Version of October 19, 2026
In short
- Ausca is a study tool for practising clinical reasoning and patient interviews with fictional patients. Never enter information about real patients.
- You can use Ausca without an account. Your progress then stays in your browser and we receive nothing, except anonymous error reports you choose to send us.
- With an account, we keep only what is needed to run the service. Our main data is hosted in Canada (Montréal).
- We use no third-party analytics, no advertising and no tracking cookies. We do not sell your personal information or share it for behavioural advertising.
- Our artificial intelligence (AI) provider receives the text of the exercises, but never your name, email address or account identifier.
- You can download all your data or delete your account yourself, at any time, in the app.
1. Who we are
Ausca is operated by [NOM LÉGAL DE LA SOCIÉTÉ], a Québec business corporation, located at [ADRESSE] (“Ausca”, “we”).
This policy applies to the website https://ausca.app, the web app https://ausca.app/app/ and, once available, the Ausca iOS app (together, the “service”).
Person in charge of the protection of personal information [NOM], [TITRE] Email: privacy@ausca.app Mailing address: [ADRESSE]
For any other question: bonjour@ausca.app.
2. Who Ausca is for
Ausca is for adults in medical training (medical students, residents) and health professionals in Québec, elsewhere in Canada and in the United States.
The service is not intended for anyone under 18. We do not knowingly collect personal information about minors, including anyone under 14. If we learn that an account was created by someone under 18, we delete it. [Specify how age is confirmed at sign-up, e.g., a declaration of being 18 or older.]
3. No information about real patients
Ausca is not a medical device, does not provide medical advice and must not be used for patient care. All patients in the service are fictional.
You must never type, dictate or upload information about a real person (name, health card number, chart number, date of birth, real clinical notes, etc.), whether in your notes, your cards or during a simulated interview.
As an extra safeguard, a filter blocks text that looks like a health card number, a Social Insurance Number (SIN), a Social Security Number (SSN) or a chart number before your notes are sent to the AI provider. This filter does not replace your own care.
4. Using Ausca without an account
You can use Ausca without creating an account. In that case:
- your progress and preferences are stored only in your browser’s local storage (“localStorage”), on your device;
- we receive none of this data;
- if you choose to send us an error report about content, we receive it without any identifier (see section 5.9).
If you clear your browser data, your local progress is lost. We cannot recover it.
As with any website, our hosting providers process technical connection data (such as IP address and browser type) to deliver pages and protect the service against abuse. [Specify which technical data Cloudflare and Supabase log, and for how long.]
5. Information we collect when you have an account
We collect this information directly from you or when you use the service.
5.1 Account and sign-in
- Your email address, used to send you a single-use sign-in link. We do not use passwords.
- On iOS, once available, the identifier provided by “Sign in with Apple”.
Purpose: create and secure your account, sign you in, write to you about your account.
5.2 Profile
- Language, training level, region, current rotation.
- Optional: cohort name and display name.
Purpose: tailor content to your level and region; show your display name in the social features you use.
5.3 Consent
- The version of the policy and terms you accepted, and the date and time of your acceptance.
Purpose: demonstrate your consent.
5.4 Study progress
- Spaced-repetition schedule, scores, experience points (XP), streak, daily activity counts by type.
Purpose: schedule your reviews, show your progress.
5.5 Content you create
- Your flashcards, notes and summary sheets, and the patients and cards generated by AI at your request.
Purpose: store and display your content; if you choose to publish a shared deck, display it to other users.
5.6 AI patient interviews
- The interview transcript: your questions, typed or dictated (as text), and the AI patient’s replies.
- Your choices of exams and tests, your diagnosis and your plan.
Purpose: run the simulation, then grade your performance and give you feedback.
5.7 AI usage
- For each AI request: the type of operation, the model used, token counts and cost. These records contain no content.
Purpose: apply usage limits, control our costs, prevent abuse.
5.8 Activity
- A single “active” event per day.
Purpose: know how many users are active and apply daily limits.
5.9 Content error reports
- When you report an error: your message, the item concerned, the region and the language.
Purpose: correct the content.
5.10 Subscription
- Your subscription status, plan and renewal date, sent by the payment provider (Stripe on the web, Apple on iOS).
- We never receive or store your payment card numbers.
Purpose: give access to paid features and manage your subscription.
5.11 Reviewer applications
If you fill out the public form to become a reviewer: name, email, role, specialty, region, message and consent.
Purpose: assess your application and contact you about it.
6. Voice
Speech recognition (dictation) and speech synthesis (the patient’s voice) are performed by your browser or device (Web Speech API or Apple speech services). Ausca does not receive or store any audio. We receive only the resulting text, as if you had typed it.
Depending on your browser or operating system, its vendor (for example Google, Apple or Microsoft) may process the audio on its own servers under its own privacy policy. If you prefer to avoid this, type your questions instead of dictating them.
7. How we use AI
The AI features (AI patients, detailed feedback, card and patient generation) use models from Anthropic, PBC, a company located in the United States.
- Anthropic receives only what the exercise needs: the interview text, the case content and, when you generate cards, your notes.
- Anthropic never receives your name, email address or account identifier.
- Under Anthropic’s commercial API terms, inputs and outputs are not used to train its models. [Specify Anthropic’s retention period for requests under its commercial terms.]
The score and feedback produced automatically after an interview are for your learning only. They are not an official assessment and are not disclosed to any school or employer. You can write to us if you believe feedback is wrong.
8. Consent
By creating an account, you consent to the collection and use of your information for the purposes described in section 5. This consent is requested separately from our terms of use. [Confirm that the consent screen is separate from acceptance of the terms.]
Some actions require your explicit choice, such as publishing a shared deck, adding a display name or submitting a reviewer application.
You may withdraw your consent at any time by deleting your account in the app or by writing to privacy@ausca.app. Withdrawal may prevent us from offering certain features.
We do not use your information for any purpose other than those described here without asking for your consent, except where the law allows it.
9. Privacy by default
Ausca’s privacy settings provide the highest level of confidentiality by default. The “cohort name” and “display name” fields are optional, and your decks are never shared unless you choose to. [Specify other settings and their default values, including visibility in leaderboards and duels.]
10. Cookies and local storage
Ausca uses no analytics, advertising or tracking cookies, and no third-party analytics tools.
We use only local storage that is strictly necessary to run the service:
- your sign-in session;
- your preferences (such as language);
- your progress, if you use Ausca without an account.
11. Social features
If you use duels or leaderboards, other users can see [specify: display name, XP, duel results, cohort].
If you publish a shared deck, its content is visible to other users [specify whether the author’s display name is shown]. You can withdraw it at any time.
12. Our service providers
We use providers that process information on our behalf, on our instructions, under written agreements, and only to provide their services to us:
| Provider | Role | Location |
|---|---|---|
| Supabase | Database and authentication | Canada (AWS ca-central-1, Montréal) |
| Cloudflare | Website hosting and content delivery network | Global |
| Anthropic, PBC | AI models (no identifiers) | United States |
| [FOURNISSEUR DE COURRIEL] | Sending sign-in emails | [à confirmer] |
Payments. Stripe (web payments, once available) and Apple (in-app purchases on iOS) collect your payment information directly from you and process it on their own behalf, under their own privacy policies. They send us only your subscription status, plan and renewal date.
We may also disclose information where the law requires or permits it (for example, in response to a court order) or as part of a business transaction covered by law, subject to the protections it provides.
13. Communication outside Québec
Your account data is hosted in Canada, in Montréal. However, some information may be communicated or processed outside Québec and Canada:
- Anthropic (United States): interview text, case content and notes used to generate cards, without any identifier;
- Cloudflare (global): technical data needed to deliver the website;
- [FOURNISSEUR DE COURRIEL] ([à confirmer]): your email address and the sign-in link;
- Stripe and Apple: your payment information, which they collect directly.
Before these communications, a privacy impact assessment was carried out [TO BE COMPLETED BEFORE LAUNCH]. It considered the sensitivity of the information, the purposes for which it is used, the protection measures, including contractual ones, and the legal framework applicable where it is communicated. We communicate this information only if the assessment concludes that it will receive adequate protection, and under a written agreement.
Information processed abroad may be subject to the laws of that country, including access requests from its authorities.
14. No sale and no advertising sharing
We do not sell your personal information. We do not rent it or disclose it for cross-context behavioural advertising.
15. Security
We protect your information with measures suited to its sensitivity, including:
- encryption in transit (TLS) and encryption at rest by our hosting provider;
- row-level security in the database: each user can access only their own data;
- AI requests that never include identifiers;
- a filter that blocks text resembling a health card number, SIN or SSN, or chart number before notes are sent to the AI;
- internal access limited to people who need it (least privilege);
- AI cost records without content.
No measure is foolproof. Protect access to your email inbox, since it lets you sign in to your account.
16. Who can access your information at Ausca
Only the following people may access your information, and only when needed for their duties: [specify categories of people, e.g., founders, authorized technical staff]. Clinical reviewers do not have access to your personal data. [To be confirmed.]
17. Retention
| Information | Retention |
|---|---|
| Account data (profile, progress, content you create) | Until you delete your account |
| AI interview transcripts | Automatically deleted 12 months after the interview |
| Error reports and AI cost records | Kept without any identifier after account deletion |
| Reviewer applications | 24 months |
| Hosting provider backups | Roll off within [7] days |
When you delete your account, all your data is deleted immediately, except error reports and AI cost records, which are kept without any identifier. Backups roll off on the cycle shown above.
18. Your rights
You have the right to:
- access your personal information and obtain a copy;
- have inaccurate, incomplete or ambiguous information corrected;
- withdraw your consent;
- obtain the information you provided to us in a structured, commonly used technological format (portability), or have it sent to an authorized person or body;
- have your information deleted;
- ask us to stop disseminating information about you, in the cases provided by law;
- be informed of the information used to make a decision based exclusively on automated processing, if any, and submit your observations.
In the app, you can yourself:
- download all your data (JSON export);
- delete your account (immediate deletion);
- edit your profile.
For any other request, write to privacy@ausca.app. We may ask you to confirm your identity, for example by replying from your account’s email address. We reply in writing within 30 days of receiving the request. These requests are free of charge.
19. United States residents
Depending on your state of residence (for example, California), the law may give you rights over your personal information. Whatever your state, we honour requests for access, deletion and correction, without discrimination.
In the past 12 months, we collected the following categories, for the purposes described in section 5: identifiers (email address); commercial information (subscription status); activity on the service (progress, “active” event); content you create and transcripts; professional or education information you declare (training level, rotation). We obtain it from you and from our payment providers, and disclose it only to the service providers described in section 12.
We do not sell or share (as defined under California law) your personal information, and we do not use sensitive personal information to infer characteristics about you. There is therefore nothing to opt out of.
To exercise your rights, or to have an authorized agent do so on your behalf, write to privacy@ausca.app.
20. Confidentiality incidents
We keep a register of confidentiality incidents. If an incident occurs, we promptly take measures to reduce the risk of injury. If there is a risk of serious injury, we notify the Commission d’accès à l’information du Québec, the Office of the Privacy Commissioner of Canada, as applicable, and the people concerned.
21. Complaints
If you have a concern, please first write to our person in charge of the protection of personal information at privacy@ausca.app. We acknowledge your complaint, review it and reply in writing within 30 days.
You may also contact:
- the Commission d’accès à l’information du Québec;
- the Office of the Privacy Commissioner of Canada;
- if you live in the United States, the consumer protection or privacy authority of your state (for example, in California, the California Privacy Protection Agency or the Attorney General).
22. Our governance rules
Our internal rules govern the retention and destruction of information, the roles and responsibilities of our staff throughout its life cycle, and complaint handling. They are approved by our person in charge of the protection of personal information. This policy summarizes their main elements. [Confirm that the internal governance policy has been adopted.]
23. Changes
We may change this policy. We will publish the new version on this site with its date. For significant changes, we will notify you by email or in the app before they take effect and, where the law requires, ask for your consent again.
24. Applicable laws
This policy is written with particular regard to the Act respecting the protection of personal information in the private sector (Québec), the Personal Information Protection and Electronic Documents Act (Canada) and, for United States residents, the laws of their state, including the California Consumer Privacy Act as amended by the California Privacy Rights Act.
The French version of this policy is authoritative. This English version is a translation.
25. Contact us
Person in charge of the protection of personal information: [NOM], [TITRE], privacy@ausca.app Address: [NOM LÉGAL DE LA SOCIÉTÉ], [ADRESSE] General questions: bonjour@ausca.app