Privacy Policy

1. Introduction

MI Mastery (the "Service") is operated by Gliance Dev LLC, a California limited liability company ("we," "us," or "our"). Gliance Dev LLC is the data controller responsible for your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the Service.

1.5. Healthcare Disclaimer

IMPORTANT: MI Mastery is an educational and practice tool, NOT a medical or clinical service. The Service:

• Does not provide medical, clinical, or therapeutic advice.
• Is NOT HIPAA-compliant and is NOT designed for Protected Health Information (PHI).
• Must NOT be used with real patient data or identifiable health information.
• Uses AI-generated feedback that may contain errors and is for practice purposes only.

By using this Service, you acknowledge that you will NOT enter any real patient data, PHI, or identifiable health information. Any such data entered is at your own risk and violates our Terms of Service.

2. Information We Collect

We collect information in the following ways:

• Account Information: Email, password, age confirmation. If you sign in with Google, Google shares your name, email address, and profile picture with us instead of a password; we store the name and email.
• Profile Data: Subscription tier, Terms acceptance timestamps and the version accepted, created and updated dates.
• Session Data: Practice sessions, feedback, transcripts, and timestamps. This is training data only and not medical records. You must NOT enter real patient data or Protected Health Information (PHI).
• Voice Practice: If you use voice mode, your microphone audio is streamed to our AI provider so the simulated patient can respond in real time. We keep the resulting transcript with your session; we do not store the audio recording.
• Billing Information: Name, address, billing email, processed by Stripe (our payment processor).
• Usage Data: App interactions, features accessed, timestamps. If you accept analytics cookies, we also count a small set of product events (such as sign-up, session completion, and purchase) without transcript content, and record visits to our public pages (the home page, About, and Guides): which pages were viewed, the site that referred the visit, and interactions such as scrolling and following a link.
• Device & Technical Data: IP address, browser type, device type, operating system.
• Records of Agreement: When you accept our Terms of Service (and, when you sign up, this Privacy Policy), we record your account ID and email address, which version you accepted, when it was accepted (by our server's clock and your device's), and the IP address and browser you used.

3. How We Use Your Information

We use your information for:

• Providing and improving the Service.
• Processing subscriptions and payments.
• Sending service updates and customer support responses.
• Compliance with legal obligations.
• Fraud prevention and abuse detection.
• Keeping records of your agreement to our Terms, to resolve any dispute about it.

4. Data Sharing

We do not sell your personal information. We share your data only with the service providers needed to run the Service, and only as necessary:

• Stripe: Payment processor; they handle billing and subscription management.
• Google (Firebase and Google Cloud): Backend provider; manages authentication, data storage, and hosting, and sends account emails such as address verification and password reset. If you accept analytics cookies, Google Analytics also receives the product events and public-page visits described above.
• Google Gemini AI: Processes your practice session content — the text you type and, in voice mode, your audio — to generate AI patient responses and feedback. We do not include your name or email address with that content. Note: AI-generated feedback is for practice purposes only and may contain errors or inaccuracies. It is not a substitute for feedback from qualified MI trainers or supervisors.
• Resend: Email delivery provider; delivers operational messages, such as routing feedback you submit to our team.
• Legal Requirement: We may disclose data if required by law or to protect rights/safety.

5. Data Retention

We retain your personal data and session data for the duration of your account. Billing records held by Stripe are kept for as long as tax and accounting law requires. Upon account deletion (see Your Account Rights below), we delete or anonymize your data within 30 days, except where retention is required by law. Records of Agreement (see section 2) are kept for 4 years after your account is deleted, to resolve any dispute about the agreement, and are then deleted. To stop the free allowance being reset by deleting and re-creating an account, we keep a one-way hash of your email address and that month's usage counts until the month ends (at most 30 days), then delete them.

6. Security

We implement industry-standard security measures (encryption in transit via HTTPS, encryption at rest through Google Cloud's default encryption for stored data, secure password handling via Firebase Authentication). However, no transmission over the internet is 100% secure. We cannot guarantee absolute security.

7. Your Privacy Rights

• GDPR (EU/UK): Right to access, rectify, erase, restrict, port, and object to processing. See Your Account Rights below.
• CCPA (California): Right to know, correct, and delete. We do not sell or share your personal information for advertising, so there is nothing to opt out of.
• Worldwide: You may request a copy of your data or account deletion anytime.

7.5. Your Account Rights

You can exercise these rights wherever you live, at no charge:

• Delete your account: Choose Settings → Delete Account and confirm your password. Your profile, practice sessions, and transcripts are deleted immediately and any active subscription is cancelled. Records of your agreement to our Terms are kept for 4 years (see Data Retention). You can also email support@mimastery.com from the address on your account, and we complete the same deletion within 30 days.
• Get a copy of your data, or correct it: Email support@mimastery.com from the address on your account. We respond within 30 days.
• Withdraw analytics consent: Change your choice at any time from our Cookie Policy page.

We may ask you to confirm the request from your account email so that nobody else can delete or obtain your data.

8. Cookies

We use cookies and similar technologies for authentication, preferences, and analytics. You can manage cookie preferences via our Cookie Consent banner or, at any time afterwards, from our Cookie Policy page. Essential cookies cannot be disabled as they are required for the Service to function.

9. Third-Party Links

The Service may contain links to third-party websites. We are not responsible for their privacy practices. Please review their policies before sharing information.

10. Children

The Service is intended for users 18 years of age or older. We do not knowingly collect information from children under 18. If we become aware of such collection, we will delete it immediately.

11. Policy Changes

We may update this policy periodically. Continued use of the Service after changes constitutes acceptance. Significant changes will prompt notification.

12. Contact Us

The data controller is Gliance Dev LLC, a California limited liability company. For privacy questions or data requests, contact us at: support@mimastery.com. Formal requests under the GDPR, CCPA, or other privacy laws may be sent to legal@mimastery.com.