Privacy Policy and Terms of Service
This page contains two documents: our Privacy Policy, which explains what information we collect and how we use it, and our Terms of Service, which are the rules for using CardioAI.
Privacy Policy
CardioAI Health ("CardioAI", "we", "us") provides structured cardiac CT training: courses, recorded and live lectures, teaching cases, schedules and feedback, at cardioai.health (the "Service"). This Privacy Policy explains what personal information we collect, why we collect it, who we share it with, and the choices you have. By using the Service you agree to the practices described here.
In short:
We collect only what we need to run your account and your courses. We do not sell your personal information, and we do not use advertising or tracking cookies. If you sign in with Google, we receive only your name, email address and Google account ID, and use them only to find or create your CardioAI account.
1. Information we collect
Information you give us
- Account details: your name, email address and a password (stored only as a one-way hash, never in readable form).
- Registration details when you enrol in a course: phone and WhatsApp numbers, country, city, institution, specialty, how you will attend, and the status and amount of your payment.
- Faculty applications: your name, email, specialty, institution, country, years of experience, notes on your credentials, and any credential file you upload.
- Messages and requests: messages between learners and faculty, and support requests including any message or screenshot you attach.
- Teaching cases and learning work: your answers, findings and reports on cases, and feedback you receive.
Information created as you use the Service
- Course progress: which lectures, resources and cases you have opened or completed, your position in a lecture, and items you mark as done in the syllabus.
- Certificates and scores you earn.
- Sign-in records needed to keep your session secure.
Information from Google, if you choose "Continue with Google": your name, email address (which Google has verified) and your Google account ID. We do not receive your Google password, contacts, calendar, email content or any other Google data.
Payment information. Payments are handled by Stripe. We do not see or store your card number. We keep a record that a payment was made, its amount, and a Stripe reference for it.
2. How we use your information
- To create and secure your account, verify your email address and sign you in.
- To enrol you in courses, take payment, and give you access to the content you paid for.
- To show your progress, score your work, issue certificates and let faculty review your work.
- To send you messages about your account and courses, such as verification codes, password resets, receipts, schedule changes and course updates.
- To answer support requests and keep the Service safe, prevent misuse and fix problems.
- To meet our legal, tax and accounting obligations.
We do not sell your personal information, and we do not share it for advertising.
3. Sign in with Google
If you use "Continue with Google", Google tells us who you are so you do not need a separate password. We use your name, email and Google account ID only to find your existing CardioAI account or create a new learner account for you. We do not use this information for advertising, and we do not sell it or transfer it to others except as needed to run the Service, to follow the law, or as part of a business transfer.
CardioAI's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
You can stop using Google sign-in at any time, and you can remove CardioAI's access in your Google Account settings under "Sign in with Google". Contact us if you want your account to use a password instead.
4. Who we share information with
We share information only with the companies that help us run the Service, and only what they need:
- Hosting and storage (Amazon Web Services) for our servers and for course files.
- Network and security (Cloudflare), which delivers our website.
- Payments (Stripe).
- Email delivery providers, so we can send you account and course emails.
- Imaging viewer (Helical Analytics). When you open a case in the viewer, we send the case ID and a random reference for your account. We do not send your name or email.
- Google, if you use Google sign-in (see section 3).
Some cases link out to third-party imaging platforms such as Cleerly and Circle CVI. Those sites are run by other companies and have their own privacy policies. We do not send them your account information when you follow a link.
Course faculty can see your name, email, progress and case work for the courses they teach. We may also disclose information if the law requires it, to protect people's safety or our rights, or in connection with a merger or sale of our business.
5. Cookies
We use only the cookies needed to keep you signed in and keep your session secure. We do not use advertising, analytics or tracking cookies. If you block these cookies, you will not be able to sign in.
6. Patient information
CardioAI is an educational service. Teaching cases are expected to be de-identified. Please never enter, upload or send patient names, dates of birth, record numbers or any other information that could identify a patient. If you believe a case contains identifying information, contact us at once and we will remove it.
7. How long we keep information
We keep your information while your account is active. If your account is deleted, it is removed from our systems after a short recovery period of about three days. We may keep payment, registration and certificate records for longer where we need them for tax, accounting, legal or fraud-prevention purposes. Backups are overwritten on a regular schedule.
8. Security
We protect your information with encryption in transit, hashed passwords, private file storage and access controls. No system is completely secure, so we cannot guarantee absolute security. Please choose a strong password and keep it private.
9. Your choices and rights
- Access and correction: you can ask for a copy of your information, or ask us to correct it.
- Deletion: you can ask us to delete your account and information, subject to the records we must keep (section 7).
- Emails: you can opt out of non-essential emails with the link in the email. We will still send essential messages about your account.
To use any of these rights, email support@cardioai.health. We may need to confirm it is you before we act.
California and other U.S. state residents. Depending on where you live, you may have the right to know what personal information we hold, to have it deleted or corrected, and not to be discriminated against for using these rights. We do not sell or share personal information for advertising. You can use these rights by emailing us at the address above.
10. Children
The Service is for medical professionals and trainees and is not directed to anyone under 18. We do not knowingly collect information from children. If you think a child has given us information, contact us and we will delete it.
11. International users
Our servers are in the United States. If you use the Service from another country, your information will be transferred to and handled in the United States.
12. Changes to this policy
We may update this policy. When we make a significant change, we will update the date at the top and, where appropriate, notify you by email or in the Service. Using the Service after a change means you accept the updated policy.
13. Contact us
CardioAI Health
Email: support@cardioai.health
Website: https://cardioai.health
Terms of Service
These Terms of Service ("Terms") are an agreement between you and CardioAI Health ("CardioAI", "we", "us") for your use of cardioai.health, our courses and everything else we provide (the "Service"). Please read them carefully. By creating an account, signing in, registering for a course or otherwise using the Service, you agree to these Terms and to our Privacy Policy. If you do not agree, do not use the Service.
1. Who may use the Service
You must be at least 18 years old and able to enter into a binding agreement. The Service is intended for medical professionals and trainees. You are responsible for making sure that your use of the Service is lawful where you live and work.
2. Your account
- Give us accurate information and keep it up to date.
- Keep your password, and your Google account if you sign in with it, secure. You are responsible for everything done through your account.
- One account belongs to one person. Do not share your login or let anyone else use it.
- Tell us promptly at support@cardioai.health if you think your account has been used without your permission.
3. Courses, access and payment
- Your access to a course is for the course you registered for and for the period and format stated at registration.
- Prices and what is included are shown when you register. Payments are processed by Stripe, and you also agree to Stripe's terms when you pay.
- Refunds, transfers between course dates, and cancellations are handled as described when you register or, if not stated there, by contacting support@cardioai.health. Unless the law gives you a right to one, a payment is not refundable once you have been given access to the course content.
- We may change course schedules, speakers, content and formats where reasonably needed, and we will tell you about important changes.
- Certificates are awarded only when the requirements of the course are met. A certificate shows that you completed an educational course. It is not a licence, a credential from a medical board, or a guarantee of competence.
4. Educational use only; not medical advice
The Service is for education and training. Cases, images, reports, scores and feedback are teaching materials. They are not medical advice and must not be used to diagnose, treat or make decisions about any patient. You are always responsible for your own professional and clinical judgment.
5. Acceptable use
You agree not to:
- copy, record, download, redistribute, resell or publish course content, lectures, cases, images, recordings or answer keys, except where the Service clearly allows it for your own study;
- share your login, or let others view content you have paid for;
- upload or send patient-identifiable information, or any content you do not have the right to share;
- try to get around payment, access limits or security, probe or interfere with the Service, or use bots or scraping tools;
- harass other users or faculty, or use the Service for anything unlawful.
We may suspend or end access if these rules are broken.
6. Content and ownership
The Service, its courses, cases, lectures, text, images, design and software belong to CardioAI Health or its licensors and are protected by law. We give you a limited, personal, non-exclusive, non-transferable licence to use them for your own education while your access is active. Nothing in these Terms transfers any ownership to you.
If you give us content, such as case submissions as faculty, answers, messages or feedback, you keep your rights in it. You give us a licence to host, display and use it as needed to run, teach with and improve the Service. You promise that you have the right to give us that content and that it contains no patient-identifiable information.
7. Third-party services
The Service works with other companies' products, including Stripe, Google sign-in, the Helical Analytics imaging viewer, and external imaging platforms such as Cleerly and Circle CVI. They are governed by their own terms and privacy policies, and we are not responsible for them.
8. Faculty
If you teach or submit cases as faculty, you also agree that your cases are your own work or that you have permission to use them, that they are properly de-identified, and that we may review, edit, approve, reject or remove them.
9. Suspension and ending your account
You may stop using the Service at any time and ask us to delete your account. We may suspend or end your access, with or without notice, if you break these Terms, if we are required to by law, or if your use puts others or the Service at risk. Sections that by their nature should continue, such as ownership, disclaimers and limits of liability, will continue after your account ends.
10. Disclaimers
The Service is provided "as is" and "as available". To the fullest extent the law allows, we do not make any warranties, express or implied, including about fitness for a particular purpose, accuracy of content, or uninterrupted or error-free operation. We do not guarantee any particular result, such as passing an exam or gaining a qualification.
11. Limit of liability
To the fullest extent the law allows, CardioAI Health and its team, faculty and suppliers are not liable for any indirect, incidental, special, consequential or punitive damages, or for lost profits, data or goodwill, arising from your use of the Service. Our total liability for any claim is limited to the amount you paid us for the course the claim relates to in the 12 months before the claim. Some places do not allow these limits, so they may not apply to you in full.
12. Changes to these Terms
We may update these Terms. When we make a significant change, we will change the date at the top and, where appropriate, tell you by email or in the Service. If you keep using the Service after a change, you accept the new Terms.
13. Governing law
These Terms are governed by the laws of the United States and the state in which CardioAI Health is organized, without regard to conflict-of-law rules. Any dispute will be brought in the courts located in that state, and you agree to their jurisdiction, unless the law requires otherwise.
14. Contact
Questions about these Terms or about the Privacy Policy? Email support@cardioai.health.