Privacy Policy
What we collect, why, who we share it with, and the rights you have over it. Read it alongside our Terms of Service.
The short version
We collect only what we need to run ClinicalVitals and to make it better. We never sell your personal information, we never use it for advertising, and your consultations are never used to train AI models. We handle your information in line with the Privacy Act 1988 (Cth) and the Australian Privacy Principles.
What we collect
Your account details: your name, email address and sign-in information. Your purchases: which pass or review you bought and when — but never your card details, which go straight to Stripe. Your practice: the transcript of each station you sit, the scorecard and feedback it produced, and any problem reports or human reviews attached to it. Messages you send us through the contact button. And how you use the site: pages visited, buttons pressed, device and browser type, and approximate location from your IP address.
How we use it
To run your account and give you what you paid for; to mark your stations and show you your history and progress; to answer you when you contact us; to detect shared accounts, fraud and abuse; and to find out which parts of the site work and which confuse people, so we can fix them. We email you about your account or purchases, and send study notes for your exam to anyone who signs up or joins our mailing list. Every study-notes email has an unsubscribe link, and unsubscribing never affects your account.
Your voice and your transcripts
When you sit a station, your microphone audio is streamed live to our speech-recognition provider to be turned into text, and the AI patient and examiner reply in real time. We do not keep a recording of your voice. We do keep the written transcript, because it is what your scorecard is marked from and what you look back on in your history. If you buy a human review, a ClinicalVitals reviewer reads that transcript. Stations are fictional patients — please do not say anything about a real patient or share personal health information of your own.
Who we share it with
Only the trusted providers that run parts of the service for us — sign-in, payments, hosting and storage, speech recognition, the AI patient and examiner, voice and video, email delivery, and analytics — and only what each one needs. They process your information on our instructions and may not use it for their own purposes. We will also disclose information if the law requires it, or to protect our rights — for example, when enforcing the copying clauses in our Terms of Service.
Cookies and analytics
We use essential cookies and browser storage to keep you signed in, remember your free trial and referral, and keep the site secure; the site will not work without them. We also use an analytics tool to understand how the site is used, which includes session replays — a reconstruction of what happened on screen during a visit, so we can see where people get stuck. Passwords, email addresses and payment details are masked in replays and never reach us; text you type into the site, such as a station answer or a message to us, can appear in them. We use no advertising cookies and no cross-site trackers.
How long we keep it, and how we protect it
We keep your account, purchases and practice history for as long as you have an account, so your progress is there when you come back. When you ask us to delete your account, we delete your personal information, except records we must keep by law, such as payment records for tax. Analytics data is kept for a limited period and then deleted automatically. Your information is encrypted in transit, access to it is restricted to people who need it, and our providers are chosen for their security practices.
Where your information is processed
Some of our providers are based in, or store data in, other countries, including the United States. When your information leaves your country, we rely on those providers’ contractual commitments to protect it to the standard your own law requires.
Your rights
You can ask us for a copy of the personal information we hold about you, ask us to correct it, ask us to delete it, or ask for your data in a portable format. You can also object to how we use it. Use the contact button in the corner of any page and we will respond within 30 days. If you are unhappy with how we handled your request, you can complain to the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.
Children
ClinicalVitals is for people aged 18 and over, and we do not knowingly collect information from anyone younger. If you believe a child has created an account, contact us and we will delete it.
Changes and contact
We will update this policy when the service changes. The version date below tells you when it last changed, and if a change is significant we will tell you by email or on the site before it takes effect. Questions about your privacy? Use the contact button in the corner of any page.
Version 2026-09-29.