Privacy Policy

Clerkshift.com (company number [company number — to be completed]), whose registered office is at [registered office address — to be completed], owns the database and decides how your information is used. Contact us about privacy at support@clerkshift.com.

• Account details from Google when you sign in: your name, email address, profile picture and Google account identifier.
• Consultation content: the messages you type, the simulated patient's replies, the tests you order, your diagnoses and treatment plans, the feedback and scores, and the language you use.
• Reports you make about a case, with the reason you choose and anything you write.
• Usage and plan information: when you started consultations, how much AI processing they used, your plan, and dates relevant to your subscription.
• Billing references: the identifiers Paddle gives your customer record and subscription. Paddle, not us, collects your payment details.
• Technical information that our hosting provider records when you use the site, such as IP address, browser type and request times.
• How you found us: the campaign name, source and referring website in the link that brought you here, and the page you first opened. It is saved with your account when you sign up.
• Whether a partner who promotes the service brought you, through their link or their discount code, so that we can pay them a share of what you pay. Partners learn only how many customers they brought and what they earned, never who you are.

There is no legal obligation to give us this information. Without the account details and consultation content, however, the service cannot work.

• To provide the service: sign you in, run consultations, keep your history and progress, and apply your plan's limits (performance of our contract with you).
• To take payments and manage subscriptions through Paddle (contract, and legal obligations such as tax records).
• To show you, once a consultation is over, how you did on that case against other users who saw the same simulated patient: how many solved it, where you came, and, once at least five others have finished it, your scores against theirs in aggregate. Other users never see your consultation, your name or your individual results, and you never see theirs (performance of our contract with you).
• To keep the quality of the simulated cases up: cases are shared between users, and one that several report stops being offered while we look at it (our legitimate interests).
• To keep the service secure and working, and to prevent abuse (our legitimate interests).
• To learn, in aggregate, which of our own announcements and links bring people to the service and whether they go on to use it (our legitimate interests).
• If you accept analytics cookies, to see how people move through the site, including recordings of visits, so we can make it easier to use (your consent, which you can withdraw at any time).
• If you accept analytics cookies, to tell Meta when you sign up or buy a plan, so it can show our ads to people likely to find the service useful and tell us which ads work (your consent, which you can withdraw at any time).
• To answer you when you contact us.

We do not sell your information or build marketing profiles. Apart from telling Meta about a sign-up or purchase when you allow it, we do not use your information for advertising.

Only with the service providers the service needs, each for its own part:

• Google, for signing in with Google.
• Google, through the Gemini API, which generates the simulated patient, the results and the feedback. The consultation content is sent to it. Under the terms of the Gemini service we currently use, Google may use content sent to it to improve its products, and people may review it. This is one more reason never to enter personal or real patient information.
• Neon, which hosts our database, in the European Union.
• Vercel, which hosts the site and may process requests in the United States and other countries. Vercel Web Analytics also counts page visits and a few steps in the service, such as starting a consultation or opening checkout. It uses no cookies, does not identify you, and never receives your email address or consultation content.
• PostHog, only if you accept analytics cookies, which records how you use the site: pages visited, clicks and taps, and recordings of visits. It is hosted in the European Union. Every text field is hidden in recordings and consultations are left out entirely, so it never receives what you type or your consultation content.
• Meta, only if you accept analytics cookies, which is told when you sign up and when you buy a plan, with the price. To match these to its ads, it receives your email address and account number, each in a scrambled (hashed) form, the click identifier of the Meta ad that brought you here, if any, and, at sign-up, your IP address and browser type. Meta uses this to measure and improve our ads, under its own privacy policy. It never receives your consultation content or what you type.
• Paddle, our reseller and merchant of record, which processes payments under its own privacy notice.

We may also disclose information where the law requires it. Some of these providers are in other countries; information is transferred to them under safeguards the law permits, such as the European Commission's standard contractual clauses.

We use what the site needs to work, and analytics and ad measurement cookies only if you accept them. Our visit counting (Vercel Web Analytics) works without cookies.

• A sign-in session cookie, which keeps you signed in.
• NEXT_LOCALE, a cookie that remembers the language you chose.
• Browser storage (not sent to us) that remembers your light or dark theme and whether you have seen the introductory guide.
• Browser storage for this tab only, holding the campaign or referring website that brought you here. It is sent to us once, when you sign up, and is erased when you close the tab. If you came from a Meta ad, it also holds that ad's click identifier, which leaves your browser only if you accept analytics cookies.
• cs_consent, a cookie that tells our server your answer to the cookie banner, so it knows whether it may send anything to PostHog or Meta.

Analytics and ad measurement cookies are set only after you choose Accept on the cookie banner. PostHog's let us see how people use the site, including recordings of visits with every text field hidden and consultations left out. _fbc holds the click identifier of the Meta ad that brought you here, for 90 days, so we can tell Meta which ad led to a sign-up or purchase. Your choice is kept in browser storage, and you can change it here at any time; declining removes _fbc.

Paddle's checkout sets its own cookies when you open it; see Paddle's privacy notice.

Account details and consultations are kept while your account exists, and you can delete them yourself at any time.

• Deleting a consultation, from your ward, erases its conversation, chart, tests, hints and feedback from our database at once, takes its results out of every comparison with other users, and erases any report you made about its case. We keep only a record that a consultation was started, and when, so that plan allowances work, until your account is deleted.
• Deleting your account, from Account, erases the account and everything in it from our database at once. If you ask us by email instead, we do it within 30 days.
• Copies in our database provider's backups are overwritten within 30 days.

Billing records are kept for as long as tax law requires, currently up to seven years. Hosting logs are kept only briefly by our providers.

You may ask to see the information we hold about you, to correct it, and to have it deleted. You can delete consultations, or your whole account, yourself in the service. If you are in the European Union you also have the rights to object, to restrict processing and to data portability.

Write to support@clerkshift.com; we will answer within 30 days. You may also complain to the data protection authority where you live.

Information travels over encrypted connections, access to the database is restricted, and payment details never reach us. No system is perfectly secure; if a breach affects you, we will tell you and the authorities as the law requires.

The service is not intended for anyone under 18, and we do not knowingly collect their information.

When we change this policy we update the date at the top, and we tell you in advance of any material change.