Privacy Policy

1. Introduction

At Molarity Ltd, we are committed to protecting the privacy of dentists and dental students using our OSCE simulation platform. This policy explains how we collect, use, and safeguard your data, specifically focusing on the unique audio and AI processing required for dental examination practice.

2. Data Storage & Location

Your primary account data, profile information, and historical practice records are stored securely in the United Kingdom (UK) and the European Union (EU). Molarity Ltd complies with the UK GDPR and the EU GDPR to ensure the highest standards of data protection.

To provide high-performance clinical simulations, transient processing of audio and text for AI interaction occurs on secure Google Cloud servers located in the United States (US-Central). This processing is strictly transient and subject to the safeguards described in Section 4.

3. Audio Processing & Retention

Molarity Ltd uses advanced AI to simulate realistic patient interactions. To provide this service:

• Real-time Processing: Your voice is processed in real-time to generate AI responses and clinical feedback.
• Retention: Audio recordings are stored for a maximum of 30 days in our UK/EU storage buckets to allow for performance review, after which they are permanently deleted.
• Limited Use: Audio data is used exclusively for providing practice feedback and is never used to train global AI models.

4. International Data Transfers & AI Security

Molarity Ltd utilizes Google AI Studio / Gemini API for advanced clinical simulations. This requires the transfer of transient data to the United States. We ensure compliance via:

• UK-US Data Bridge: We rely on the UK Extension to the EU-U.S. Data Privacy Framework, under which Google is a certified participant.
• No Model Training: As a Google AI Studio customer, your practice data and audio are processed securely and are never used by Google to train its global AI models.
• Encryption: All data is encrypted in transit using TLS 1.2+ and at rest using AES-256 standards.

5. AI Transcription & Data Redaction

Transcripts of your sessions may be generated for feedback purposes. You have the option to opt-in to long-term transcript storage to track your progress dashboard. If you opt-in, we use automated systems to redact personally identifiable information (PII) from these transcripts before storage.

6. Your Information Rights

Under GDPR, you have several rights regarding your data:

• Access: You can download your practice history at any time through the Settings menu.
• Deletion: You can delete your account and all associated practice data (audio, transcripts, scores) instantly.
• Withdrawal of Consent: You can opt-out of optional data storage (like long-term transcripts) at any time.

7. Third-Party Services

We use industry-standard providers to power Molarity:

• Authentication: Handled securely by Google Firebase Auth.
• AI Inference: Powered by Google AI Studio / Gemini API (Secure US-based processing with UK/EU data residency for account records).
• Payment: Handled by Stripe (no credit card data is stored on our servers).

8. Contact Us

If you have questions about your data or this policy, please contact our data protection team at hello@molarity.app.