Privacy policy

ScanFlo is operated by Zeka Labs Private Limited, a company incorporated in India, which is the data controller for personal data processed on scanflo.io and in the ScanFlo platform. CIN: U86909DL2023PTC420560.

Registered office: Sector 13, Rohini, Delhi 110085, India.

Questions about this policy or your data: privacy@scanflo.io.

This policy describes how we handle personal data on scanflo.io and in the ScanFlo simulation platform. ScanFlo is an education product: it contains no patient data and connects to no clinical systems. All simulator images are synthetically generated from virtual cases.

Account data: name, email address, password (stored hashed), and institution where applicable.

Licensing data: plan, subscription state, and identifiers of the devices registered to your licence.

Learning data: cases completed, scans run, and skills progress. We use it to show your progress and, on institutional plans, to give your instructors cohort visibility.

Payment data: processed by our payment provider, Razorpay. We never store card numbers.

Technical data: standard server logs (IP address, browser type, timestamps) for security and reliability, and privacy-conscious product analytics.

To provide and license the platform, show learning progress, provide instructor dashboards on institutional plans, process payments, provide support, secure the service, and send service communications. We send marketing email only with your consent, and every such email has an unsubscribe link.

We do not sell personal data, and we do not use learner data for advertising.

We share data only with: payment processors (to take payment), infrastructure providers (to run the service, e.g. AWS), your institution's designated instructors and administrators (institutional plans only, limited to learning progress), and authorities where the law requires it.

Account data is kept while your account is active. You can request deletion of your account and associated personal data at any time by writing to privacy@scanflo.io; we delete or anonymize within 30 days except where law requires longer retention (e.g. invoicing records).

Depending on your jurisdiction (including GDPR where applicable), you may have rights to access, correct, export, restrict or delete your personal data, and to object to processing. Contact privacy@scanflo.io to exercise them.

Our infrastructure is hosted on AWS. Where personal data is transferred across borders, we rely on appropriate safeguards such as standard contractual clauses.

Data protection questions and rights requests go to privacy@scanflo.io. Anything else, including billing, reaches us at the address below.