Last updated: 16 September 2026
SmartJelly is developed by Disruptive Medical Simulators S.L. ("we", "us"). It is licensed to organisations, which provide access to their own trainees. This policy explains what the application collects, why, and what your rights are.
In-headset training records use a random installation/seat identifier rather than your email. If you use the account portal, we also store your verified email, the organisation license you redeem, the headset activation associated with your access code, and your contact preferences. These account records are separate from training-event payloads, but may make an activation identifiable to authorised staff. Pseudonymous data is not anonymous data.
| Data | Purpose |
|---|---|
| Session start/end and duration | Measure training engagement |
| Exercise results: level completed, attempts, time on task, score/stars | Measure skill progress and exercise difficulty |
| Knowledge-test results before and after training | Measure learning improvement |
| Optional profile: profession category and years of experience | Group results by experience level |
| Optional satisfaction rating | Improve the product |
| Licence activation: a random identifier the app generates on first run, a seat reference, headset model / device label, app version, activation timestamp | Enforce licensed seats; support and troubleshooting |
| Account email and verification status, where account registration is used | Sign-in, licensing, account support and abuse prevention |
| Organisation-license redemption and single-use headset-code records | Connect an authorised account to a headset activation; prevent code reuse |
| Optional product-email preference, notice version and time of consent or withdrawal | Respect and demonstrate your contact choices |
The identifier is created by the application itself and stored on the headset. It is not a hardware serial number or an advertising identifier, and it is regenerated if the app's data is cleared or the app is reinstalled.
We do not ask for your name or date of birth in account registration; we do not collect audio, microphone, video, photographs, camera or room-scan data; no hand, eye, face or other biometric data; no location data; and no patient or clinical data of any kind. SmartJelly is a simulator — no real patient information is ever involved.
Disruptive Medical Simulators S.L. operates account registration, licensing and optional product communications. Organisation administrators can manage their own licence codes and seats, but do not receive account-email lists, contact preferences or individual trainee analytics through the administration tool. Roles and responsibilities for organisation-provided training are governed by the applicable service and data-processing arrangements.
Supabase provides account authentication and database infrastructure. Verification email is delivered through Resend, which processes the destination email address and delivery status. Cloudflare Turnstile processes technical browser and network information, including IP addresses, for account signup/sign-in abuse prevention. Our service providers may also retain security and operational logs. These checks are not used for advertising. The account portal does not subscribe you to advertising or product emails just because you verify an address or redeem a licence.
Account and licensing information is used to provide the service you request. Product emails about SmartJelly and other medical-training products from Disruptive Medical Simulators S.L. require your separate, optional consent. The checkbox is not selected by default. Refusing or withdrawing this consent does not affect licensed access. You can change your choice in your product email preferences using the Unsubscribe from product emails button, or contact info@dmedicalsim.com. Any marketing email must also offer an unsubscribe route. Using a company-issued licence is not treated as proof that you personally paid.
Processing is based on the legitimate interests of the licensing organisation in delivering and evaluating the professional training it provides, or on its contract with its trainees. Because the data is pseudonymous and limited to training performance, the application does not present a separate consent prompt; where your organisation requires consent, it collects that from you directly as part of enrolling you in the training.
Data is transmitted over HTTPS and stored on managed infrastructure (Supabase, hosted in the European Union unless otherwise agreed with the licensing organisation). Licence codes are stored only as protected hashes, never in plain text. Short headset codes expire after ten minutes and can be used for one activation request. Account sign-in credentials are held in browser memory, not intentionally saved to browser local storage by the account portal. Our target retention for training usage is 24 months; operational deletion and backup handling require the applicable retention process. Account, security and consent records have separate service, suppression and evidence needs; contact us for the current retention schedule.
You can ask us to delete the data associated with your use of SmartJelly at any time, free of charge. Email info@dmedicalsim.com with the subject "SmartJelly data deletion". For account data, write from your verified account email. For headset data, include an activation reference if you have it. Do not send a password or verification code. We may need to verify your identity and identify the relevant records, especially on shared headsets; a shared organisation licence alone does not authorise deletion of other people's records. We respond within the applicable data-protection time limits and explain any retention required by law. Account deletion and withdrawal of marketing consent are distinct requests; withdrawing consent alone never revokes your training licence.
You can also remove the local copy at any time by uninstalling SmartJelly or clearing its data from the headset, which deletes the on-device identifier, licence token and stored progress. That does not by itself erase records already sent to us — use the email route above for those.
Under the GDPR you may also request access, rectification, restriction or portability, and object to processing. Because the data we hold is pseudonymous, please contact your organisation's administrator first — they can identify the relevant seat so we can action the request. You also have the right to complain to your national data-protection authority (in Spain, the AEPD).
SmartJelly is a professional training tool intended for adults. It is not directed at children.
Material changes will be reflected here with a new "last updated" date.
Disruptive Medical Simulators S.L.
Calle Acequia del Real n.º 2, Bloque 1, Escalera 2, Bajo B, 29651 Mijas Costa, Málaga, Spain
VAT / CIF: B75587709
Data-protection enquiries: info@dmedicalsim.com