ScanFlo

Legal

Privacy policy

Last updated: 15 July 2026 · ScanFlo ("we", "us").

What this covers

This policy describes how we handle personal data on scanflo.io and in the ScanFlo simulation platform. ScanFlo is an education product: it contains no patient data and connects to no clinical systems. All simulator images are synthetically generated from virtual cases.

Data we collect

Account data: name, email address, password (stored hashed), and institution where applicable.

Licensing data: plan, subscription state, and identifiers of the devices registered to your licence.

Learning data: cases completed, scans run, and skills progress — used to show your progress and, on institutional plans, to give your instructors cohort visibility.

Payment data: processed by our payment providers (e.g. Stripe internationally, Razorpay in India). We never store card numbers.

Technical data: standard server logs (IP address, browser type, timestamps) for security and reliability, and privacy-conscious product analytics.

How we use it

To provide and license the platform, show learning progress, provide instructor dashboards on institutional plans, process payments, provide support, secure the service, and send service communications. We send marketing email only with your consent, and every such email has an unsubscribe link.

We do not sell personal data, and we do not use learner data for advertising.

Sharing

We share data only with: payment processors (to take payment), infrastructure providers (to run the service — e.g. AWS), your institution's designated instructors and administrators (institutional plans only, limited to learning progress), and authorities where the law requires it.

Retention & deletion

Account data is kept while your account is active. You can request deletion of your account and associated personal data at any time by writing to privacy@scanflo.io; we delete or anonymize within 30 days except where law requires longer retention (e.g. invoicing records).

Your rights

Depending on your jurisdiction (including GDPR where applicable), you may have rights to access, correct, export, restrict or delete your personal data, and to object to processing. Contact privacy@scanflo.io to exercise them.

International transfers

Our infrastructure is hosted on AWS. Where personal data is transferred across borders, we rely on appropriate safeguards such as standard contractual clauses.

Contact