Privacy Policy

Viva Station is an independent, Australian-operated service. This policy explains what personal information we collect, why, how we handle it, and the choices you have. We handle your information in line with the Australian Privacy Principles (APPs) under the Privacy Act 1988 (Cth).

Viva Station does not collect health information about you. The content you engage with — anaesthesia and related medical science — is study material, not information about your own health.

• Account details: your email address, used for passwordless sign-in. We never see or store a password.
• Study profile:the exam and sitting you're preparing for, your exam date, and any study goal you set.
• Session data:a text transcript of each practice viva — the examiner's questions and your spoken answers, converted to text — plus the AI-marked report (ratings, comments, strengths, improvements) generated from it.
• Feedback: anything you submit through the feedback link, tied to your account so we can follow up if needed.
• Billing information:handled by our payment processor to charge your subscription. We don't store your full card details ourselves.
• Basic usage data: timestamps, station counts, and the approximate country you use the service from (derived from your network address — never your precise location), used to enforce fair-use limits and understand product usage.

We do not store audio recordings of your voice — only the resulting text of your spoken answers is retained. The examiner's spoken voice is generated on request and is never saved. We don't collect passwords, your full card details, or device fingerprints.

Viva Station is a spoken tool. Your spoken answers are converted to text so the examiner can respond; that speech-to-text step may be performed by a third-party provider, which processes the audio only to return the text. We do not store recordings of your voice — only the text transcript is kept — and the examiner's spoken voice is generated on request and never saved. You control microphone access through your browser's permissions, and can revoke it at any time.

We use the information that identifies you only to:

• run stations — generate questions, follow-ups, and marking;
• show you your coverage dashboard and progress;
• enforce fair-use station caps and process your subscription;
• respond to your feedback and support requests; and
• maintain, secure, and improve the service.

We do not use information that identifies you for advertising, and we never sell it.

Separately from running the service for you, we create de-identified versions of session data — with your name, email, account identifier, and any other details that could reasonably identify you removed. This de-identified data includes the clinical reasoning, judgement, and decision-making reflected in how you answer. We use it to:

• improve Viva Station and its examiner; and
• develop, train, and evaluate artificial-intelligence models and related educational and clinical decision-support tools.

We may also create aggregated, de-identified datasets — including datasets and models that represent how clinicians reason through and make decisions in clinical problems — and the models trained on them, and licence or provide these to third parties, including medical technology and research organisations. Once data has been de-identified in this way it is no longer personal information about you, and anything shared externally does not identify you. We never sell, licence, or share information that identifies you.

Your consent and opt-out. By using Viva Station you consent to this de-identified use of your session data. You can opt out at any time by contacting us (see below); once you opt out, your data is excluded from these purposes going forward. Opting out does not affect your ability to use the service.

A small number of service providers process data on our behalf, only as needed to run the product:

• An AI language-model provider — processes station content to generate follow-up questions and marking, based in the United States.
• A voice-synthesis provider — generates the spoken audio you hear, based in the United States.
• Our database and auth provider — hosts our database and handles sign-in, on infrastructure located in Australia (Sydney).
• Our payment processor — securely handles subscription billing and card details.

None of these providers may use your data for their own purposes beyond providing their service to us, and each is bound by contract to protect it. We may also disclose information where required by law.

Your account and session data are stored in a database hosted in Sydney, Australia. Running a station briefly sends related content to our AI and voice-synthesis providers overseas, in the United States, as described above; neither retains it beyond providing their service to us. By using the service you consent to this overseas processing.

Data is encrypted in transit. Database access is restricted so you can only see your own stations and feedback; administrative access is limited to account, usage, and results information (such as stations run, topics, and outcomes) and feedback messages — we do not routinely read the content of your answers. De-identification, where applied, removes the identifiers described above before data is used for model development or shared externally. We take reasonable steps to protect your information from misuse, loss, and unauthorised access; no online service can be guaranteed perfectly secure.

Viva Station shows anonymised percentile positioning against other candidates in your cohort, only once a cohort has enough members to protect anonymity — it never identifies any individual, and it's not a prediction of your exam result. You can opt out of this from your settings at any time.

We use a small number of essential cookies and similar browser storage to keep you signed in and to run core features of the service. We do not use advertising cookies or third-party tracking cookies. You can clear or block cookies in your browser, but sign-in and some features may not work without the essential ones.

Viva Station is intended for adults (18 and over) preparing for professional exams. We do not knowingly collect personal information from children. If you believe a child has provided us with their information, contact us and we will delete it.

We keep your data for as long as your account is active. If you ask us to delete your account, we'll delete your profile, station transcripts, and feedback within a reasonable time, except where we need to retain limited records for legal or accounting reasons. De-identified data, which no longer identifies you, may be retained and used as described above.

You can ask to access, correct, or delete your personal information, opt out of de-identified data use for model development and datasets, or opt out of the cohort feature, at any time. Account deletion isn't yet self-serve in the app — email privacy@vivastation.com.au and we'll action it directly. If you're unhappy with how we've handled a privacy concern, you can also complain to the Office of the Australian Information Commissioner (oaic.gov.au).

If you use Viva Station from the United Kingdom or the European Union, the UK GDPR or EU GDPR applies to our handling of your personal data. Our lawful bases are: performance of a contract (running the service you signed up for), consent (the data uses you agree to at sign-up, which you can withdraw at any time), and legitimate interests (securing and improving the service).

You have the rights of access, rectification, erasure, restriction, portability, and objection over your personal data, and the right to withdraw consent without affecting your use of the service — contact us at the address below to exercise any of them. Your data is stored in Australia and processed in the United States as described above; we take reasonable steps to ensure it is protected to an equivalent standard wherever it is processed. If you're unhappy with our response, you can complain to the UK Information Commissioner's Office (ico.org.uk) or your local supervisory authority.

If you use Viva Station from the United States, this policy describes the personal information we collect and how we use it. We do not sell or share personal information that identifies you, as those terms are defined in US state privacy laws, and we honour the access, correction, and deletion requests described above for all users regardless of location.

If this policy changes materially, we'll update the effective date above and, for significant changes, email you directly.