Privacy Policy

1. Who we are

VisioX ("the Service", "we", "us") is a clinical evaluation platform for medical education, operated by Mini Mundo SARL Single Partner, a company registered in Lebanon under registration number 4084546, of Al Amrousiyeh, Beirut, Lebanon.

For any privacy question, contact us at [PRIVACY EMAIL].

2. What this policy covers

This policy explains what information VisioX collects, why, how it is protected, and what rights you have. It applies to the VisioX web application at pocustest.lovable.app, and to the VisioX mobile application when released.

3. Our role, and your institution's role

VisioX is licensed to medical schools, residency programs, and teaching hospitals ("Institutions"). Your Institution decides who may use VisioX, what evaluations are conducted, and how long records are kept. In data-protection terms, your Institution is the controller of that data and VisioX acts as a processor on its instructions.

Practically, this means: if you want to see, correct, or remove your evaluation records, your Institution's administrator is the right first point of contact. We will help them, and we will respond to you directly if they cannot.

4. What we collect

Account information. Your full name, your role (student, attending physician, or administrator), the Institution you belong to, and, where your Institution provides one, your email address. Accounts are created by your Institution's administrator. You cannot create an account yourself, and we do not collect information from members of the public.

Access credentials. A numeric PIN issued to you by your Institution's administrator. PINs are stored in a protected form and are masked in the interface.

Educational records. The substance of the Service: ultrasound exam worksheets, the findings and measurements trainees record, attending reviews, corrections and quality assessments, sign-off attestations, voice-dictation transcripts of findings, comments attached to studies, and progress summaries derived from these.

Technical and usage records. Sign-in events, actions taken in the application, timestamps, and audit entries recording changes to records. These exist for security and for the integrity of an assessment system — an evaluation record must be attributable and tamper-evident.

Device information. On iOS, standard technical information needed for the app to function and, if you enable them, push notification tokens.

5. What we deliberately do not collect

• No patient identifiers. Studies and worksheets use non-identifying references only. Entry of patient names or medical record numbers is prohibited by our Terms of Use. VisioX is not a medical record system and must not be used as one.
• No patient health information beyond the study itself. Ultrasound images and clips are stored solely for educational review and quality assessment, on your Institution's instructions. VisioX holds educational assessment records about clinicians and trainees; it is not a clinical record system and must not be used for diagnosis or patient care.
• No payment information. The Service is licensed to Institutions; individual users never pay us and we hold no card or bank details.
• No advertising, no tracking across other apps or websites, no sale of personal information to anyone, ever. We do not operate advertising identifiers and we do not share your data with data brokers.
• No location data or contacts access. Microphone access is used only when a reviewer deliberately records voice dictation of their findings.

6. Why we process your information

We do not use your data to train machine-learning models, and we do not use the content of worksheets, reviews, or studies for any purpose other than delivering the Service to your Institution. The optional Review Assistant and dictation transcription run only when a reviewer explicitly starts them; their output is a suggestion for the reviewer, never an automated decision.

7. Who we share it with

Within your Institution, access follows role: attendings see the students they evaluate, students see evaluations concerning themselves, and administrators see records for their own Institution. Institutions are strictly segregated — no Institution can see another Institution's data. A small number of VisioX platform administrators can access Institution data where necessary to operate, support, and secure the Service; such access is logged.

We rely on these service providers ("sub-processors"):

Each is bound to confidentiality and to processing data only on our instructions. We will otherwise disclose personal data only where required by law, and we will tell your Institution unless legally prevented from doing so.

8. International transfers

VisioX is operated from Lebanon and uses infrastructure located in Lebanon. Where data is transferred internationally, we rely on appropriate safeguards, including contractual protections with our sub-processors.

9. How long we keep it

Educational records are retained for as long as your Institution requires them, according to its own retention rules. VisioX operates an archive-and-restore model rather than immediate permanent deletion: records removed through the interface are marked as removed, hidden from normal use, and retained in a recoverable state with an audit trail. This protects against accidental loss of assessment records. Permanent erasure is performed on the instruction of your Institution, or on request where the law requires it.

Activity and audit logs are retained for 24 months.

10. Demo mode

pocustest.lovable.app and the VisioX app offer a demonstration mode that uses entirely synthetic data. Demo students, attendings, and evaluations are fictional and do not represent real people. Each demo session runs in a temporary, isolated environment that is deleted automatically within 24 hours. Nothing you enter in demo mode reaches a real Institution, and nothing from a real Institution is visible in demo mode. If you voluntarily give us an email address while exploring the demo, we use it only to reply to you about VisioX.

11. Security

We protect your information with encryption in transit and at rest, row-level database security enforcing role and Institution boundaries, PIN masking, restricted administrative access, and audit logging of significant actions. No system is perfectly secure, but we design for the sensitivity of assessment records. If a breach affects your data, we will notify your Institution without undue delay and cooperate with any notification it must make.

12. Your rights

Depending on where you live, you may have the right to access your data, correct inaccuracies, request erasure, restrict or object to processing, receive a copy in a portable format, and complain to a supervisory authority.

Because your Institution controls your records, start with your Institution's VisioX administrator. If you prefer, write to [PRIVACY EMAIL] and we will route your request appropriately. We respond within 30 days.

Account removal. Accounts are created and removed by Institution administrators. Within VisioX you can submit an account-removal request, which is sent to your Institution's administrator for action.

13. Children

VisioX is intended for use by medical students, resident physicians, attending physicians, and program staff in higher and professional education. It is not directed at children and we do not knowingly collect information from anyone under 16.

14. Changes

We will post any change to this policy on this page with a revised "Last updated" date, and will notify Institutions of material changes.

15. Contact