Effective date: January 1, 2026 · Contact us with questions.

Overview

Simorio ("we", "us", or "our") is a browser-based clinical simulation platform operated during an alpha development period. This policy explains what information we collect, why we collect it, and how we handle it. Simorio is an educational tool — we do not collect, store, or process any real patient data or protected health information (PHI).

What we collect

We collect the following categories of information:

Account information. When you create an account, we collect your email address and, if you choose to provide it, a display name. We do not require your real name.
Usage and session metadata. We log activity such as when sessions are created or joined, scenario selections, and simulator interactions. This data is linked to your account and used to power debriefing features (e.g. playback timelines). It contains no real patient information.
Contact-form submissions. If you reach out via our contact form, we store the name, email address, and message you submit so we can respond to you.
Log and diagnostic data. Our hosting infrastructure automatically records standard server logs (IP address, browser type, pages visited, timestamps). We use this for security monitoring and debugging.

No real patient data

Simorio is a simulator for education and training purposes only. It is not connected to any electronic health record system and is not designed or intended to hold real patient information. Please do not enter real patient names, identifiers, or clinical data into Simorio.

Cookies and local storage

We use browser localStorage and session cookies to maintain your login session and remember lightweight preferences (such as your last-used display settings). We do not use advertising or third-party tracking cookies.

Site analytics

We measure aggregate traffic on our public marketing pages using Vercel Web Analytics, our hosting provider's built-in measurement. It records the page visited, the referring site, and coarse country, device, and browser information. It does not set cookies, does not follow you across other websites, and does not build a profile of you: visits are counted using a value derived from your request that is rotated daily and cannot be reversed to identify you. Analytics is not used inside the simulator itself, so nothing you enter into a scenario is collected.

Data processors

We rely on the following sub-processors to operate the service:

Supabase — database, authentication, and server-side functions. Data is stored in Supabase's managed PostgreSQL infrastructure.
Vercel — hosting, edge functions, and CDN delivery for our web application and marketing site, plus the cookieless traffic analytics described above.

Both processors operate under their own privacy and security frameworks. We do not sell your data to any third party.

How we use your information

To provide and improve the Simorio service.
To allow you to log in and manage your account.
To store session recordings so you can play them back for debriefing.
To respond to support and sales inquiries submitted via our contact form.
To monitor for abuse, bugs, or security incidents.

Data retention

We retain account and session data for as long as your account is active. You may request deletion of your account and associated data at any time by contacting us. During the alpha period, data may be wiped across all accounts as part of platform resets prior to general availability — we will provide advance notice where practicable.

Your rights

Depending on your jurisdiction, you may have rights to access, correct, or delete your personal data, or to object to certain processing. To exercise any of these rights, please contact us.

Security

We use industry-standard measures (HTTPS, encrypted databases, row-level access controls) to protect your data. No system is perfectly secure; please use a strong, unique password for your account.

Children

Simorio is intended for healthcare educators and students aged 18 and over. We do not knowingly collect personal information from children under 13. If you believe we have done so inadvertently, please contact us and we will delete the information promptly.

Changes to this policy

We may update this policy as the product evolves. We will update the effective date at the top of the page. Material changes will be communicated via email or an in-app notice for registered users.

Contact

Questions or requests regarding this policy: contact us here.

Privacy Policy