Effective Date: April 23, 2026

About This Notice

This Privacy Notice describes how PEAC (the “Platform”), a program of Johns Hopkins University, collects, uses, stores, and protects personal information submitted by users of the Platform at ilc.peaconline.org.

What Data We Collect

When you register for the Platform, we collect the following personal information:

• Full name
• Email address
• Affiliated institution
• PGY (Post-Graduate Year) level 
• Title

We also collect educational performance data including test scores, responses to educational scenarios, and AI-generated recommendations for areas of improvement. All educational scenarios on the Platform are fictional and do not represent actual clinical cases.

How We Use Your Data

Your data is used for the following purposes:

•       Providing access to educational modules and assessments

•       Generating personalized recommendations for areas of improvement using AI analysis

•       Allowing your training program to assess individual progress with the curriculum

•       Internal research and program assessment by Johns Hopkins University, as disclosed in our Terms of Use

Personally identifying information such as your name and email address is never transmitted to AI providers. Only anonymized performance data and internal system identifiers are used in AI processing.

Data Retention

Your data is retained on the live platform for 5 years following the end of your institution’s subscription period. Data is then archived to a restricted platform accessible only to PEAC administrators. Institutions wishing to retrieve historical data after the subscription period ends may contact PEAC administration directly. 

How We Share Your Data

We do not sell your personal data to third parties. Your data may be shared in the following limited circumstances:

•       With your subscribing institution for program assessment purposes

•       With Siteground, our hosting provider, solely for the purpose of providing hosting services under a Data Processing Agreement

•       With Google, for AI-powered analysis of anonymized performance data via the Gemini API under Google’s Data Processing Addendum

•       As required by law or valid legal process

Data Security

The Platform is hosted on Siteground’s cloud infrastructure, built on Google Cloud Platform, which holds SOC 2 and ISO 27001 certifications. All data in transit is encrypted via TLS/HTTPS. Data at rest is encrypted using AES-256 encryption. Access to personal data is restricted to authorized PEAC administrative staff.

Your Rights

You may request access to, correction of, or deletion of your personal data by contacting PEAC administration at help@peaconline.org. Note that some data may be retained as required by applicable law or legitimate institutional assessment purposes.

AI-Generated Content

The Platform uses Google Gemini, a large language model, to analyze anonymized test performance data and generate educational recommendations. These recommendations are for educational purposes only and do not constitute medical advice, clinical guidance, or diagnosis. All scenarios used in AI analysis are fictional.

Cookies

The Platform uses the following cookies:

Strictly Necessary Cookies

These cookies are required for the Platform to function and cannot be disabled.

Analytics Cookies

These cookies collect anonymized information about how visitors use the Platform to help us improve the service.

Google Analytics 4 is configured to collect anonymized usage data only. No personally identifying information is transmitted to Google via analytics cookies. For more information about how Google uses analytics data, see Google’s Privacy Policy at privacy.google.com.

Managing Cookies

You can control cookies through your browser settings. Note that disabling strictly necessary cookies will prevent you from logging in to the Platform. Disabling analytics cookies will not affect your ability to use the Platform.

International Users

The Platform serves institutions in the United States and select international locations including Lebanon, the Dominican Republic, and Mexico. The Platform is hosted in the United States. Users outside the United States should be aware that their data will be transferred to and processed in the United States. PEAC complies with applicable data protection laws in the jurisdictions in which it operates.

Educational Records

Performance data maintained by the Platform on behalf of subscribing institutions may constitute educational records subject to the Family Educational Rights and Privacy Act (FERPA) or equivalent regulations. PEAC acts as a service provider to subscribing institutions and handles such data in accordance with applicable institutional and regulatory requirements.

Changes to This Notice

PEAC reserves the right to update this Privacy Notice at any time. Subscribing institutions and users will be notified of material changes.

Contact

For privacy-related questions or requests, please contact PEAC administration