Privacy notice
In short: you can use the free version of Panum without signing in. Panum counts, without any identifier, when it is opened and any errors it hits, so we can see how it is used and fix problems. During the beta, two short, optional check-ins ask how you are finding it; your answers are anonymous and stored in London. If you buy the Expert version, you sign in with Apple or Google, and Paddle, our reseller, handles your payment. We never collect information about patients, and we never sell your data.
Who we are
Panum (formerly Motility Lab) is a virtual-patient simulator for learning eye-movement, lid and pupil examination. It is run by Iain Livingstone, trading as Livingstone Ophthalmic, a sole trader in Scotland, who is the data controller for the personal data described here. It is an independent product and is not provided by the NHS.
Based in Scotland, United Kingdom.
Contact: hello@panum.app
Registered with the Information Commissioner's Office: registration number ZC266999.
Using Panum without signing in
The free version needs no account. Our host keeps standard web server logs (IP address, browser type and pages requested) to run the website securely and see overall visitor numbers. Our lawful basis is legitimate interests.
Usage and error counts
So that we can see how many people use Panum, on what kinds of device, and fix faults, Panum sends two kinds of short, anonymous record to our database:
| What | Why | Lawful basis (UK GDPR) |
|---|---|---|
| When Panum is opened: the Panum build, which web address you used, which version you chose (generalist or expert), the type of device (for example phone or computer), the family of its operating system and browser (for example iOS and Safari, without version details), an approximate screen size band, and the time zone and language your device is set to. | To count use, see which devices and regions Panum reaches, and check that each new build works. | Legitimate interests in running and improving Panum. |
| If something goes wrong: the error message and the place in Panum's code where it happened, with the build, the type of device and the browser family. At most five per visit. | To find and fix faults. | Legitimate interests. |
These records contain no name, account, check-in code, IP address or full browser identifier, use no cookies, and are not linked to each other, to your check-ins or to an account. We use them only as counts and to fix problems, never to identify anyone.
The beta check-ins
Panum asks two short sets of questions during the beta: one when you first open it, and one after about 15 minutes of use. Each takes about a minute, and you can skip either. Each appears once on a device. The check-ins are never linked to an account, even if you later sign in.
| What | Why | Lawful basis (UK GDPR) |
|---|---|---|
| Your field and stage (for example, "Ophthalmology · Trainee"). | To show you the right questions and understand who finds Panum useful. | Legitimate interests in running and improving Panum. |
| Your answers: confidence ratings, or an expert's view of the tool, and any comments you write. | To find out what works and what doesn't, and fix it. | Legitimate interests. |
| A random code made on your device. | To link your two check-ins. It is not made from anything about you. | Legitimate interests. |
| Technical details of your device: its type, operating system and browser versions, screen size, graphics chip, the time zone and language it is set to, and how smoothly Panum ran. These are shown to you above the Send button. | To find and fix problems on particular phones, tablets and computers, and to see roughly where Panum is used. | Legitimate interests. They describe your device, not you. We never record your IP address in the check-ins or anything that could single out your device. |
| How long you have actively used Panum. | To understand how much use makes a difference. | Your consent: only if you tick "Help improve Panum". |
| Your name and grade or role. | To quote your comments, with your name, when we describe Panum. | Your consent: only if you tick the quote box. Otherwise we discard them. |
Please don't include any patient details, or anything that identifies you, in your comments. Panum uses a synthetic (computer-generated) patient only.
"Help improve Panum" (optional)
If you tick this box, we also record how long you actively use Panum, and your anonymous answers may inform teaching materials or write-ups about Panum. No one will be identifiable from anything we share. Leaving it unticked never limits what you can do in Panum, and your answers still help us improve it.
Signing in and buying the Expert version
This section applies from when the Expert version goes on sale. Until then, Panum has no sign-in and takes no payments.
| What | Why | Lawful basis (UK GDPR) |
|---|---|---|
| Your sign-in details from Apple or Google: an account identifier and your email address (which may be an Apple "Hide My Email" relay address if you choose). | To create your account and let you sign in. | Contract: we need it to provide what you have bought. |
| Your field and stage, and a record of what you agreed to at first sign-in (with the date and version). | To give you the right version of Panum and keep a record of your choices. | Contract, and our legal obligation to be able to show consent. |
| Your Expert access: which product you have, its status (for example active, cancelled or refunded), the renewal date, and the customer and subscription references Paddle gives us. | To unlock the Expert version for you, and end access if a purchase is refunded. | Contract. |
| Your email address, to contact you about your account and your access. | Service messages only, for example about a problem with your access or an important change to these terms. | Contract. We don't send marketing emails. |
| "Help improve Panum", if you tick it at sign-in: how you use Panum, linked to a code rather than your name. | To improve Panum; in anonymous form it may inform teaching materials or write-ups. | Your consent, which you can change in Settings at any time. |
Payments: Paddle
Our order process is conducted by our online reseller, Paddle.com, which is the Merchant of Record for all our orders. When you buy, you buy from Paddle, and Paddle collects your payment details, billing address and country to take payment and handle tax. Paddle is a separate data controller for that information under its own privacy notice. We never see or store your card details.
Paddle shares with us what we need to give you access: your email address, your country, what you bought, and its status. We pass Paddle a reference to your Panum account so the purchase reaches the right account.
Deleting your account
You can delete your account and data at any time from Settings, or by emailing us. This deletes your sign-in record, profile and Expert access records. Paddle keeps its own records of your purchase, as the seller, for its legal and tax obligations.
Who processes your data for us
- Supabase provides the database and sign-in service. Usage and error counts, check-in answers and account data are stored in Supabase's London (UK) region. Supabase is a US company, so limited technical support access from outside the UK may occur under the UK's approved safeguards for international transfers.
- IONOS hosts the website and forwards email sent to our panum.app address.
- Google, which provides the Gmail account where messages to hello@panum.app arrive.
Separate controllers we work with: Paddle (payments, as Merchant of Record), and Apple and Google for your sign-in, under their own privacy notices. Apple and Google may process data outside the UK under their own safeguards.
We do not sell your data, use advertising or tracking cookies, use third-party analytics, or share your data with your employer, course organisers or any training body.
Storage on your device
Panum keeps a few small items in your browser's storage: your settings (such as which version you chose), the random check-in code, which check-ins you have seen, how long you have used Panum, and, in the Expert version, a copy of the case content for up to a day so Panum keeps working if your connection drops. If you sign in, it also keeps your sign-in session so you stay signed in. Paddle's checkout may use its own cookies or storage while you pay, which are strictly necessary for the payment. None of these is used for advertising or third-party analytics, and they are removed if you clear your browser data.
How long we keep it
- Usage and error counts: up to 2 years, then deleted. Summary figures may be kept.
- Check-in answers and device details: until the beta has been evaluated and for up to 2 years afterwards, then deleted. Anonymous summary figures may be kept.
- Names given for quotes: until you ask us to remove them, or 2 years after the beta, whichever comes first.
- Account and Expert access records: while you have an account. If you delete your account, they are deleted. If an account has not been used for 3 years and has no active Expert access, we delete it.
- Emails you send us: as long as needed to deal with your message, and no more than 2 years after it is resolved.
- Server logs: according to our host's standard retention.
Deleting check-in answers
Because the check-ins and the usage and error counts are anonymous, we can't tell which records are yours, so we can't pick them out to delete once they are sent. If you left your name for a quote, email us and we will remove your name and stop using the quote.
Your rights
You can ask to see, correct or delete personal data we hold about you, or to receive a copy of it. You can also object to or restrict how it's used, and withdraw consent at any time. Email hello@panum.app and we will respond within one month. For payment records, contact Paddle at paddle.net.
If you're unhappy with how we've handled your data, you can complain to the Information Commissioner's Office: ico.org.uk/make-a-complaint, telephone 0303 123 1113.
Who this is for
Panum is intended for healthcare students and professionals aged 18 or over.
Changes
If we change how we use your data, we will update this notice and change the version number. If a change affects what you have agreed to, we will ask you again.
See also our terms and conditions and refund policy.