Vidicus™ Software Privacy Policy Saved cases remain locally on your Mac. Vidicus does not store prompts or AI responses. Never enter patient names, birth dates, or other identifying information. EMS Trainer is intended solely for education and training. It is not a clinical decision-support system, medical device, or substitute for agency protocols, qualified instruction, medical direction, or professional judgment. Effective Date: 2026-01-01 Overview Vidicus™ Software training and education apps. This Privacy Policy explains what information we collect, how we use it, and how we protect it. We use Firebase (Google) to provide authentication and selected cloud services. Information We Collect We collect and process the following categories of information: • Account Information • Email address: Collected when you create an account or sign in with email/password. Your password is handled by Firebase and is not stored by us. • Device and Activation Information • Device ID: A randomly generated identifier stored securely on your device. We use it to enforce a limit on the number of devices associated with your account. • Activation Code: If you enter an activation code, we store it securely on your device and use it to request your license entitlement from our backend. • Entitlement Token: A signed license token issued by our backend. Stored securely on your device to verify your license status. • App Metadata: During activation, we may send the app version and platform to our backend for compatibility and support. • Case Data (User-Entered) • You can enter EMS training case information (e.g., patient names, addresses, vitals, interventions, narratives) and add related ECG images. By default, these data are stored locally on your device in the app’s container. Case data are not uploaded to our servers. • Support Communications • If you contact support from within the app, your message is sent via your email client and may include your name, email, and issue details. • Service Logs • Firebase may collect standard service logs and metadata (e.g., IP address, timestamps) as part of providing authentication and database services. We do not use advertising identifiers (IDFA), and we do not track your activity across other companies’ apps or websites. How We Use Information • Authentication: To create and manage your account, and to sign you in. • Licensing and Activation: To activate your license, verify your entitlement, and enforce device limits. • App Functionality: To store and retrieve your training cases, lookups, and picklists. • Support: To respond to your requests and provide assistance. Where Information Is Stored • On-Device: Case data (including ECG images) and certain preferences are stored locally on your device. Activation code, entitlement token, and device ID are stored in the system Keychain when available. • Cloud Services (Firebase): Account authentication (email/password) and select app content (LookUps/PickLists) are stored in Firebase. During activation and license management, your email, device ID, activation code, and app metadata may be sent to Firebase Cloud Functions. These services are operated by Google and may process data on servers located in the United States or other regions. Sharing of Information We do not sell your personal information. We share information only as necessary with our service providers (e.g., Firebase by Google) to operate authentication, licensing, and content services. We may disclose information if required by law, to protect the security and integrity of our services, or to protect our rights or the rights of others. Your Choices and Controls • Account Access: You can sign out at any time. You can also request account deletion by contacting us at [support email]. • Device Management: If you reach your device limit, you may deactivate an old device and activate a new one. The app offers tools and/or support to help with device deactivation. • Local Data Management: You can clear cached data and local archives from the app’s Utilities menu. Deleting the app will remove local data stored on your device. Data Retention • On-Device: Local data remain on your device until you delete them or uninstall the app. • Licensing: Device IDs and entitlements persist as long as your license is active or until you deactivate the device. Activation codes (if used) remain in Keychain until you remove them or reinstall the app. • Cloud Services: If application Authentication is used, records and any data you explicitly upload to the cloud are retained in our Firebase project as necessary for app functionality and compliance, or until we delete them in response to your request where applicable. AI Processing Vidicus EMS Trainer uses third-party artificial intelligence services to generate training content. When you submit a prompt or request a training case, your input is transmitted from the app through a Vidicus-operated proxy service to OpenRouter (openrouter.ai), which routes your request to one of several AI model providers (including OpenAI, Google, and DeepSeek, depending on the model selected). Vidicus does not store or log the content of your prompts or the AI-generated responses. However, your inputs are subject to the privacy policies and terms of service of OpenRouter and the underlying model providers. We recommend you do not include real patient names, dates of birth, or other personally identifiable information in training prompts. You can review OpenRouter's privacy policy at: openrouter.ai/privacy. Security We use reasonable administrative, technical, and physical safeguards to protect your information. Sensitive licensing data are stored in the system Keychain when available. No method of transmission or storage is 100% secure; we cannot guarantee absolute security. Children’s Privacy Vidicus™ Software is intended for professional use. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us so we can delete it. Changes to this Policy We may update this Privacy Policy from time to time. We will post the updated version in the app or on our website with a new Effective Date. Contact Us If you have questions about this Privacy Policy or wish to exercise your privacy rights, contact: Email: info@vidicus.org Website: https://www.vidicus.org