Last updated: October 6, 2026

This privacy policy explains what information the SimChrona app collects, and how HealthTok, LLC (“HealthTok,” “we,” “us”) uses it. We keep it short because SimChrona collects very little, and none of it is meant to be about real patients.

This policy covers the SimChrona app. Our website is covered by the HealthTok privacy policy.

What we collect

Account and billing information. When your organization subscribes, we receive the name and email address of your billing or administrative contact, your organization’s name, and your plan. Payments are processed by Stripe, which collects your payment details directly. We never see or store full card numbers.

Sign-in information. To sign in, you enter your work email address and we send a one-time code to it. We keep your email address, whether your account has been approved, and the institution access code you enter, if any. We do not use passwords.

Simulation data. When you run a drill, the app records what you enter: the scenario, the facilitator name if you enter one (and, for shared sessions, the email address of each person who logs an event), the interventions and responder roles you log, their timestamps, and any short text you type, such as a medication not on the preset list. This is training data about a simulated patient, not a real one.

AI evaluation. If you choose to generate an AI evaluation of a completed report (available for supported scenarios, such as adult and pediatric cardiac arrest), including when you create a PDF of such a report, the app sends the scenario name and a computed list of timeline findings and timestamps to Anthropic, which returns a written summary. We do not send your email address or the notes you type. The evaluation is educational feedback, not a clinical or legal assessment.

Voice notes. If you tap the microphone or Speak button to dictate a note, the app records a short audio clip (up to 60 seconds) and sends it over an encrypted connection to our server, which passes it to OpenAI to convert to text. Only the text comes back, and you can edit it before saving. We do not store the recording: our server holds it only long enough to transcribe it, and the app deletes its copy right after. OpenAI processes the audio under its API data terms, which do not use it to train its models; OpenAI may keep it for a limited time for abuse monitoring. Voice is optional, and typing always works.

Information collected automatically. Our servers may log technical data such as IP address, device type, and the date and time of a request. We use this to keep SimChrona secure and working properly. We do not currently use analytics, advertising trackers, or crash-reporting services.

Face ID and Touch ID. If you turn on app lock, your device performs the check itself. SimChrona never receives or stores biometric data. It only learns whether the check succeeded.

Where your data is stored

The app saves each session on your device first, so drills work without a connection. When a session ends, a copy is sent over an encrypted connection to our servers, hosted by Render and Neon in the United States, so your records are not lost if a device is.

How we use information

We use this information to run SimChrona, generate your after-action reports, keep your sessions backed up, manage your organization’s subscription, provide support, and contact you about your account or the service.

We do not share your information

We do not sell, rent, trade, or share your personal information or simulation data with any third party for their marketing, advertising, or other purposes of their own.

The only outside parties that handle your information are the service providers we need to run SimChrona: Render and Neon for hosting and storage, Resend for sending sign-in emails (it receives your email address), Anthropic for the optional AI evaluation described above, OpenAI for the optional voice-to-text described above, and Stripe for payments. They handle your information on our behalf to provide their service to us. We may also disclose information where the law requires it.

No real patient information

SimChrona is designed for training simulations. Please do not enter protected health information or any real patient details in the app, including in free-text fields. The service is not designed to receive it. HealthTok does not act as a HIPAA business associate for SimChrona.

Retention and your choices

We keep simulation data while your organization’s subscription is active. After a subscription ends, we keep it for 90 days so it can be exported, then delete it. Sessions stored on a device remain there until you delete them or remove the app. You can delete your account at any time in the app under Settings, then Delete account. That removes your account and your email address from our records. Drills you recorded stay in your organization’s training history, but anywhere your name or email appeared it is replaced with “Former user,” and drills saved on your device are erased. You can also ask us to access, correct, or delete information by emailing us. We will respond within a reasonable time.

Children

SimChrona is intended for healthcare professionals and organizations. It is not directed to children under 13, and we do not knowingly collect their information.

Changes to this privacy policy

If we change this privacy policy, we will update the date at the top of this page and notify your organization’s contact of significant changes.

Contact

HealthTok, LLC
1500 N Grant St, Suite N
Denver, CO 80203
Email us