Your voice is the practice. It is not the product.

Last updated: 25 July 2026

This policy explains what OSCEY collects, why, and what happens to it — in plain language, because you press a microphone button in this app and you deserve to know exactly where that audio goes. OSCEY is published by veridir ("we", "us"). Contact: oscey@veridir.com.

1. The short version

• OSCEY works by listening to you consult. Microphone audio is streamed to Google Gemini for processing and is not retained after the station ends.
• We keep your transcripts, debriefs and progress so your history works. We do not keep the audio they came from.
• No account is required to try the four free stations.
• There are no ads inside OSCEY and we never sell your data. We do advertise the app itself, and use Meta's measurement tools to see which ads work — sections 2.6 and 2.7 say what that involves.
• You can delete everything from the app or by emailing us.
• Never share real patient information in a station. Every OSCEY patient is simulated.

2. What we collect

2.1 Microphone audio (processed, not retained)

When you run a station, your speech is streamed over an encrypted connection to Google Gemini, which transcribes it, runs the simulated patient's responses, and powers the assessment. Audio is processed live for this purpose and is not retained after the station ends. Google's processing is governed by our agreement with Google and Google's own privacy terms.

2.2 Transcripts and debriefs (retained)

The text transcript of your consultation and the resulting debrief (scores, met and missed criteria, skill changes) are stored so you can review them, and so features like the Case Codex, clinical radar and Daily Round work. These are text, not audio.

2.3 Account information (optional)

If you create an account, we store the sign-in details needed to run it (for example an email address or a sign-in provider identifier) so your subscription and progress sync across devices.

2.4 Purchase information

Subscriptions are sold by Apple or Google. We receive and store your purchase state (whether Full Access is active and its expiry) — never your card details, which the stores keep to themselves.

2.5 Diagnostics and feedback

Crash logs and basic device diagnostics (device model, OS version, app version) help us fix bugs. Feedback you send after a station includes your ratings and comment — not the station transcript or audio, unless you explicitly paste text in.

2.6 This website

This site runs the Meta pixel, so that when we advertise OSCEY we can tell which ads actually bring people here rather than paying for guesses. It records the page you landed on and whether you went on to a store, and sets a cookie (_fbp) to recognise the same browser. It does not read what you type, and none of your practice data is on this site to begin with. We run no other analytics or advertising scripts.

Your theme preference is stored locally in your browser (localStorage) and never leaves your device. Standard web server logs (IP address, user agent, pages requested) are kept by the host for security and operations.

2.7 Advertising measurement in the app

The app includes Meta's SDK for one job: telling us that an install came from an ad we paid for. On Android it reads your device's advertising ID — a resettable identifier Google provides for this purpose — and reports the install and app opens to Meta. You can reset or delete that identifier at any time in Android settings under Privacy → Ads, and the app keeps working.

Your transcripts, debriefs, scores and station audio are never sent to Meta. The measurement is about which ad worked, not about what you practise.

3. What we never collect

• Your station audio, after the station ends.
• Your contacts, photos, files or anything outside the microphone session and the data listed above.
• Precise location.
• Real patient data — and you must not provide it (see section 7).

4. Why we process your data (legal bases)

Purpose	Data	Legal basis (GDPR)
Run the consultation and assessment	Microphone audio (live processing)	Performance of the service you requested
Your history, Case Codex, radar, Daily Round	Transcripts, debriefs, progress	Performance of the service; legitimate interest
Sync and subscription management	Account details, purchase state	Performance of the service
Fixing bugs and improving stability	Crash logs, diagnostics, feedback	Legitimate interest
Answering your emails	Contact details, correspondence	Legitimate interest

5. Who processes your data

• Google (Gemini) — runs the simulated patient and the assessment from your live audio. This is the core of how the app works and is disclosed wherever the microphone is described.
• Apple / Google (app stores) — process your payment and manage your subscription.
• Infrastructure providers — hosting and databases that store your transcripts, debriefs and account data under our instruction.
• Meta — receives the advertising measurement described in sections 2.6 and 2.7: that a browser visited the download page, and that an install or app open happened. Nothing about your consultations.

We do not sell or rent your personal data, and we share nothing with data brokers or exam bodies. Nobody — including any examining body — sees your practice results.

6. Retention

• Audio: processed live, not retained after the station ends.
• Transcripts, debriefs, progress: kept until you delete them or delete your account.
• Account data: kept while your account exists; deleted on request.
• Support correspondence: kept as long as needed to handle your request, then for a reasonable record of it.

7. What you must not share

OSCEY patients are simulated. Never mention real patients, real colleagues, or any confidential or identifying clinical information during a station. It is unnecessary — the patient is not real — and it is a habit that protects you everywhere else too.

8. Your rights

Where GDPR or similar law applies, you have the right to access, correct, export and delete your personal data, to object to or restrict processing, and to complain to your local data protection authority. You can delete your account and associated data directly in the app, or by emailing oscey@veridir.com from your account address. We aim to answer within 30 days.

9. Children

OSCEY is a professional exam-preparation tool for doctors and medical students. It is not directed at children, and we do not knowingly collect data from anyone under 16.

10. International transfers

Processing by Google and our infrastructure providers may happen outside your country, including in the United States. Where GDPR applies, transfers rely on appropriate safeguards such as standard contractual clauses.

11. Security

Audio and data travel over encrypted connections. Access to stored data is limited to what the team needs to operate and support the service. No method of transmission or storage is perfectly secure, but we design for the minimum: we cannot lose what we never kept.

12. Changes to this policy

If we change how your data is handled, we will update this page and change the date at the top. Material changes will also be flagged in the app. The current version is always at oscey.veridir.com/privacy_policy.html.

13. Contact

Questions, requests and complaints: oscey@veridir.com. More routes on the support page.