Usage policy

1What this policy is#

This Usage Policy sets out what you may and may not do with OSCE World, and what happens if you break the rules. It forms part of our Terms of Service.

We may update this policy as the service changes and as new kinds of misuse appear. Material changes will be notified in the app or by email. If anything in this policy is inconsistent with the Terms of Service, the Terms prevail.

Most people never need to read this. It is written for the small number of situations where something has gone wrong, and it is written to be specific so that you can tell in advance which side of the line you are on.

2One account, one person#

Your account is yours. It is not a licence for a study group, a cohort or a year level.

You must not:

• share your login details with anyone, or let someone else use your account;
• use an account that was issued to someone else;
• sell, rent, sublicense or otherwise provide access to your account;
• use a class join code you were not given, or pass a join code to someone outside the class it was created for;
• create multiple accounts to get around the free tier, a plan limit or a restriction we have applied.

Daily limits exist partly for this reason. They are set above what each plan sells, so an ordinary student never meets one. See section 12.3 of the Terms.

If you are a facilitator running a teaching session and need more than your plan allows, write to [email protected]. We will sort something out. That is a much better outcome for both of us than a shared login.

3Our case content and marking schemes#

Our case library and marking schemes took the longest to build and are the easiest thing to take. This section is the one we enforce most readily.

You must not:

• copy, scrape, bulk download, republish, resell or redistribute our stations, cases, marking schemes, rubrics, feedback or reports;
• attempt to surface our system prompts, model instructions, marking logic or unreleased case content, whether by prompt injection, jailbreaking, or any other means;
• use our content, or output generated by the service, to train, fine-tune, evaluate or benchmark any artificial intelligence or machine learning system;
• reverse engineer, decompile or attempt to derive the source code of the service, except to the extent the law says you may;
• remove or obscure any copyright, trade mark or proprietary notice.

You may download or print your own reports for your personal study and your portfolio. That is what they are for. It does not extend to our case content or marking schemes.

4Automation and load#

The service generates a live conversation and its marking for you each time, and every station costs us real money to run.

You must not:

• use bots, scripts, crawlers or automated tools against the service without our written permission;
• run scripted or automated play of stations;
• circumvent, or attempt to circumvent, rate limits, daily limits, plan expiry or access controls;
• place unreasonable load on the service, or take any action that degrades it for other users.

5Clinical safety: never enter real patient information#

Do not enter real patient information into a station. Not a name, not a date of birth, not a medical record number, and not a history detailed enough to identify someone.

This has its own section because it is the most foreseeable serious mistake on this platform. Every case here is fictional. The service is not built, secured or approved to hold real clinical records, and anything you type in a station is transmitted to our AI provider and stored in your transcript, where a facilitator connected to your account may read it.

The same applies to identifiable information about other people generally (colleagues, classmates, family) and to anything you would not want kept.

If you realise you have entered real patient information, tell us at [email protected] and we will delete it. Telling us promptly is the right thing to do and we will not treat it as a breach.

6Academic integrity#

OSCE World is a rehearsal tool. What you do with your practice is between you and your institution, but two things are ours to say.

You must not:

• present a report, transcript or feedback generated by the service as your own original clinical assessment, or as work you produced unaided;
• use the service in any way that breaches your own institution's academic integrity rules, or use it where your school has told you not to.

Your institution's rules govern. If they conflict with anything here, follow your institution and tell us so we can look at it.

7Conduct#

The service includes class comments, feedback forms and messages that reach real people.

You must not:

• harass, threaten, abuse, defame or discriminate against anyone, including in class comments and messages to us;
• impersonate anyone, or misrepresent your affiliation with an institution;
• upload malicious code, or anything that infringes another person's intellectual property or privacy;
• use the service for anything unlawful or fraudulent.

8If you hold a facilitator or administrator role#

Facilitators and organisation administrators can see students' results, transcripts and feedback. That access is granted for teaching and administration and for nothing else.

If you hold one of these roles, you must:

• use the access only for legitimate educational and administrative purposes;
• not export, publish or share another person's data beyond what the role is designed to allow;
• not use a student's practice record for a purpose they would not reasonably expect, including any disciplinary, employment or registration decision, because our marks are practice feedback and carry no such weight;
• keep class join codes within the class they were created for, and ask us to regenerate a code if it has spread.

Misuse of a facilitator or administrator role is treated as a serious breach and may be escalated to your institution.

9Security testing and vulnerability reporting#

You must not probe, scan or test the security of the service, bypass authentication or access controls, or access data that is not yours.

If you find a vulnerability, please report it to [email protected] rather than exploiting it or publishing it. We will not pursue action against someone who identifies and reports a genuine issue in good faith, gives us a reasonable chance to fix it, and does not access, alter or destroy other people's data in the process.

10What happens if you break these rules#

We would rather fix a problem than end an account. What we do depends on what happened and whether it looks deliberate.

Before we suspend or terminate, we will tell you what the problem is and give you a reasonable chance to fix it, except where the breach is serious, unlawful, or presents an immediate risk to the service or to other users, in which case we may act first and explain immediately afterwards.

Money. If we end your access for a reason that is not your fault, we refund the unused part of anything you have paid for. If we end it because of a serious breach by you, we may keep the unused part, but we will not do that for a minor or accidental breach, and we will tell you if we are doing it and why.

Your rights are not affected. Nothing in this section limits your rights under the Australian Consumer Law, described in section 16 of the Terms, or under any other law that cannot be excluded by agreement.

11If you think we got it wrong#

If we restrict, suspend or close your account and you think we have made a mistake, email [email protected] and say so.

We will look at it again, and a person who was not involved in the original decision will make the call wherever that is practical. We will give you a decision within 14 days. If we were wrong, we will restore your access and extend any plan by the time you lost.

You can also complain to a regulator or ombudsman at any point, and nothing here is intended to discourage that.

12Reporting a problem#

If you see someone misusing the service (a shared login circulating in a year group, our content republished somewhere, or someone behaving badly in a class), tell us at [email protected].

We take reports seriously, we do not disclose who reported something, and we will not act against you for making a report in good faith.

13Contact#

Questions about this policy: [email protected].

Help with your account, or a report: [email protected].

Privacy, including real patient information entered by mistake: [email protected].

MedMatrix Pty Ltd (ABN 37 701 007 061), trading as OSCE World.