Privacy

This page explains what information OSCR collects, how it is used, who it is shared with, and what choices you have.

Last updated October 2026

Who we are

OSCR is operated by Before Inc., an independent company. OSCR is not affiliated with, endorsed by, or operated on behalf of any medical school, hospital, or health system, and no institution receives access to your sessions through us.

Information we collect

By default, OSCR does not collect information that identifies you. No account is required and we do not ask for your name.

• Session content. The messages you send during a case, the investigations you order, and the feedback generated at the end of the session.
• Institution. Optional. Used only to understand where interest in OSCR is coming from.
• Usage data. Which case was opened, session duration, and whether the case was completed. Collected in aggregate and not linked to an identified individual.
• Email address. Collected only if you provide it to receive updates. You may unsubscribe at any time.

Voice sessions

If you complete a case using voice, your speech is transcribed so that the simulation can respond to it. REPLACE-WITH-VOICE-POLICY: state whether audio recordings are retained, for how long, and which provider processes them.

AI processing

OSCR uses a large language model provided by a third party. To generate the responses of the nurse, patient, and attending, and to produce your feedback, the content of your session is transmitted to that provider. REPLACE-WITH-PROVIDER-TERMS: identify the provider and state whether session content may be used to train their models.

Real patient information

All cases in OSCR are fictional. Do not enter information relating to a real patient, including information from which a patient could be identified, and including information you believe to be de-identified.

OSCR is not a HIPAA-covered service and is not a secure environment for protected health information. It should not be used to work through an active clinical case. If information of this kind has been entered, contact us and we will delete the session.

Research

Information collected through OSCR may be used in educational research. Research participation is separate from use of the product and requires your explicit consent.

• If you do not opt in, your sessions are not used in any study.
• If you opt in, the scope of the study will be described to you at that time, and you may withdraw your consent later.
• Research involving identifiable information is subject to institutional review board approval before it begins.

Service providers

We use third-party providers for website hosting, model inference, and usage analytics. These providers receive only the information required to perform those functions. We do not sell personal information, we do not serve advertising, and we do not share session content with your institution.

Data retention

REPLACE-WITH-RETENTION: state how long session data is retained and what happens to it at the end of that period.

Your choices and rights

• You may use OSCR without providing any information about yourself. This is the default.
• You may request deletion of a specific session, or of all information associated with you, by emailing hello@tryoscr.com.
• You may unsubscribe from email updates using the link in any message.
• You may withdraw from research at any time without affecting your use of OSCR.

Residents of California, the United Kingdom, and the European Economic Area may have additional rights regarding access to, correction of, and deletion of personal information. Requests may be sent to the address above.

Changes to this policy

If we make a material change to how information is collected or used, we will update the date at the top of this page and describe the change.

Contact

Questions about this policy may be sent to hello@tryoscr.com.