Privacy Policy

Aaron Bleuer ("we," "us," or "our") built the Triage Trainer application ("App") as a medical training simulation tool. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our App on iOS, Android, or web. Please read this policy carefully. By using the App, you agree to the practices described herein.

1. Information We Collect

1.1 Information You Provide

• Account Information: If you choose to sign in, we collect your email address, display name, and profile photo through Firebase Authentication or Google Sign-In. You may also use the App anonymously without providing any personal information.
• Username: You may create a display name for use in multiplayer sessions. Display names are filtered for inappropriate content.
• Feedback: If you submit feedback through the App, we collect the content of your submission. You may optionally provide your email address if you wish to be contacted when your feedback is addressed.

1.2 Information Collected Automatically

• Usage Data: We collect information about how you interact with the App, including simulation events (e.g., triage decisions, interventions applied, phase transitions), session duration, and training performance metrics. This data is used to provide After Action Reviews and improve the training experience.
• Device Information: We collect general device type (phone, tablet, or desktop) and platform (iOS, Android, or web) for analytics purposes. We do not collect device model, operating system version, or unique device identifiers.
• Session Data: We store your current simulation state locally on your device, including casualty data, aid bag inventory, timer values, and settings.
• Analytics Events: The App uses Firebase Analytics to record usage events such as session starts, phase changes, and scenario completions. On mobile devices, Firebase Analytics may temporarily queue events locally before transmitting them. Queued events are automatically discarded after 72 hours if not sent.

1.3 Information We Do NOT Collect

2. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain the App
• Deliver After Action Reviews summarizing your training performance
• Enable multiplayer training sessions with real-time synchronization
• Authenticate your identity when you sign in
• Respond to feedback and support requests
• Analyze aggregate usage patterns to improve the training experience
• Enforce rate limits on AI-generated content (up to 50 requests per day)
• Protect against abuse and unauthorized access

3. Device Permissions

The App requests only the minimum permissions necessary to function:

• Internet Access: Required to connect to Firebase services for authentication, multiplayer sessions, AI-generated scenarios, and analytics.
• Local Storage: Used to save your simulation state, settings, and session history on your device.
• Vibration (Android): Used for haptic feedback during gameplay.

The App does not request access to your camera, microphone, location, contacts, calendar, health data, or photo library.

4. Data Storage and Security

4.1 On-Device Storage

Simulation state, settings, session history (up to 20 most recent sessions), and pending analytics events are stored locally on your device using the platform's standard storage mechanisms. On mobile devices, this data is stored within the App's sandboxed storage area. This data is not transmitted to external servers unless you use cloud-based features such as multiplayer sessions or authenticated sign-in.

You can clear all locally stored data at any time by clearing the App's data in your device settings or by uninstalling the App.

4.2 Cloud Storage

When you sign in or use multiplayer features, data is stored on Firebase (a Google Cloud service), including:

• Authentication credentials (managed securely by Firebase Authentication)
• Session state and casualty data (Cloud Firestore and Firebase Realtime Database)
• Training performance analytics (Cloud Firestore)
• Feedback submissions (Cloud Firestore)

4.3 Security Measures

We implement reasonable security measures to protect your data, including:

• All data transmitted between the App and our servers uses HTTPS/TLS encryption
• Firebase Authentication for secure identity management
• Firebase Security Rules to enforce access controls on all cloud data
• App sandboxing on iOS and Android to isolate data from other apps
• API keys and service credentials stored securely, not hardcoded in the App

While we strive to protect your information, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security.

5. Third-Party Services

The App uses the following third-party services, each governed by their own privacy policies:

• Firebase (Google): Authentication, Cloud Firestore, Realtime Database, and Analytics. Google Privacy Policy
• Google Sign-In: Optional authentication method. When you sign in with Google, we receive your name, email address, and profile photo from your Google account. Google Privacy Policy
• Firebase Vertex AI: Used to generate training scenarios with AI. Scenario prompts and responses are processed by Google's AI services. No personal information is included in AI requests. Google Cloud Terms

We do not integrate any third-party advertising networks, social media trackers, data brokers, or crash reporting services.

6. Data Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share information only in the following circumstances:

• With your consent: When you explicitly agree to share information.
• Multiplayer sessions: When you join a multiplayer session, your display name, role, and in-session actions (triage decisions, treatments applied) are visible to other participants in that session.
• Service providers: Data is processed by Firebase/Google Cloud as described in Section 5 to operate the App. Google processes this data under their data processing terms.
• Legal requirements: If required by law, regulation, legal process, or governmental request.
• Safety: To protect the rights, property, or safety of our users or the public.

7. Data Retention

• On-device data: Stored on your device until you clear the App's data or uninstall the App. Session history retains the 20 most recent sessions.
• Analytics event queue: Pending analytics events are retained locally for up to 72 hours before being automatically discarded if not transmitted.
• Cloud data: Retained in Firebase for as long as your account exists. You may request deletion of your data at any time (see Section 9).
• Feedback submissions: Retained until resolved or until you request deletion.
• Anonymous accounts: Data associated with anonymous accounts may be periodically purged if the account has been inactive for an extended period.

8. Children's Privacy (COPPA Compliance)

We are committed to protecting the privacy of children. The App is a medical training simulation and does not knowingly collect personal information from children under the age of 13 beyond what is necessary to provide the service.

• Anonymous use: Children may use the App anonymously without providing any personal information. Anonymous mode does not collect names, email addresses, or other personal identifiers.
• Account creation: If a child under 13 creates an account or signs in with Google, a parent or guardian should supervise and consent to the account creation.
• Parental rights: Parents or guardians may contact us at any time to:
  • Review personal information collected from their child
  • Request deletion of their child's personal information
  • Refuse further collection of their child's information
• No targeted data collection: We do not condition a child's participation on disclosing more personal information than is reasonably necessary.
• No behavioral advertising: We do not serve advertisements or use children's data for advertising purposes.

If you believe we have inadvertently collected personal information from a child under 13 without proper consent, please contact us immediately at the address below, and we will promptly delete that information.

9. Your Rights and Choices

You have the following rights regarding your data:

• Access: You may request a copy of the personal information we hold about you.
• Correction: You may update your display name and profile information through the App.
• Deletion: You may request deletion of your account and all associated cloud data by contacting us at the email below. You may clear all locally stored data by going to your device's Settings, selecting the App, and choosing "Clear Data" or by uninstalling the App.
• Withdraw consent: You may stop using authenticated features at any time by signing out. You may continue using the App anonymously.
• Opt out of analytics: You may use the App in anonymous/offline mode to minimize data collection.

10. California Privacy Rights

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• The right to know what personal information is collected, used, and shared
• The right to request deletion of personal information
• The right to opt out of the sale of personal information (we do not sell personal information)
• The right to non-discrimination for exercising your privacy rights

11. International Users

If you are accessing the App from outside the United States, please be aware that your information may be transferred to, stored, and processed in the United States where our servers and service providers are located. By using the App, you consent to such transfer and processing.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by updating the "Last Updated" date at the top of this policy. We encourage you to review this Privacy Policy periodically. Continued use of the App after changes are posted constitutes acceptance of the updated policy.

13. Contact Us

If you have any questions or concerns about this Privacy Policy, please contact us at: