Privacy notice

Effective October 16, 2026. This notice covers the Resident Instinct synthetic learning pilot at medinstinct.us.

What this version collects

The pilot signup stores your email, training stage, preferred messaging channel, consent version, and signup timestamp. We use this information to organize the pilot and contact you about participation. No phone number is requested by the website.

Messaging and learning history

When messaging is enabled, the service processes your provider message identifier, sender address, and message body to respond. Our application stores a keyed hash of your sender address, subscription status, selected synthetic exercise IDs, and timestamps. It does not store your raw incoming message or phone number. Reply STOP to opt out, START to rejoin, or DELETE to remove your pilot learning history and subscription. Provider message IDs and cached educational replies are retained for up to seven days for retry handling, and are cleaned up when new messages arrive.

Do not submit patient information

This pilot accepts only fixed synthetic exercises. Do not send patient notes, identifiers, images, recordings, or private clinical information. It is not approved for patient data. A warning or keyword filter cannot guarantee de-identification.

Providers and infrastructure

The website runs on an AWS server. Messaging, once configured, uses Twilio and the carrier or WhatsApp network. Those providers process messages under their own terms and may retain content even when this application does not. HTTPS protects traffic in transit to the website.

Retention and choices

Pilot signup information is kept until the pilot ends or you request deletion. This preview has no advertising trackers, analytics cookies, or marketing pixels. Calendar reminders download to your own device. For signup access or deletion requests, reply to a pilot invitation. Before invitations are sent, the pilot operator must establish a monitored support address and deletion workflow.

Prototype limits

No claim of HIPAA compliance, institutional approval, or verified clinical decision support is made. Real-case intake requires a separate governance and security review.