NAC ReadyNAC ReadyLast updated: August 21, 2026 · Privacy Policy version 2026-08-21-r3.
NAC Ready is the registered business name under which this service operates in Ontario, Canada. Privacy questions and requests can be sent to support@nacready.com or through the privacy contact form.
Account data you give us: name, email, and (optionally) phone number, plus a securely hashed password. Usage data: your practice sessions, scores and feedback so we can show your progress. Payment data is handled by our payment provider — we do not store your card details.
NAC Ready is a simulated-patient study tool. Do not enter real patient identifiers or real patient health information. Remove names, health numbers, dates of birth, exact addresses, contact details and any other information that could identify a real patient or another person. If you accidentally submit such information, contact us promptly so we can assess and remove it.
To create and secure your account, provide the service and your progress, prevent duplicate/abusive accounts, process your subscription, and contact you about your account. We do not sell your personal data.
Improving the service. We also analyze practice data — station scores, your self-assessments, the feedback our examiner generates, and how individual questions and flashcards perform — to improve NAC Ready. This lets us find content that is unclear, incorrect, too easy or too hard, refine how scoring and feedback are produced, and make the product and the learning experience better for everyone who uses it. Where a question is reported, we use the report and any comment you send for the same purpose. This analysis is carried out in aggregate wherever possible, it is never used to make decisions about you outside the service, and nothing that identifies you is ever published.
We ask for consent to these purposes when you create an account and when you accept the Terms of Service and this Privacy Policy. You may withdraw consent by contacting the Privacy Officer. Withdrawal may mean that we cannot continue providing account, practice, support or subscription features that need the information.
Your account and progress data is stored on Cloudflare infrastructure (hosting and database), which is also where the service runs. Payment processing is handled by Stripe under its own privacy terms — we do not receive or store your card details. Depending on the provider and service configuration, information may be processed or stored outside Ontario or Canada. We use the providers described below to operate the service and require them to handle information under their applicable terms and safeguards.
When you use the simulated patient, examiner, feedback or speech features, NAC Ready sends only the information needed for that feature. This may include the text of your consultation, the case context, the text of a generated reply, or audio that you record for transcription. We do not attach your name, email or phone number to AI requests.
These functions may use Cloudflare (hosting and hosted AI services), Google (AI and speech services), or Groq (AI and speech services). The specific service used can depend on the feature, availability and configuration. Providers may process information outside Ontario or Canada under their own terms and safeguards.
For text-to-speech, the reply text may be processed by a cloud speech provider. If your device's built-in voice is used, the text is spoken locally by your browser or operating system. For speech-to-text, the audio is sent to a speech-transcription provider so it can be converted into text. We do not sell your personal data or use your practice sessions to train a third-party model.
We use a single essential cookie to keep you signed in. No third-party advertising cookies.
We keep account, practice, report and progress data while your account is active and for as long as reasonably necessary to provide the service, resolve disputes, prevent abuse, maintain security and meet legal or accounting obligations. Support and privacy requests are kept only as long as needed to respond and maintain a defensible record. Payment and transaction records may be retained for the period required for tax, accounting, fraud-prevention or legal purposes. Operational logs and AI-service telemetry are retained only as needed for security, reliability, abuse prevention and service improvement.
When information is no longer required, we delete, de-identify or anonymize it. Deletion from active systems may be followed by normal backup expiry, and information may be retained where a legal, security or financial record must be preserved. We use safeguards appropriate to the sensitivity of the information, but no internet transmission or storage system can be guaranteed completely secure.
You can request access to, correction of, deletion of, or an explanation of our handling of your personal information. You may also withdraw consent. Send the request to support@nacready.com or use the privacy contact form. We may ask for reasonable information to verify the request. We will explain if information must be retained for a legal, accounting, security or dispute-related reason.
Contact the Privacy Officer first so we can investigate and respond. If you believe your concern has not been resolved, you may contact the Office of the Privacy Commissioner of Canada. If we confirm a security incident involving a real risk of significant harm, we will take the steps required by applicable law, including notifying affected individuals and regulators where required.
We may update this policy when the service, providers or legal requirements change. The date and version at the top identify the current policy. Material changes will be posted here and, where appropriate, communicated through the account email.
Written privacy notices and formal correspondence may be sent to NAC Ready at 110 Marine Parade Dr, Suite 505, Toronto, ON M8V 0B6, Canada. Email and the privacy contact form are the preferred channels for privacy requests.