ACLSMED ("we," "us," or "our") operates the website aclsmed.com, the ACLSMED Megacode Simulator, the ACLSMED™ Sim application for iPad and Android tablets, and the free ACLSMED™ CPR application for iPhone and Android phones — including its Apple Watch and Wear OS watch apps (collectively, the "Service"). This Privacy Policy explains how we collect, use, disclose, and protect your information when you use our Service, whether on the web or in our mobile apps.
§ 01 Information We Collect
Account Information: When you create an account, we collect your full name, email address, and a password. If you sign in with Google, we receive your name and email address from your Google account. The same account works across our website and our tablet apps — your sign-in identity is shared between them.
Payment Information — Web: When you subscribe on aclsmed.com, your payment is processed by Stripe, Inc. We do not store your credit card number, CVV, or full billing details on our servers. We receive and store your Stripe customer ID and subscription status to manage your account.
Payment Information — Mobile Apps: When you subscribe or purchase a lifetime license inside the ACLSMED app, the transaction is processed by the store you bought it on: by Apple through the App Store using your Apple ID, or by Google through Google Play using your Google account. We never see or receive your payment card details; Apple or Google handles billing in full. We receive the resulting purchase and entitlement status so we can unlock the features you bought. Your subscription tier is recorded against your account regardless of whether you purchased on the web or in an app.
Device and License Information: The ACLSMED app licenses a set number of tablets per plan (2 for Pro, 4 for Suite), across iPad and Android. To enforce these limits, we associate a device identifier and device name with your account and the seats you have activated. You can release a device from your account to free up a seat.
Local Pairing Data: The apps let you pair devices on the same local network using a direct peer-to-peer connection — for example, a Patient Monitor tablet with an Instructor Remote tablet, or a student's phone (or paired Apple Watch or Wear OS watch) running the free ACLSMED™ CPR app with an ACLSMED™ Sim tablet. Data exchanged during pairing — such as a device's display name, an optional student display name, simulation state, and compression-quality readings (rate, depth zone, and hands-on time measured while practising on a training manikin) — stays on your local network between your own devices. It is cryptographically signed, is not routed through or stored on our servers, and contains no patient or health data: compression readings describe practice on a manikin, not any person.
ACLSMED™ CPR (free iPhone, Android, Apple Watch, and Wear OS app): The ACLSMED™ CPR companion app requires no account and no sign-in, and contains no ads and no analytics. Its motion-sensor readings are processed on the device that measures them — the phone, or the watch when worn — to measure practice compressions, and are never collected by us or sent to any server. The Apple Watch app sends readings to your paired iPhone over Apple’s device-to-device link, and the Wear OS app sends readings to your paired Android phone over Google’s device-to-device link; a watch app stores no compression data, holds no account, and reaches an instructor’s tablet only through your phone. We use no HealthKit or Health Connect data and request no health or body-sensor permissions. Session summaries stay on the phone, and the only transmission the app makes is the local peer-to-peer stream to an ACLSMED™ Sim tablet you choose to pair with.
Usage Data: We may collect information about how you use the Service, including pages visited, features used, session duration, and device/browser or app version. This data helps us improve the Service.
Cookies and Local Storage: On the web, we use essential cookies to maintain your login session. We may use analytics cookies to understand how visitors interact with our website, which you can disable in your browser settings. The mobile apps do not use advertising cookies and store only the data needed to keep you signed in and to remember your settings on your device.
§ 02 How We Use Your Information
We use the information we collect to:
- Provide, maintain, and improve the Service
- Process payments and manage your subscription, on the web, the App Store, and Google Play
- Deliver and verify the features and device seats included in your plan
- Send you transactional emails (account confirmation, password reset, payment receipts)
- Send you product updates and educational content (you may opt out at any time)
- Respond to support requests
- Monitor and analyze usage trends to improve user experience
- Detect, prevent, and address fraud or technical issues
§ 03 How We Share Your Information
We do not sell, rent, or trade your personal information. We may share information with:
- Stripe, Inc. — to process web payments securely
- Apple, Inc. — to process in-app purchases and subscriptions made through the App Store
- Google LLC — to process in-app purchases and subscriptions made through Google Play
- Supabase, Inc. — to host our authentication and database infrastructure
- Vercel, Inc. — to host and deliver the Service
- Analytics providers — to help us understand usage patterns (aggregated, non-identifying data)
- Legal authorities — if required by law, court order, or governmental regulation
§ 04 Data Security
We implement industry-standard security measures to protect your information, including encrypted data transmission (TLS/SSL), secure password hashing, cryptographically signed local device pairing, and Row Level Security on our database. However, no method of electronic storage or transmission is 100% secure, and we cannot guarantee absolute security.
§ 05 Data Retention
We retain your account information for as long as your account is active or as needed to provide the Service. If you delete your account, we will delete your personal information within 30 days, except where we are required to retain it for legal or accounting purposes.
§ 06 Your Rights
Depending on your jurisdiction, you may have the right to:
- Access the personal information we hold about you
- Request correction of inaccurate information
- Request deletion of your account and personal data
- Opt out of marketing communications
- Request a copy of your data in a portable format
You can delete your account and associated personal data directly within the ACLSMED™ SIM app on iPad or Android — gear icon → Account → DELETE ACCOUNT & DATA — or, if you no longer have the app installed, by emailing support@aclsmed.com. Full instructions, including exactly what is deleted and what we are required to retain, are on our Account Deletion page. To exercise any other right, contact us at our contact form.
§ 07 Subscriptions and In-App Purchases
Subscriptions purchased on the web are managed through the Stripe customer portal linked in your account. Subscriptions purchased in the iPad app are managed through your Apple ID in the App Store; you can view, change, or cancel them in your device Settings under your Apple ID, and renewals are billed by Apple. Subscriptions purchased in the Android app are managed through your Google account in Google Play (Play Store → profile → Payments & subscriptions), and renewals are billed by Google. Lifetime licenses are one-time purchases with no renewals and can be restored on a new device using the same account, Apple ID, or Google account. Cancelling or refunding a purchase is handled by the platform you bought it on — Stripe for the web, Apple or Google for the apps — and your account reflects the resulting status. The payment information you provide to Apple or Google is governed by that company's own privacy policy.
§ 08 Children's Privacy
The Service is not directed to individuals under the age of 16. We do not knowingly collect personal information from children. If we become aware that we have collected personal data from a child without parental consent, we will take steps to delete that information.
§ 09 International Users
The Service is operated from Canada and the United States. If you are accessing the Service from outside these countries, please be aware that your information may be transferred to, stored, and processed in jurisdictions where data protection laws may differ from those in your country.
§ 10 HIPAA Disclaimer
ACLSMED is a medical education and training tool. It does not collect, store, or process any protected health information (PHI) or patient data. This includes the iPad and Android tablet apps, the free ACLSMED™ CPR phone and watch apps (Apple Watch and Wear OS), and any data exchanged between paired devices on a local network; CPR compression readings measure practice on a training manikin, not any person. The Service is not a covered entity under HIPAA and is not intended for use in clinical patient care.
§ 11 Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the "Last updated" date. Your continued use of the Service after any changes constitutes acceptance of the revised policy.
§ 12 Contact Us
If you have questions about this Privacy Policy or our data practices, use our contact form.