is the core data generated through your use of the App:
  • Conversation Transcripts: Text transcriptions of your voice conversations with AI-simulated patients. We store only text transcripts — raw audio is not stored on our servers.
  • Session Evaluations: Performance assessments, checklist results, and grades generated by AI analysis of your practice sessions.
  • English Proficiency Feedback: AI-generated corrections and suggestions for improving your spoken English, derived from session transcripts.
• Study Data:
  • Flashcards: Cards you create or save from sessions, including front text, back text, notes, and tags.
• Usage Data:
  • Session duration and frequency of use.
  • Feature usage patterns to help us improve the App.
• Preferences:
  • Your first language, preferred session duration, and usage purpose (e.g., exam preparation, coursework).
• Subscription Information:
  • Subscription plan, billing status, and entitlements, managed through RevenueCat and the Apple App Store.
• Technical Information:
  • Device Permissions: We request access to your microphone only when you begin a practice session that requires voice conversation.

2. How We Use Your Information

We use your information for the following purposes only:

• To Power the App's Features: Your data is used to facilitate real-time voice conversations with AI patients, generate session evaluations and feedback, track your practice history, and manage your flashcards.
• To Improve Our Service: We analyze usage patterns to understand which features are most helpful, fix bugs, and optimize the App's performance.
• To Communicate With You: We may send you important information about your account, security, or major updates to our service.
• We do not sell your personal data. We do not use your data for third-party advertising or share it with marketers.

3. Audio Data and Voice Processing

Your privacy regarding voice data is important to us:

• Real-Time Processing Only: When you engage in a voice practice session, your audio is streamed in real time to our AI service provider (OpenAI) for processing. The audio is used to generate the AI patient's response and to transcribe your speech into text.
• No Audio Storage: We do not store raw audio recordings on our servers. Only text transcripts of the conversation are retained in your session history.
• Text-Based AI Processing: Session transcripts and other text data may be sent to AI service providers (Google Gemini) for generating evaluations, English proficiency feedback, and other analysis features.
• AI Provider Policies: Audio and text data sent to AI providers are subject to their respective privacy policies and data handling practices. We encourage you to review these policies.

4. Data Storage and Security

• Where Your Data is Stored: Your information is stored on secure servers provided by our trusted cloud infrastructure partner, Supabase.
• Our Security Measures: We take the security of your data seriously. We use industry-standard measures for all data transmission to protect your information. Your personal data is private and accessible only by you through Row Level Security (RLS) policies enforced at the database level.
• A Note on Security: We are committed to protecting your information and take all reasonable and appropriate measures to do so. However, please remember that no method of transmission over the Internet or method of electronic storage is 100% secure and reliable. While we strive to use commercially acceptable means to protect your data, we cannot guarantee its absolute security.

5. Third-Party Services

We rely on a few trusted third-party services to provide a seamless experience:

• Supabase: Provides our secure database, cloud infrastructure, and user authentication.
• Google & Apple: Used for secure sign-in (authentication).
• OpenAI: Powers real-time voice conversations with AI-simulated patients. When you use this feature, your audio is streamed to OpenAI for processing and response generation. Audio is processed in real time and is not stored by us.
• Google Gemini: Powers text-based AI features including session evaluations, English proficiency feedback, and other analysis. Text data is processed in accordance with Google's privacy policy.
• RevenueCat: Manages our subscriptions and in-app purchases securely.
• Apple App Store & Google Play Store: Process subscription payments.

These services only receive the minimum data necessary to perform their function.

6. Data Sharing and Disclosure

We do not share your personal data, except in the following limited circumstances:

• Legal Obligation: If required by law, such as in response to a court order or other legal process.
• To Protect Safety: If we believe it's necessary to prevent harm to you, our users, or the public.
• With Your Consent: If you request technical support that requires us to access your data, we will only do so with your explicit permission.

If our company is involved in a merger, acquisition, or sale of assets, we will notify you before your personal information is transferred and becomes subject to a different privacy policy.

7. Your Rights and Choices

You are in full control of your data.

• Access and Correct: You can view and edit your personal information at any time directly within the App.
• Delete: You can delete individual practice sessions or your entire account from the App's settings.
• Control Permissions: You can manage the App's access to your microphone through your device settings.

Account Deletion: If you choose to delete your account, all of your personal data will be immediately and permanently erased from our systems. This includes all session history, flashcards, preferences, usage data, and subscription records. This action cannot be undone.

8. Data Retention

We retain your data as long as your account is active to provide you with historical tracking of your practice progress. You can delete specific sessions or your entire account at any time.

Upon account deletion, your data is not held — it is deleted immediately as described above.

9. Children's Privacy

Our App is not intended for use by children under the age of 13 (or the equivalent minimum age in your jurisdiction). We do not knowingly collect personal information from children. If you believe we have inadvertently collected such information, please contact us immediately so we can delete it.

10. Changes to This Policy

We may update this Privacy Policy from time to time. If we make significant changes, we will notify you through a notice within the App. Your continued use of the App after any changes constitutes your acceptance of the new policy.

11. Contact Us

If you have any questions about this Privacy Policy or your data, please email us at:

pharmacy.osce.app@gmail.com

For account deletion, please use the self-service option in the App's settings. If you encounter any issues, feel free to contact us at the email above.

12. Regional Privacy Rights

We comply with applicable privacy laws in the jurisdictions where we operate.

• For Users in the European Economic Area (EEA) / GDPR: You have the right to access your data, request corrections, request deletion, object to processing, and request data portability.
• For Users in California / CCPA: You have the right to know what personal information we collect and how it's used, and to request the deletion of your personal information.

If you wish to exercise any of these rights, please contact us at: pharmacy.osce.app@gmail.com