Privacy Policy

Version 1.0 — last updated 18 June 2026

Bleep64 Ltd ("Bleep64", "we", "us") operates an AI clinical simulation platform for medical students and institutions. This policy explains what personal data we collect when you use Bleep64, how we store and protect it, and the rights you have over it.

Bleep64 Ltd is the data controller for the personal data described here. We are registered in England and Wales (company number 16917136), registered office 32-38 Leman Street, London, England, E1 8EW. For any privacy query, or to exercise your rights, contact us at talvin@bleep64.com.

1. Who this applies to

This policy applies to anyone who creates an account and uses Bleep64. The platform is intended for users aged 18 and over.

2. What data we collect

Account data. When you create an account we collect your name, email address, and the institution or medical school you identify. We assign each account a system user ID and a randomly generated pseudonymous username that is not linked to your name.

Simulation data. When you use the platform we generate and store:

  • Transcripts of your simulated clinical conversations (the dialogue between you and the simulated patient or consultant).
  • Timestamps for sessions and case completion.
  • Case and station outcomes, including completion status, scores, and structured feedback.
  • Survey responses, where you choose to provide feedback.

Transcripts contain the dialogue only. They do not embed your name or email; your identity is held separately and linked by your internal user ID.

Usage analytics. We collect data about how the platform is used, such as activity and engagement events, through our analytics provider (PostHog). Non-essential analytics are used only where you have given consent.

3. How we use your data

We use your data to:

  • Provide the simulation service, including generating responses, scores, and feedback.
  • Track your progress and present it back to you.
  • Maintain the security and reliability of the platform.
  • Improve the platform, its clinical content, and its safety.
  • Conduct research, where you have separately consented and subject to the relevant ethics approvals.

We do not sell your personal data.

4. Legal basis

Where UK and EU data protection law applies, we rely on: performance of our contract with you (to provide the service); your consent (for non-essential analytics and for research participation); and our legitimate interests (to secure and improve the platform). Where South African data protection law (POPIA) applies, we process your data on equivalent lawful grounds, including your consent.

5. Where your data is stored and how we protect it

Your data is stored in a managed PostgreSQL database (Supabase) hosted in the European Union (London region).

Security controls include:

  • Encryption of data at rest and in transit.
  • Row-level security, so access to records is restricted by policy rather than open at the database level.
  • Backend-mediated access only. The application does not connect to the database directly from your browser, and access credentials are held on our servers, not exposed to the client.
  • Platform-level logging of database and authentication activity.

6. International transfers

If you access Bleep64 from outside the United Kingdom or European Union, including from South Africa, your data is transferred to and stored in the EU (London region), where it is protected to UK and EU data protection standards. Where we engage providers that process data on our behalf, we do so under written agreements requiring appropriate safeguards.

7. Third parties who process data for us

We use a small number of trusted providers to operate the platform. These currently include:

  • Supabase, for database and authentication (EU region).
  • ElevenLabs, for voice-based simulation.
  • AI model and inference providers, to generate simulated responses and feedback.
  • PostHog, for product analytics.
  • Cloud hosting providers (Vercel and Render).

Each processes data on our behalf under terms requiring them to protect it and use it only for the purposes we specify.

8. Data retention

We keep your data for as long as your account is active. Where data is used for a research study, it is retained for the period agreed in the study protocol and then deleted or archived. You can ask us to delete your data at any time (see your rights below).

9. Your rights

You have the right to access the personal data we hold about you, to correct it, to request its deletion, to restrict or object to its processing, to data portability, and to withdraw consent at any time. You also have the right to lodge a complaint with a data protection regulator (the Information Commissioner's Office in the UK, or the Information Regulator in South Africa). To exercise any of these rights, contact us at talvin@bleep64.com.

10. Cookies and analytics

We use essential cookies needed to run the platform, and non-essential analytics cookies that are loaded only with your consent. You can manage your analytics consent at any time.

11. Changes to this policy

We may update this policy. When we do, we will change the version number and date at the top. For material changes affecting how we use your data, we will give notice through the platform.

12. Contact

For any question about this policy or your data, contact talvin@bleep64.com.