Privacy Policy

Last Updated: November 2024

1. Introduction

MI Mastery ("we," "us," "our," or "Company") respects your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile and web application (the "Service").

1.5. Healthcare Disclaimer

IMPORTANT: MI Mastery is an educational and practice tool, NOT a medical or clinical service. The Service:

  • Does not provide medical, clinical, or therapeutic advice.
  • Is NOT HIPAA-compliant and is NOT designed for Protected Health Information (PHI).
  • Must NOT be used with real patient data or identifiable health information.
  • Uses AI-generated feedback that may contain errors and is for practice purposes only.

By using this Service, you acknowledge that you will NOT enter any real patient data, PHI, or identifiable health information. Any such data entered is at your own risk and violates our Terms of Service.

2. Information We Collect

We collect information in the following ways:

  • Account Information: Email, password, age confirmation.
  • Profile Data: Subscription tier, tier acceptance timestamps, created and updated dates.
  • Session Data: Practice sessions, feedback, transcripts, and timestamps. This is training data only and not medical records. You must NOT enter real patient data or Protected Health Information (PHI).
  • Billing Information: Name, address, billing email, processed by Stripe (our payment processor).
  • Usage Data: App interactions, features accessed, timestamps.
  • Device & Technical Data: IP address, browser type, device type, operating system.

3. How We Use Your Information

We use your information for:

  • Providing and improving the Service.
  • Processing subscriptions and payments.
  • Sending service updates and customer support responses.
  • Compliance with legal obligations.
  • Fraud prevention and abuse detection.

4. Data Sharing

We share your data only as necessary:

  • Stripe: Payment processor; they handle billing and subscription management.
  • Supabase: Backend provider; manages authentication and data storage.
  • Google Gemini AI: Processes practice session text to generate AI patient responses and feedback (no personal identifiers sent). Note: AI-generated feedback is for practice purposes only and may contain errors or inaccuracies. It is not a substitute for feedback from qualified MI trainers or supervisors.
  • Legal Requirement: We may disclose data if required by law or to protect rights/safety.

5. Data Retention

We retain your personal data and session data for the duration of your account. Upon account deletion (see Account Rights below), we delete or anonymize your data within 30 days, except where retention is required by law.

6. Security

We implement industry-standard security measures (encryption in transit via HTTPS, secure password handling via Supabase Auth). However, no transmission over the internet is 100% secure. We cannot guarantee absolute security.

7. Your Privacy Rights

  • GDPR (EU/UK): Right to access, rectify, erase, restrict, port, and object to processing. See Account Rights below.
  • CCPA (California): Right to know, delete, opt-out of sale. Contact us for requests.
  • Worldwide: You may request a copy of your data or account deletion anytime.

8. Cookies

We use cookies and similar technologies for authentication, preferences, and analytics. You can manage cookie preferences via our Cookie Consent banner. Essential cookies cannot be disabled as they are required for the Service to function.

9. Third-Party Links

The Service may contain links to third-party websites. We are not responsible for their privacy practices. Please review their policies before sharing information.

10. Children

The Service is intended for users 18 years of age or older. We do not knowingly collect information from children under 18. If we become aware of such collection, we will delete it immediately.

11. Policy Changes

We may update this policy periodically. Continued use of the Service after changes constitutes acceptance. Significant changes will prompt notification.

12. Contact Us

For privacy questions or data requests, contact us at: support@mimastery.com