Privacy Policy

Android: FRCS Ortho Viva

Updated: 20 October 2026

This section applies to FRCS Ortho Viva on Android, including its free preview. Curitex LTD is responsible for the information described here. The Apple-specific section below applies to the iOS and macOS apps.

Practice information on your device

Practice answers, feedback, drafts, bookmarks and saved reports are stored on your device. You can delete individual reports or clear practice data in Settings. Exported or shared copies remain wherever you choose to save or send them, under that destination's controls.

AI feedback and examiner voices

With your permission, relevant answer text, fictional case information, questions and earlier session responses are sent securely through Curitex's service on Cloudflare to OpenAI for feedback and adaptive questions. Question text may also be sent to OpenAI to generate examiner speech. Subscription identifiers are not included in assessment prompts.

You can decline or withdraw AI permission in Settings. Withdrawal stops new AI requests and audio transcription; it cannot recall information already sent. You can delete feedback saved on your device separately.

Optional microphone use and transcription

With separate audio permission, live dictation records your speech into a private local audio file and streams audio through Curitex and Cloudflare to OpenAI to produce text while you speak. If live transcription is unavailable or disconnects, recording continues locally and the captured file can be uploaded for transcription after Stop or an explicit Retry. The live-audio permission covers both streaming and this recovery path.

Optional recorded-answer mode uses separate permission and uploads audio after Stop or an explicit Retry. Permission for recorded-answer mode alone does not grant live-streaming permission. In either mode, you can review and edit the transcript before separately submitting it for feedback. You can type instead.

Temporary answer audio is deleted from the app after successful transcription, explicit Discard, withdrawal of audio or AI permission, or deletion of all practice data. Unfinished recordings expire and are deleted when the app next opens more than 24 hours after they were saved. Leaving or backgrounding the app stops capture and saves captured audio without starting a new upload; an upload already requested may finish.

Optional camera self-review

Camera preview, silent video recordings and limited framing observations remain on your device unless you choose to export or share a recording. Camera frames and recordings are not sent to OpenAI for assessment. Camera appearance is not used to infer clinical competence, professionalism, emotion or confidence. Camera recording is separate from answer-audio capture.

Google Play subscriptions and access

Google Play handles subscriptions and payments. Curitex receives the purchase token, product identifier and a random installation identifier to verify access with Google's Developer API and acknowledge confirmed purchases. Curitex does not receive your payment-card details, Google password or a separate Google sign-in profile.

The Android app does not create a separate Curitex account. A random installation identifier also supports preview eligibility, temporary access and misuse prevention. Authorised reviewers or testers may enter a private access code, which is checked by the server and can be revoked. Deleting practice data or the app does not cancel a subscription or erase Google's billing records. Manage or cancel renewal through Google Play subscriptions.

Service providers, technical information and retention

Cloudflare hosts the website and gateway; OpenAI processes the text and audio needed for the AI features you choose; Google provides Play billing and purchase verification. Our email provider processes support correspondence. Network requests expose technical information such as IP addresses and request times to service providers for delivery and security. The Android app includes no advertising or analytics SDK.

The Curitex gateway does not store answer audio, transcripts or AI feedback in its application database, and does not retain raw purchase tokens there. It keeps protected identifiers and limited access-verification, request-count and usage-control records. Ordinary request and daily-usage records expire within approximately one day; preview eligibility and per-question allowance records expire within 30 days. Expired records are removed when cleanup runs, rather than automatically at the instant of expiry.

Cloudflare, OpenAI and Google may process service and security information under their applicable settings and policies. This is not a promise of zero retention by those providers. Curitex requests that generated assessment responses are not stored as retrievable response history. OpenAI states that API content is not used to train its models by default; standard abuse-monitoring retention can apply to relevant API services. See OpenAI's API data controls, Cloudflare's privacy policy and Google's privacy policy.

Providers may process information outside the United Kingdom. Applicable provider contracts and transfer safeguards govern that processing; UK-only storage is not promised. Relevant terms include the OpenAI data-processing terms and Cloudflare data-processing terms. Contact us for information about applicable safeguards.

Your choices, rights and privacy requests

We process information needed to deliver requested practice and subscription features to perform our contract with you, rely on consent for optional AI sharing and capture features, and use legitimate interests to secure the service, prevent misuse and respond to support enquiries. Legal obligations may also require certain records. Withdrawing consent does not affect earlier lawful processing.

Use Settings to withdraw AI or audio permission and delete local practice data; camera and microphone permissions can also be changed in Android settings. You may request access, correction, deletion, restriction, portability or objection where applicable by emailing curitexco@gmail.com. We may need proportionate verification. Support correspondence is retained while resolving an enquiry and where needed for related disputes or legal obligations. Limited security records, provider backups and independently exported copies may remain as described above.

You may complain to the UK Information Commissioner's Office. Automated educational feedback does not determine your actual examination result, registration or employment. Curitex does not sell practice answers or recordings or use them for advertising. We will update this section when Android data handling changes and seek renewed permission where required.

Back to policy overview

Apple apps: iOS and macOS

The following section applies to the Apple versions. Android users should read the Android section above.

Information you provide and why we use it

• Practice content: your typed or transcribed answers, the selected scenario, questions, earlier answers in the session, assessment feedback and session results. This supports adaptive questions and educational feedback.
• Account information: when you use Sign in with Apple, Apple supplies an app-specific account identifier and credentials used to verify your sign-in. Apple may also supply your name or chosen email address if requested and authorised. We do not receive your Apple password. Our account service uses a protected identifier and stores an encrypted Apple authorisation token to maintain and revoke access.
• Subscription information: Apple transaction and product identifiers, entitlement status and expiry, an account-to-purchase identifier and a random installation identifier. These let us check access and prevent misuse. Apple handles payment details; we do not receive your card number.
• Technical and support information: network requests expose information such as IP addresses and request times. We use technical records to deliver and protect the service. If you contact us, we use your message, contact details and any attachments to answer your enquiry.

Your free short case

You can try one short case without an account or payment. Before AI assessment, FRCS Viva Masters separately asks permission to send your sample-answer transcript and case context through Cloudflare to OpenAI. The sample supports typed or spoken answers and optional on-device camera coaching. Sample answers, feedback and any sample camera recording remain on your device.

Apple speech recognition produces the spoken-answer transcript and may process audio on Apple’s servers depending on the device, language and service availability. Medical vocabulary from the current fictional case is supplied to improve recognition. The app may suggest conservative corrections for likely clinical terms; you can inspect, edit or undo them before submitting. Raw microphone audio and camera video are not sent to OpenAI.

A random installation identifier and a separate random access credential protect the free allowance. The service keeps protected identifiers, eligibility and per-question request counts for up to 30 days, removed when cleanup runs. It does not keep a server-side copy of sample answers or feedback. This limit is tied to the app installation, not a verified person's identity.

Use Free-case privacy to withdraw AI permission or delete the local sample answers and feedback. Deleting the sample does not reset the allowance; limited eligibility/security records can remain for the period above. Consent for the signed-in service is managed separately in Account & privacy.

AI assessment and examiner voices

For online AI features, relevant practice text passes through our service hosted on Cloudflare to OpenAI’s API. An assessment request can include the scenario, examiner question, marking criteria, your answer and relevant earlier responses. A session review can include answer evidence and assessment results. Natural examiner speech sends the words to be spoken to OpenAI to generate audio.

Your candidate camera video and raw microphone recording are not sent to OpenAI by these features. Subscription identifiers and Apple sign-in credentials are not included in the assessment prompt. Text that you put into an answer can still identify you or someone else, so use fictional, non-identifying content.

AI processing requires your permission. You can decline or withdraw permission for future AI use; online assessment and natural AI voices then become unavailable. Withdrawing permission cannot recall information already sent. If you need help changing your choice in your app version, contact us.

OpenAI states that API content is not used to train its models by default. Its standard abuse-monitoring logs may contain prompts and responses and are normally retained for up to 30 days, with exceptions for legal or safety reasons. Our managed assessment service requests that responses are not saved as retrievable response history. This does not remove provider security logs. See OpenAI’s API data controls.

Microphone, speech recognition and camera

The microphone turns your spoken answers into text using Apple’s speech-recognition services. Depending on your device, language and Apple’s service availability, recognition may use Apple’s servers. We do not promise that transcription always stays on your device. Your transcribed answer may subsequently be sent for AI assessment as described above. See Apple’s privacy information.

Camera preview, video recording and repeated observations of visible position and movement are processed on your device. Recordings are stored locally for your own review. This is video-only recording; it is separate from the microphone used for transcription. Camera frames and recordings are not uploaded to our AI assessment service.

Camera coaching can describe framing, head and upper-body position and visible gestures. It does not identify you using your face, infer emotions or personality, or decide whether you are a competent or professional surgeon. It does not change the clinical assessment mark. Lighting, mobility, disability and camera placement can affect observations.

You control camera, microphone and speech-recognition permissions in your device’s privacy settings. Turning them off may prevent features that need them. Exporting or sharing a report or recording sends it to the destination you choose, under that service’s own policies.

Lawful grounds for processing

We use information needed to provide your requested account, subscription and practice service to perform our contract with you. We rely on your consent for optional AI sharing and optional capture features, and on legitimate interests in securing the service, preventing abuse and handling support enquiries. We may also process records where necessary to meet legal obligations. If a feature relies on consent, you can withdraw that consent without affecting earlier lawful processing.

Who receives information

Cloudflare hosts our website and managed service. OpenAI processes text for the AI features you choose. Apple processes sign-in, purchase verification, payments and speech recognition where applicable. Our email provider processes support correspondence. We may disclose information where required by law or necessary to protect legal rights. We do not sell your practice answers or recordings or use them for advertising.

These providers may process information outside the United Kingdom. Relevant provider contracts and applicable transfer safeguards govern that processing; UK-only storage is not promised. You can contact us for information about applicable safeguards. Provider terms include the OpenAI data-processing terms and Cloudflare data-processing terms.

How long information is kept

• Local practice records: saved reports, answers, feedback and recordings remain on your device until you delete them. Device backups and copies you export may remain separately under your device settings or the recipient’s control.
• Managed service: our service does not store a server-side library of your answer text, recordings or AI feedback. It keeps protected usage and request records to enforce limits and avoid duplicate requests. Ordinary request and daily-usage records expire within approximately one day; free-case eligibility and per-question allowance records are kept for up to 30 days. Records are removed when cleanup runs; expiry does not itself erase a database row.
• Accounts: the account record and encrypted Apple authorisation token are retained while your account is active. Sign-in sessions expire after 30 days and can end earlier on sign-out or revocation. Account deletion removes the active account records after revocation with Apple succeeds. A pending revocation may retain the necessary encrypted token until it can be completed.
• Provider and security records: OpenAI’s retention is described above. Hosting security logs and provider backups follow the provider’s settings and retention arrangements; deletion from active app records does not instantly erase those copies.
• Support and legal records: we retain correspondence while resolving your enquiry and, where necessary, to handle related disputes or meet legal obligations. Contact us to request deletion or details of the applicable retention period.

Deletion, control and your rights

You can delete saved assessments and their associated recordings in the app. To request deletion of your Curitex account or other information held by us, email curitexco@gmail.com. Where your app version offers an account-deletion control, you can use that too. We may need proportionate verification before acting on an account request. Short-lived security records, legally required records, backups and independently exported copies may remain as described above.

Deleting the app or your Curitex account does not cancel an Apple subscription. Manage or cancel it separately through Apple’s subscription settings. Apple also controls information held in your Apple account.

Subject to applicable law, you may ask to access, correct, erase, restrict or receive a portable copy of your personal information, object to processing based on legitimate interests, and withdraw consent. You can complain to the UK Information Commissioner’s Office. You may contact us first, but do not have to.

The app provides automated educational suggestions. These do not determine your actual examination result, professional registration or employment, and are not decisions with legal or similarly significant effects.

Website visits and changes to this policy

The website is informational and its hosting provider processes requests to deliver and protect it. The shared website styling loads Google Fonts, which sends a technical request to Google, including your IP address. See Google Fonts privacy information. External links and email enquiries are handled by the services you choose.

FRCS Viva Masters is intended for adult surgical trainees and healthcare professionals, not children. We will update this page when the service or its data handling changes and seek renewed consent when required.