Privacy Policy

Effective date: March 9, 2026

scut ("we," "our," or "the app") is a surgical case logging application built for ophthalmology residents. This policy explains what data we collect, how we use it, and your rights.

1. What We Collect

Account information: When you create an account, we collect your name, email address, and authentication credentials. If you sign in with Apple, we receive the information you authorize Apple to share (which may include a private relay email address).

Profile information: PGY year, institution, and default surgical location. You provide this during setup and can update it at any time.

Case data: Surgical procedure metadata you log, including CPT codes, procedure dates, attending physician names, resident role, ACGME category information, self-assessment ratings (case complexity, comfort level, patient outcome), notes, and custom tags.

2. What We Do NOT Collect

No patient data. scut does not collect patient names, medical record numbers, dates of birth, diagnoses, or any protected health information (PHI). scut is designed to operate outside the scope of HIPAA by storing only procedure metadata.

3. How We Use Your Data

We use your data to:

Provide the core app experience — case logging, analytics, progress tracking, and achievements
Generate personal insights about your surgical training
Improve the app based on aggregate, anonymized usage patterns

We do not sell your data. We do not use your data for advertising.

4. Third-Party Services

We use the following third-party services to operate scut:

Supabase — database hosting and authentication. Your data is stored in Supabase's cloud infrastructure with row-level security policies that ensure you can only access your own data.
Apple Sign-In — authentication provider. Apple's privacy policy governs how Apple handles your sign-in data.
PostHog — anonymous product analytics. We collect aggregated usage data (screen views, feature usage) to improve the app. No personal case data is sent to PostHog.

5. Data Security

Your data is protected by row-level security policies in our database, ensuring that only you can access your own cases and profile. All data is transmitted over HTTPS. Authentication tokens are stored securely on your device.

6. Data Retention & Deletion

Your data is retained as long as you have an active account. You can delete your account and all associated data at any time from the app's settings. Upon account deletion, we permanently remove your profile, all logged cases, and all associated data from our systems. Deletion is irreversible.

7. Your Rights

You have the right to:

Access all data associated with your account
Correct inaccurate data through the app's editing features
Delete your account and all associated data
Export your case data

To exercise any of these rights, contact us at support@scutapp.com.

8. Children's Privacy

scut is designed for medical residents and is not intended for use by anyone under the age of 18. We do not knowingly collect data from minors.

9. Changes to This Policy

We may update this policy from time to time. If we make significant changes, we will notify you through the app or via email. Continued use of the app after changes constitutes acceptance of the updated policy.

10. Contact Us

If you have questions about this privacy policy or your data, contact us at support@scutapp.com.