Your practice data should be understandable and controllable.

Arcmetric AI operates OSPE-Prep and is responsible for the personal information described here. Questions, access requests, corrections, consent withdrawals, and deletion requests can be sent to info@arcmetric.ai.

• Account and profile information, such as your name, email, exam track, province or territory, language, and timezone.
• Practice information, including selected stations, typed or spoken responses, transcripts, station events, formative scores, rubric evidence, notes, feedback, and attempt history.
• Group information, including educator assignments, membership, a protected match value derived from a student ID, and group-linked results.
• Technical and security information, such as session identifiers, timestamps, browser or device signals, IP-derived security data, and operational logs.
• Purchase information, including package, amount, currency, checkout identifier, and fulfilment status. Arcmetric AI does not receive or store your full payment-card number.
• Recordings or uploaded evidence only when a feature clearly asks for permission and you choose to provide it.

When you choose voice practice, audio is transmitted to our AI service provider to produce a response and transcript. The transcript and evaluation evidence may be retained with your attempt; raw audio is not represented as a saved account artifact unless the interface expressly says it will be recorded or uploaded.

Your camera preview remains on your device unless you deliberately use a submission feature that identifies what will be uploaded and asks for consent. We do not claim to assess body language or physical technique where that capability is not enabled.

AI output can be incomplete or incorrect. OSPE-Prep uses controlled station instructions and assessment criteria, but reports remain formative learning feedback—not official PEBC results, licensing decisions, clinical advice, or pass predictions.

• Provide authentication, candidate and educator portals, station interactions, reports, and account support.
• Process purchases, maintain attempt balances, prevent duplicate fulfilment, and investigate failed attempts.
• Let an educator review the assigned attempts of learners who joined that educator’s group.
• Protect accounts, enforce product limits, diagnose failures, and prevent fraud or misuse.
• Improve station quality and evaluate scoring reliability using de-identified or permissioned data where appropriate.
• Send service messages. Promotional email is sent only where permitted and with a way to unsubscribe.

We use service providers to operate the product, including Supabase for authentication and database services, Vercel for application hosting, OpenAI for supported AI and voice processing, Stripe for payment processing, and Resend for transactional email when configured. These providers process information under their own contractual and security terms and may process it outside Canada.

We may disclose information where required by law, to protect users or the service, in a business reorganization subject to appropriate safeguards, or with your direction. We do not sell candidate practice transcripts or payment information.

Joining an educator group allows that group’s authorized educator to see identity and progress information connected to the group and the results, transcript evidence, and feedback for group-assigned attempts. Educators do not receive payment-card details or unrelated private account activity. Leaving a group does not erase records already legitimately retained for academic review.

We keep account, purchase, attempt, and consent records while needed to provide the service, maintain reliable learning history, meet legal or accounting duties, resolve disputes, and protect the platform. You can request account deletion from account settings. We then delete or de-identify eligible information after verifying and processing the request, while limited records may remain in secure backups or where law, fraud prevention, payment reconciliation, or an active dispute requires retention.

We use access controls, separate portal permissions, protected identifiers, encrypted transport, service-role restrictions, and audit-oriented records. No online system is risk-free. Avoid entering real patient names, health-card numbers, prescription numbers, or other identifiable patient information into a simulated station.

You may access and update account information, export available account data, request correction or deletion, withdraw optional voice or recording consent, and decline promotional email. Withdrawing processing that is necessary to operate a station may prevent that feature from working. Contact us if the self-service controls do not address your request.

We may update this policy as the product or legal requirements change. Material changes will be presented in the product or by email where appropriate, and we will request renewed consent when required.