Privacy

What we collect, why, and how to delete it.

Last updated: 2026-04-25.

The short version. ClinicaLingo is a static practice site for clinical Spanish. If you put an email in the waitlist box, we store it in a SQLite file on our server so we can email you once when paid Pro opens. That's it. No third-party trackers, no advertising networks, no data sales. Send us a delete request and the row goes away that day. We never ask for, collect, or want any patient information; do not paste any into the practice page.

1. Who we are

ClinicaLingo is operated as a solo project published from @bitinvestigator on a single VPS. Reach the operator at hello@clinicalingo.com for any privacy request, including data export and deletion.

2. What we collect

2.1 Waitlist email (only if you give one)

If you submit the "Email me when Pro opens" form, we store the email address you typed, the page you submitted from (the value of the browser's document.referrer), and a timestamp. The submission goes to POST /api/waitlist on this domain, is forwarded by Caddy to our shared collector, and is written to a SQLite file at /srv/factory/agents/agent-05/data.db. The waitlist table is plain text and is not synced to any third-party service.

2.2 Standard web-server logs

Every request to clinicalingo.com is logged by Caddy with the requested URL, HTTP status, response size, your IP address, your browser's user-agent string, and a timestamp. We use this only to count traffic, find broken links, and notice when a scenario file 404s. Logs roll over and are not retained beyond 90 days.

2.3 Practice progress (browser-local, never leaves your device)

The /practice/ page may write to your browser's localStorage to remember which scenarios you've opened and which translation lines you've revealed. This data lives in your browser only. We have no server-side copy of it. Clearing your browser site-data clears it.

2.4 Free PDFs

The 50-phrase PDF and the full-scenarios PDF are public files served by Caddy. Downloading them does not require an email address and does not register you on any list. The Caddy access log records the download request as it does any page view.

3. What we do not collect

• No patient data, no PHI, no clinical notes. ClinicaLingo is a language practice tool, not a charting tool. The practice page never asks you to type a patient name, date of birth, encounter detail, or any HIPAA-protected information, and there is no field where it would be stored. Do not paste patient information into the email field, the honeypot field, or anywhere else on the site.
• No advertising networks. We do not embed Google Analytics, Meta Pixel, Mixpanel, Segment, Hotjar, FullStory, or any other third-party tracker. The page loads zero third-party scripts.
• No payments yet. The Pro tier has not opened. We do not currently process any card data. When Pro opens it will go through Stripe Checkout, and Stripe — not ClinicaLingo — will handle and store card details.
• No social-login. No Google sign-in, no Apple sign-in, no Facebook connect. The free tier has no login at all.
• No fingerprinting. We do not run device-fingerprinting scripts and we do not write tracking cookies. The site uses no cookies of any kind on the free tier.

4. Why we collect what we collect

The waitlist email exists for one purpose: so we can send a single message announcing when the Pro tier opens. Server logs exist so we can see whether scenario assets are reachable and whether traffic is hitting the page. We do not use either for profiling, ad targeting, lookalike-audience export, or any second purpose.

5. How long we keep it

• Waitlist row: until you ask us to delete it, or until two years from the date you submitted, whichever comes first. After two years we treat it as stale and drop the row.
• Caddy access logs: rotated and dropped at 90 days.
• Browser localStorage on the practice page: kept by your browser; cleared when you clear site data.

6. Who we share it with

No one. We do not have a third-party email service, a CRM, an analytics provider, an ad network, or a data broker that we share the waitlist with. The only people who can read the waitlist file are the operator of this site (one person) on the server itself. We will share data only to comply with a valid US legal process, and we will tell you about such a request unless legally barred from doing so.

7. Your rights

You can ask us at hello@clinicalingo.com to:

• tell you whether your email is on the waitlist (free, same-week reply);
• delete your email and any associated row from the waitlist (done within 7 days);
• export the row in plain text so you can see exactly what we have on you.

If you are in California, the EU, the UK, or another jurisdiction with a specific data-subject-rights regime, you have those rights too — the same email address handles the request the same way. You may also opt out of any future commercial email by replying "unsubscribe" to anything we send you.

8. Children

ClinicaLingo is built for working US healthcare staff and clinical students; it is not directed at children, and we do not knowingly collect information from anyone under 13. If you are a parent or guardian and believe your child gave us their email through the waitlist form, contact us and we will remove the row.

9. Security

The site is served over HTTPS via Caddy with HSTS enabled. The SQLite waitlist file lives inside the agent's container on a managed VPS; access requires a server SSH key. No database backup is uploaded to a third-party cloud. Because we collect no patient data, the worst-case impact of a breach is a list of email addresses; we still treat that as something to protect.

10. International transfers

The server hosting clinicalingo.com is located in the European Union. If you submit an email from outside the EU, your email is transferred to and stored on EU infrastructure. This transfer is the only purpose-bound processing we perform; we do not move the data anywhere else.

11. Changes to this policy

If we change what we collect or how we use it, we will update the date at the top of this page and post a one-line note in the public CHANGELOG at @bitinvestigator. If the change is material — for example, adding any third-party processor — we will email every address on the waitlist before the change takes effect.

12. Disclaimer about clinical use

ClinicaLingo is a language-training product. It is not a medical interpreter, not a medical-decision tool, and not a substitute for your facility's qualified Spanish-language interpreter or language line. See the Terms of Service for the full language. Nothing about how we handle privacy changes that disclaimer.

Questions about this policy? Email hello@clinicalingo.com and a real person will reply.