Privacy policy

Disruptive Medical Simulators S.L. · Last updated: 15 August 2026

This policy covers this website (dmedicalsim.com) and the SmartJelly virtual-reality training application for Meta Quest. Sections 1–3 cover the website; section 4 covers the application, including what it collects and how to have that data deleted.

1. Who we are

Disruptive Medical Simulators S.L. ("we", "us") is the data controller for this website and, in the role described in section 4.4, the processor for data collected by the SmartJelly application. Our contact details are at the end of this page.

2. What this website collects

This is a static informational website. We do not use tracking cookies, advertising cookies, analytics profiling, or third-party trackers, and we do not build user profiles.

Our hosting provider (Vercel Inc.) automatically processes basic technical request data — such as IP address, browser user-agent, and the page requested — in server logs, for the purposes of delivering the site securely and preventing abuse. This is based on our legitimate interest in operating a secure website, and such logs are retained only for a short period by the provider.

3. If you contact us

If you email us, we process the contact details and content of your message solely to respond to your enquiry and, where relevant, to manage a business relationship. We keep this correspondence only as long as necessary for that purpose or as required by law.

4. The SmartJelly application

SmartJelly is a virtual-reality ultrasound-training simulator for Meta Quest. It is licensed to organisations (hospitals, clinics, universities and training providers), which issue access to their own trainees using a licence code. It is a training tool — not a medical device — and no real patient is ever involved.

4.1 What the application collects

SmartJelly records training-usage data only, and it is pseudonymous: records are linked to a licensed seat and to the licensing organisation, never to your name.

DataWhy
A random identifier generated by the app on first run, plus a seat reference and a per-session identifierEnforce licensed seats; group events belonging to one training session
Headset model / device label and application versionSupport and troubleshooting
Licence activation timestampManage seat allocation for the licensing organisation
Session start, end and durationMeasure training engagement
Exercise results: level completed, attempts, time on task, score and starsMeasure skill progress and exercise difficulty
Knowledge-test results before and after trainingMeasure learning improvement
Optional profile: profession category and years of experienceGroup results by experience level
Optional satisfaction ratingImprove the product

The random identifier is created by the application itself and stored on the headset. It is not a hardware serial number or advertising identifier, and it is regenerated if the application's data is cleared or the app is reinstalled.

4.2 What the application does not collect

We do not collect your name, email address, date of birth or contact details; no audio, microphone, video, photograph, camera or room-scan data; no hand, eye, face or other biometric data; no location data; and no patient or clinical data of any kind. The application does not contain advertising and does not sell or share data with advertisers.

4.3 Legal basis

Processing is carried out for professional training delivered by the licensing organisation, and is based on that organisation's legitimate interests in delivering and evaluating the training it provides, or on its contract with its trainees. Because the data is pseudonymous and limited to training performance, the application does not present a separate consent prompt; if your organisation requires consent, it collects that from you directly as part of enrolling you in the training.

4.4 Roles and who sees what

The licensing organisation (your employer or training provider) is the data controller for its trainees; we act as its processor under a written data-processing agreement. Aggregated training statistics are available to us and, on request, to the licensing organisation. Organisation administrators manage their own licence codes and seats; they do not receive individual trainee analytics through the administration tool.

4.5 Storage, security and retention

Data is transmitted over HTTPS and stored on managed infrastructure (Supabase), hosted in the European Union unless otherwise agreed with the licensing organisation. Licence codes are stored only as salted hashes, never in plain text. Usage records are retained for a maximum of 24 months, after which they are deleted or irreversibly aggregated.

4.6 How to delete your data

You can ask us to delete the data associated with your use of SmartJelly at any time, free of charge. Email info@dmedicalsim.com with the subject "SmartJelly data deletion" and include your licence code (and, if you have it, the seat or activation reference shown in the app). Because the data we hold is pseudonymous, the licence code is what lets us locate the correct records — we cannot find them from a name alone. We will delete the matching activation and all associated usage records, and confirm to you by email, within 30 days.

You can also remove the local copy at any time by uninstalling SmartJelly or clearing its data from the headset; this deletes the on-device identifier, licence token and stored progress. Doing so does not by itself erase records already sent to us — use the email route above for that.

5. Sharing and transfers

We do not sell personal data. Data is shared only with service providers necessary to operate the site, the application and our business (for example our hosting, backend and email providers), under appropriate contractual safeguards. Where a provider processes data outside the European Economic Area, the transfer relies on the applicable safeguards permitted by the GDPR.

6. Your rights

Under the GDPR you may request access to your personal data, its rectification or erasure, restriction of or objection to processing, and data portability, and you may withdraw consent where processing is based on it. To exercise these rights, contact us at the address below — for application data, see section 4.6, and where the licensing organisation is the controller you may also contact it directly. You also have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD).

7. Children

SmartJelly is a professional training tool intended for adults. It is not directed at children, and we do not knowingly collect data from them.

8. Changes

Any material change to this policy will be published here with an updated date.

9. Contact

Legal name
Disruptive Medical Simulators S.L.
VAT / CIF
B75587709
Address
Calle Acequia del Real n.º 2, Bloque 1, Escalera 2, Bajo B
29651 Mijas Costa, Málaga, Spain
Email
info@dmedicalsim.com