Privacy Policy

1. Who we are and what this policy covers

Vocarno provides a website, mobile application and related workspaces for medical career preparation and coordination. Vocarno LLC, the operator of Vocarno identified in the contact section, is responsible for the personal information it determines how and why to process. This policy applies to information handled through those services and communications with our team.

A healthcare organization, educational institution, examination body or immigration adviser may separately control information you give it. Its own privacy notice applies to that independent processing. A link to an external service does not make Vocarno responsible for that service.

2. Information we handle

The information involved depends on the features you use, the stage of your professional route and any separately agreed services. Not every category is collected from every person. We do not ask you to provide patient records or information about identifiable patients.

• Account and contact information: name, email address, account identifier, authentication details and communications with us. When an external sign-in provider is enabled, it may supply the account information you authorize it to share.
• Professional profile: profession, education, country, graduation stage, work experience, languages, preferences and information you choose to include in an intake or profile.
• Documents and evidence, where document features are enabled: files you submit, their descriptions, versions, sources and review outcomes. These may include qualifications and identity-related documents required for a particular process.
• Preparation and case information, where available: assigned tasks, learning attempts, results, progress, supporting evidence, requests for review, and the decisions and reasons communicated to you.
• Contract and coordination information, where applicable: proposals, agreed terms, funding status, consent choices, application materials and independently reported outcomes. Providing an account does not by itself create a financing agreement.
• Technical and security information: IP address, request and error records, browser or device information, session identifiers, security events and records needed to investigate misuse or protect the service.

3. Why we use information

We use information to create and secure accounts, provide requested features, organize professional preparation, communicate about your case, respond to support requests and maintain reliable services. Information may also be used to review submitted evidence, record decisions, manage permissions and carry out a separate agreement you choose to enter.

Where data protection law requires a legal basis, we rely on the basis appropriate to the particular activity: performing a contract or taking steps you request before a contract; legitimate interests such as service security and responding to enquiries, balanced against your rights; legal obligations; or consent for activities that require it. You may withdraw consent without affecting processing already lawfully carried out.

We do not use your professional documents to train a general-purpose AI model. An AI mentor is not part of the current release. If a materially different use is introduced, the applicable information and choices must be provided before that use begins.

4. Professional documents and sensitive information

Only provide documents requested for an identified purpose, and remove information that is not necessary. Medical qualifications describe your professional background; the service is not intended to collect your patients’ clinical information. Do not upload patient records, payment-card credentials or unrelated sensitive information.

Some identity or immigration documents may contain sensitive details. If a particular activity requires special-category information or additional consent under applicable law, that requirement must be addressed for that activity. An account registration is not blanket consent to process every type of sensitive information. Contact us if you believe unnecessary sensitive information has been submitted.

Premium purchases and optional profile publication

Apple processes App Store payments. RevenueCat provides purchase validation and subscription infrastructure. We share an opaque account identifier with RevenueCat and process purchase receipts or transaction identifiers, product and entitlement details, purchase environment, renewal, expiration and refund events, and technical information needed to operate the SDK. We do not send your CV, original professional documents or account password to RevenueCat, and we do not receive your full payment-card details from Apple. Purchase records are used to provide, restore and support subscription access and prevent misuse.

If you separately agree to publish your professional portfolio, verified organizations can view your professional name, headline, route, summary, experience, education and skills. Your originals, email address and phone number are not automatically included. Active paid Premium profiles may receive clearly labelled Featured placement. Sandbox purchases do not activate real employer promotion. Publication and paid visibility do not change professional ratings or eligibility decisions.

You can withdraw directory consent in your portfolio. This immediately hides the profile from subsequent directory requests; it cannot erase information an organization previously lawfully received or copied. Subscription expiration removes Featured placement but does not delete your saved portfolio. Exported PDFs remain in the destinations you choose, under your control. Deleting your Vocarno account does not cancel your Apple subscription; manage it in Apple subscription settings.

Apple and RevenueCat may retain transaction records as required for their services and legal obligations. RevenueCat privacy information is available at https://www.revenuecat.com/privacy and Apple privacy information at https://www.apple.com/legal/privacy/. We retain only the purchase and consent records needed for access, security, support, disputes and legal obligations; account deletion is available in the app, and other privacy requests can be sent to the contact below.

5. Who may receive information

Authorized team members and service providers may access information needed for their assigned responsibilities, such as hosting, authentication, delivery of service emails and technical support. Providers must be used for the relevant service purpose, rather than being given unrestricted permission to use your information.

Information may be shared with an organization involved in a process you request or agree to, subject to the applicable permissions and legal basis. Where a feature requires your specific consent to share a report or application package, that consent relates to the identified content and recipient. Reviewing a profile does not automatically authorize access to original documents.

We may disclose information when required by law, to protect legal rights or safety, or as part of a corporate transaction subject to appropriate protections and any required notice. We do not sell personal information or share it for cross-context behavioral advertising.

Revoking a sharing permission can prevent future access through that permission. It cannot retrieve copies already lawfully received by an independent recipient or override a recipient’s own legal retention duties.

6. Cookies and device storage

The public pages do not include advertising trackers or third-party marketing analytics. Authentication uses necessary cookies and related storage to keep sessions secure and support sign-in. The mobile app uses device storage for authentication and, where available, drafts or pending actions needed to recover work.

Server request logs may still be generated when you visit public pages. Disabling necessary cookies can prevent sign-in or protected features from working. Third-party sign-in pages are governed by their providers’ notices. We will provide any legally required choice before introducing non-essential tracking.

7. How long information is kept

Retention depends on the purpose, the status of your account or case, any ongoing agreement, security needs and legal requirements. Account and case information may be needed while services are being provided. Verification, consent and contractual records may be needed for an appropriate period after a process ends to explain decisions, resolve disputes or meet legal duties.

We use the continuing need for the information, applicable limitation periods and legal obligations as retention criteria. Backups and security logs may follow different lifecycles from active records. A deletion request does not always mean every record can be erased immediately; any applicable exception and its reason should be explained to you.

8. Security and international processing

We use technical and organizational measures appropriate to the service, including authenticated access, role-based restrictions and protected network connections. No online service or storage method can be guaranteed completely secure. Keep your sign-in credentials and verification codes private and tell us promptly about suspected unauthorized access.

Service providers and organizations involved in your chosen route may operate outside your country. Where a transfer is subject to data protection restrictions, an applicable lawful transfer mechanism and required safeguards must be in place. You may contact us for information about relevant recipients and safeguards for your circumstances.

9. Your choices and privacy rights

Depending on the law that applies to you, you may have rights to access, correct, delete or obtain a portable copy of your information, restrict or object to processing, withdraw consent, and complain to a competent data protection authority. These rights can be subject to legal conditions and exceptions.

To delete your candidate account, open Profile & settings > Delete account in the iOS app and confirm your request after a recent sign-in. Your active profile, intake, evidence and preparation data are removed and sessions are revoked. Private files and sign-in or billing-provider records are cleared automatically, with retries during outages. Apple subscriptions must be cancelled separately in Apple Account settings; an active subscription does not prevent deletion. Accounts with organization or staff responsibilities must first transfer that access. To exercise another privacy right, contact us using the address below, preferably from your registered email, and describe your request. Do not send passwords, one-time codes or complete identity documents in an initial email. We may need proportionate information to verify your identity and protect someone else’s information.

We respond within the period required by applicable law. We do not charge for ordinary rights requests, subject to legally permitted exceptions. Closing an account does not automatically cancel a separate agreement or remove records that must lawfully be retained.

Progress information and human review can inform preparation decisions. Vocarno does not represent an internal score as a licensing, visa, residency or employment decision. Contact us to raise a concern about inaccurate information or a decision communicated by our team.

10. Age and changes to this policy

The service is intended for people aged 18 or older. If you believe a child has supplied personal information, contact us so we can investigate and take appropriate action.

We may update this policy as services or legal requirements change. The effective date identifies the current version. Material changes will be communicated through an appropriate channel when required. A policy update does not replace consent where new consent is legally necessary.

Contact us

Vocarno LLC · 1776 Polk St, Unit 1009, Hollywood, FL 33020, United States
support@vocarno.com