Privacy Policy

Last Updated: January 2025

1. Introduction

Welcome to CoreGRAI ("we," "our," or "us"). We are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our radiology education platform.

2. Information We Collect

2.1 Information You Provide

• Account Information: Email address, name, username, and specialty when you register
• Profile Information: Optional information such as first name, last name, and medical specialty
• Study Progress: Quiz results, study plans, conversation history, and learning progress
• Communications: Any messages or feedback you send us

2.2 Information Collected Automatically

• Usage Data: Features used, pages visited, time spent on platform
• Device Information: Browser type, operating system, IP address
• Session Information: Login times, session duration, device identifiers

2.3 Information from Third-Party Services

When you sign in using Google or Microsoft OAuth:

• Email address
• Name
• Profile picture (if available)
• OAuth provider identifier

3. How We Use Your Information

We use your information to:

• Provide, maintain, and improve our educational services
• Authenticate your account and prevent unauthorized access
• Track your learning progress and personalize study recommendations
• Generate quiz questions and study materials based on your specialty
• Communicate with you about your account or service updates
• Analyze usage patterns to improve platform features
• Ensure platform security and prevent fraud
• Comply with legal obligations

4. Data Storage and Security

4.1 Security Measures

We implement industry-standard security measures including:

• Encryption of passwords using bcrypt hashing
• Secure session management with JWT tokens
• HTTPS encryption for all data transmission
• Regular security audits and updates
• Access controls and authentication requirements

4.2 Data Retention

We retain your personal information for as long as your account is active or as needed to provide services. If you delete your account, we will delete your personal information within 30 days, except where retention is required by law.

5. Information Sharing and Disclosure

We do NOT sell, trade, or rent your personal information. We may share information only in these limited circumstances:

• With Your Consent: When you explicitly authorize sharing
• Service Providers: Third-party services that help us operate the platform (e.g., hosting, OAuth providers)
• Legal Requirements: When required by law, court order, or legal process
• Safety and Security: To protect rights, property, or safety of our users or others

6. Third-Party Services

6.1 OAuth Providers

We use Google and Microsoft OAuth for authentication. When you use these services:

• You are subject to their respective privacy policies
• We only receive basic profile information they provide
• You can revoke access at any time through your Google/Microsoft account settings

6.2 AI Services

Our platform uses AI models to generate educational content and answer questions. Your queries and interactions may be processed by these AI services, but we do not share personally identifiable information with them.

7. Your Rights and Choices

You have the right to:

• Access: Request a copy of your personal information
• Correction: Update or correct your information through your profile settings
• Deletion: Request deletion of your account and personal data
• Export: Download your study progress and conversation history
• Opt-Out: Unsubscribe from promotional communications
• Revoke OAuth: Disconnect Google/Microsoft login through account settings

8. Cookies and Tracking

We use essential cookies and local storage to:

• Maintain your login session
• Remember your preferences
• Ensure platform functionality

We do not use tracking cookies for advertising purposes.

9. Children's Privacy

Our service is intended for medical students and professionals. We do not knowingly collect information from individuals under 18 years of age. If we discover we have collected information from a minor, we will delete it immediately.

10. International Users

If you are accessing our service from outside the United States, please note that your information may be transferred to, stored, and processed in the United States. By using our service, you consent to this transfer.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting the new policy on this page and updating the "Last Updated" date. Your continued use of the service after changes constitutes acceptance of the updated policy.

12. Educational Use Disclaimer

CoreGRAI is an educational tool designed to help prepare for radiology examinations. The content provided is for educational purposes only and should not be used as a substitute for professional medical advice, diagnosis, or treatment. Always consult qualified healthcare professionals for medical decisions.

← Back to CoreGRAI