隐私政策

我们收集的信息

• 账户数据，包括电子邮箱、密码哈希，以及用于关联应用内购的账户令牌。
• 个人资料输入，例如你保存的表现洞察指引。
• 学习活动与内容，包括测验答案、成绩、评分表、对话记录、提交的 AI 提示与生成内容。
• 上传与文档，包括你上传的文件、文件元数据、提取文本、OCR 文本、摘要与生成的学习素材。
• 设备与使用数据，例如会话 Cookie、IP 地址、用户代理、请求 ID、错误日志、使用遥测与通知设备令牌。
• 来自 Stripe 与应用商店的支付与订阅标识（例如客户、订阅与交易 ID）。我们不保存完整卡号。

我们如何使用信息

• 提供服务、验证会话、管理订阅与权限。
• 生成学习内容、反馈与表现洞察。
• 启用语音对话并保存相关记录用于回顾与评分。
• 发送欢迎与重置密码等事务与支持邮件。
• 监控可靠性、诊断问题并防止滥用。

我们如何共享信息

我们会与帮助运营 OSCELab 的服务提供商共享数据，包括：

• 支付处理商（Stripe 与应用商店）。
• AI 与语音服务提供商（OpenAI、DeepSeek、Retell、Vapi、ElevenLabs），用于处理提示、记录与语音交互。在语音对话期间，您的麦克风音频会实时传输给我们的语音服务提供商（ElevenLabs，使用 LiveKit 实时音频传输），以生成模拟患者的回复。
• 邮件发送服务商，用于账户与支持沟通。
• 托管与安全基础设施提供商。

如法律要求或为保护服务安全与完整性，我们也可能共享信息。

敏感信息

OSCELab 用于学习与备考，请避免提交真实病人身份信息。如你选择输入或上传敏感信息，这些内容将作为学习活动的一部分被处理与保存。

数据保留与选择

我们会在你的账户活跃期间或为提供服务、履行法律义务与解决争议所需期间保留信息。你可以在设备设置中更新资料并控制通知权限。你可以在 OSCELab 的个人资料页删除账户。如需访问或更正请求，请联系 [email protected]。

Our legal basis (UK/EU users)

Where the UK or EU GDPR applies, we process your information to perform our contract with you (providing the service, marking, feedback and managing your plan), for our legitimate interests (keeping the platform reliable, secure and continually improved), with your consent (for example, optional analytics cookies and voice recording), and to comply with our legal obligations. Where processing is based on consent, you can withdraw it at any time.

International data transfers

We operate from Australia and use service providers located overseas, including in the United States (for example OpenAI, Retell, Vapi, ElevenLabs, LiveKit, Stripe, Sentry, and our hosting and email providers), the European Union (our product-analytics provider, PostHog), and — for some AI text processing — in China (DeepSeek). This means your information may be transferred to, stored in, or processed in countries whose data-protection laws differ from your own. Where required, we put appropriate safeguards (such as standard contractual clauses) in place for these transfers. If you would prefer your data not be processed by a particular provider, contact us before using the related feature.

Voice recordings

Voice-based simulated patients need access to your microphone. When you start a voice conversation, your audio is streamed in real time to our voice provider to generate responses, and a transcript is stored as part of your learning activity for review and scoring. By starting a voice conversation you consent to this processing. You can use the rest of OSCELab without voice features.

Cookies and similar technologies

We use cookies and similar technologies that are strictly necessary to run the service (for example, to keep you signed in and to keep the site secure). We also use limited analytics and error-reporting telemetry to understand reliability and improve OSCELab. Where the law requires consent for non-essential cookies, we ask for it through our cookie banner, and you can change your choice at any time. You can also block or delete cookies in your browser settings, although some features may stop working as a result.

How we protect information

We use reasonable technical and organisational measures to protect your information, including encryption in transit, access controls, and reputable infrastructure providers. No method of transmission or storage is completely secure, so we can't guarantee absolute security. If we become aware of a data breach likely to cause serious harm, we will notify affected users and the relevant regulator as required by law, including under the Australian Notifiable Data Breaches scheme.

Your privacy rights

Depending on where you live, you may have rights to access, correct, update, export, or delete your personal information, to object to or restrict certain processing, and to withdraw consent. You can update your profile and delete your account from the Profile page in OSCELab. To make any other request, email us at [email protected] and we will respond within the time the law requires. If you are in Australia and aren't satisfied with our response, you can complain to the Office of the Australian Information Commissioner (oaic.gov.au); in the UK, to the Information Commissioner's Office (ico.org.uk); in the EU, to your local data-protection authority.

Children and young people

OSCELab is intended for users aged 18 and over. If you are under 18, you may only use OSCELab with the involvement and consent of a parent or guardian who agrees to our Terms on your behalf. We do not knowingly collect personal information from children under 13. If you believe a child has given us personal information without appropriate consent, contact us and we will delete it.

联系

如对隐私有疑问，请发送邮件至 [email protected]。