Privacy Policy

1. What We Collect

LucidCases collects only the data necessary to deliver a personalized learning experience:

• Account data: Email address, name, authentication tokens (via Supabase Auth).
• Profile data: Training level, target exam system, specialty interest, difficulty preference, emotional readiness.
• Usage data: Simulation conversations, debrief scores, streaks, milestones, and learning progress.
• Payment data: Processed securely by Stripe. We never store credit card numbers on our servers.

2. How We Use Your Data

Your data is used to:

• Personalize clinical simulations and feedback to your training level and goals.
• Track your progress and surface insights to help you improve.
• Improve LucidCases's AI quality and educational effectiveness (using aggregated, anonymized patterns).
• Communicate with you about your account, updates, and (if opted in) educational tips.

3. AI & Conversations

Your simulation conversations are sent to Anthropic's Claude API for real-time processing. Conversations are used to generate debrief feedback and are stored in your account for progress tracking. We do not sell or share your conversations with third parties for advertising purposes.

Anthropic may process data per their own privacy policy. We recommend reviewing Anthropic's Privacy Policy.

4. Data Retention

Your account data and learning history are retained as long as your account is active. You can request deletion of your account and all associated data at any time by contacting us at privacy@lucidcases.ai. We will process deletion requests within 30 days.

5. Data Security

We use industry-standard security measures including encrypted connections (TLS/HTTPS), server-side authentication, rate limiting, and input validation. Data is stored on Supabase infrastructure with row-level security (RLS) policies ensuring users can only access their own data.

6. Third-Party Services

• Supabase: Authentication and database hosting.
• Anthropic (Claude): AI simulation engine.
• Stripe: Payment processing.
• Vercel: Application hosting and CDN.

Each provider has their own privacy practices. We only share the minimum data required for each service to function.

7. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access a copy of your personal data.
• Request correction of inaccurate data.
• Request deletion of your data.
• Object to or restrict certain processing.
• Data portability (receive your data in a machine-readable format).

Contact us at privacy@lucidcases.ai to exercise any of these rights.

8. Children's Privacy

LucidCases is designed for medical professionals and students aged 18 and older. We do not knowingly collect data from anyone under 18.

9. Changes to This Policy

We may update this policy from time to time. Significant changes will be communicated via email or in-app notification. Continued use after changes constitutes acceptance.

10. Contact

For privacy questions or concerns, contact us at privacy@lucidcases.ai.