Privacy Policy

1. Introduction

Welcome to My CESR Companion. We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, and safeguard your data when you use our Portfolio Management tool.

2. Information We Collect

We collect information that you provide directly to us through the application:

• Account Information: Name, professional email address, GMC number, and medical workplace.
• Professional Data: Specialty, career goals, and portfolio evidence.
• Clinical Logs: Case logs, procedures, and educational activity entries that you record in the application.
• Subscription Data: Information related to your selected plan and activation codes.

3. How We Use Your Information

We use the information we collect to:

• Provide and maintain the My CESR Companion service.
• Track your progress toward Specialist Registration (CESR) requirements.
• Generate portfolio reports and analytics.
• Manage your account and subscription status.
• Provide customer support and respond to your inquiries.
• Analyze app usage to improve our features and user experience.

4. Data Storage and Security

Your data is stored securely using industry-standard encryption and security protocols:

• Secure Database: We use Supabase/Supabase Auth for secure user authentication and data storage.
• Local Storage: Some data is stored locally in your browser (IndexedDB) to enable offline functionality.
• Google Drive Integration: If you choose to connect your Google Drive, the application will create a dedicated folder structure. You remain the owner of this data, and we only access the specific folders created for the app.

5. Data Sharing

We do not sell your personal data to third parties. We only share information when necessary:

• Service Providers: We use third-party services like Supabase for infrastructure and Google for authentication and cloud storage.
• Mentors/Supervisors: Only if you explicitly enable the "Share with Mentor" feature in your settings, your designated mentor will have access to view your progress.
• Legal Requirements: We may disclose information if required to do so by law.

6. Your Data Rights

You have the right to:

• Access: Request a copy of the personal data we hold about you.
• Correction: Update your profile and account information at any time.
• Portability: Export all your data in JSON or CESR format via the Data Management section.
• Deletion: Request the deletion of your account and all associated data.

7. Patient Data & Anonymization

Crucial Warning: My CESR Companion is designed for professional portfolio management. You must adhere to strict patient confidentiality standards (e.g., GDPR, Caldicott Principles):

• No Identifiable Data: You are strictly prohibited from entering any patient-identifying details, including but not limited to: Names, Medical Record Numbers (MRN), full Dates of Birth, or specific addresses.
• User Responsibility: Any entry of patient-identifiable data is the sole responsibility of the user. You agree to indemnify My CESR Companion and its developers against any legal consequences or data breaches resulting from your failure to anonymize clinical logs.
• Reference System: Users should use their own unique, non-identifying reference system (e.g., sequential numbering or pseudonyms) to identify cases for their personal reference.
• GMC Submission: You are reminded that all patient identifiers must be completely eradicated from any data exported from this tool before it is submitted as part of a CESR application to the GMC or any other regulatory body.

8. Contact Us

If you have questions or comments about this policy, you may contact us via the "Support & Feedback" section in the app or reach out to:

Rashid Abuelhassan
The Emergentologist Network
Email: support@emergentologist.net