Terms of Service

1. Acceptance of Terms

By accessing or using our Service, you agree to be bound by these Terms. If you disagree with any part of the terms, you may not access the Service. These terms apply to all visitors, authenticated users, and others who access the Service.

2. Medical Disclaimer

3. Patient Data & Anonymization Policy (Strict Compliance)

As a user logging clinical cases, you are strictly responsible for maintaining patient privacy and complying with health data laws (such as HIPAA in the US and UU PDP in Indonesia).

• You must NEVER enter real personally identifiable information (PII) or protected health information (PHI) — including real patient names, actual medical record numbers (MRN), exact dates of birth, home addresses, or phone numbers — anywhere in the application (including private logs).
• All entries for patient names, MRNs, and rooms must use dummy, fictional, or randomized values (e.g., "Pasien A", "MRN-9999").
• All case logs shared to the public Research Hub must be completely anonymized.
• The Service is not certified as a compliant health record system (EHR). We disclaim all liability under HIPAA, UU PDP, or local health regulations if you input real patient identifiers.
• We reserve the right to inspect and immediately delete any logs containing suspected real-world patient data or identified PII.

4. Google Authentication & Data Access

We use Google Sign-In (OAuth 2.0) to authenticate user accounts. When you register or log in using Google Auth, we access specific scopes:

• email: Used to establish your unique account credentials, communicate important updates, and protect session tokens.
• profile (name, avatar URL): Used to customize your personal dashboard profile and display email prefixes or names on community packages you create (e.g. CBT packages, OSCE stations).

We do not sell, rent, or lease your Google profile information to third parties. All authentication credentials are securely managed via Supabase Auth services.

5. User Contributions & Community Standards

You may upload case files, write comments, publish custom exam packages, and rate content ("Contributions"). By uploading content, you guarantee:

• You own the copyright or have licenses to use any images or text in your contributions (e.g. ECG graphs, reference materials).
• Your contributions do not violate safety rules or patient privacy regulations.
• Your comments on public discussion forums are clinical and professional.

6. Termination & Deletion

We may terminate or suspend access to our Service immediately, without prior notice, for any reason, including without limitation if you breach the Terms.

If you wish to terminate your account and delete all associated profile and case data, you can contact us at [email protected]. We will process your deletion request within 7 business days.

7. Changes to Terms

We reserve the right, at our sole discretion, to modify or replace these Terms at any time. By continuing to access or use our Service after those revisions become effective, you agree to be bound by the revised terms.