Pakaammo maipapan iti privacy

1. Who we are and how to contact us

YourNurses.io is a non-profit health initiative. We decide why and how your personal information is used, and we are responsible for it: under the Philippine Data Privacy Act of 2012 (Republic Act No. 10173), we are its “personal information controller”.

Data Protection Officer. The person responsible for privacy at YourNurses.io is our Data Protection Officer. You can reach them at support@yournurses.io (please put “Privacy” in the subject) or through the support page, choosing the topic “Privacy”.

If you are not happy with how we handle your information or with our answer, you can complain to the National Privacy Commission (privacy.gov.ph).

2. The short version

• You can ask questions without an account and without giving your name.
• We never sell personal information. There is no advertising in health conversations, and sponsors and funders never receive information that identifies you.
• We keep health information in an account only if you allow it. Our staff tools don't show it to anyone but you, unless you share it with a nurse.
• What you send to the assistant goes to our AI provider to write the answer. Under its commercial terms, it does not use it to train its AI.
• Nothing automatic decides whether you can get care: the assistant's urgency levels and warnings are suggestions.
• If you have an account, you can download or delete your information at any time.
• We only use the cookies the site needs to work: to keep you signed in and to remember your language, your country and, if you turn it on, Hide details on your account page. There are no advertising or tracking cookies and no Google Analytics, so there is no cookie banner. We count visits ourselves, without cookies and without identifying anyone. See the cookie page.
• If a data breach puts you at risk, we will tell you and the National Privacy Commission, as the law requires.

3. What we collect and why

Using the assistant without an account

Your messages, and any photos, PDF or video you add, are sent to our server and on to our AI provider to write and check the answer. We do not store guest conversations on our server. Photos are made smaller on your device first, and a video is turned into a few still pictures on your device; the video itself is never uploaded. Files are used for that answer only, unless you are signed in and choose to keep a copy. The same applies when you are signed in and don't choose to save a conversation.

Your browser keeps your recent chats on your device, not on our server, so you can come back to them, unless you turn this off; you can delete them at any time. Please don't put your name, address or ID numbers in your messages.

Health log, care finder and maps

The health log keeps your readings, such as blood pressure or blood sugar, in your browser only. They are sent to our AI provider only when you ask for a review, and we don't store them.

When you search the care finder, our server (not your browser) asks public OpenStreetMap services for places. Photon, run by komoot, gets what you type in the search box, to suggest places while you type, with a point rounded to about 500 m if you shared your location or chose a place. Nominatim, run by the OpenStreetMap Foundation, gets the name of a town you typed, to find it. Public Overpass servers (overpass-api.de, overpass.kumi.systems, maps.mail.ru and overpass.private.coffee) get only the rounded point and the kind of place you want, such as a pharmacy, to list health places near it. They don't receive your IP address or anything that identifies you. We don't log what you type or your location; to avoid asking twice, we reuse each answer for up to a day, filed under a scrambled form of the words or under the rounded point, with nothing that links it to you. We ask before using your location, your browser asks too, and it is used only for that search.

If you choose to show a map, your browser loads it directly from OpenStreetMap, which then receives your IP address and the area shown, under its own privacy policy.

A free account

We store your email address, a scrambled (hashed) version of your password, an optional preferred name, your language, country and time zone, your town or city if you add it, and when you signed up, confirmed your email and last signed in. We use them to run your account, keep it secure and send you account emails, such as email confirmation and password reset links. We also keep a record of your choices (consents), with the date of each change.

Saved conversations and summaries

Only if you choose to save them and allow us to keep health details: your messages, the assistant's answers, their urgency levels and the sources cited, and any summary you create. Our staff tools don't show them to anyone but you. You can delete a conversation at any time, and it is removed for good.

Health profile and home readings

Allergies, medicines, conditions and notes that you add, each labelled with where it came from, and home readings such as blood pressure and blood sugar that you save to your account. They are kept only with your permission to keep health details.

Documents

Only if you allow document storage and choose to keep a file: photos and PDFs, such as test results, are encrypted by our server (AES-256-GCM) before they are stored. If you ask the assistant to read a document, the document goes to our AI provider for that; for a document you keep, we store what it extracted, labelled as AI-extracted. The assistant does not read your saved documents or health profile when you chat.

Reminders and notifications

The reminders you set, their times and how you want to receive them. Email reminders go to your account's email address; for text-message reminders, where they are available, we keep the phone number you confirmed with a code. Reminder messages and their subjects use neutral wording without health details. We also keep the notifications shown in your account, such as a nurse's reply.

Asking for a nurse

When you send your question to the nurse desk, we store an AI-written summary of it in the SBAR format nurses use, the conversation you chose to include, the urgency level and language, your reason for asking, the age group and whether it is for you or someone else if you gave them, and your messages with the nurse. If you give a phone number and agree to a call, the nurse sees it with your request. You get a private code to read the reply; we store only a scrambled version of it. If you are signed in, the request is linked to your account. Our nurse team gets a short email that a new request has arrived, with its urgency, channel and time, never what you wrote. Phone numbers given for a call, or used to reply by text, are deleted when the request is closed (texts and calls we send keep the number they went to; see How long we keep it).

Booking a call with a nurse

The time you chose, your reason and language, your phone number if you give it, whether you want reminders, and the nurse's notes about the call. We use your number for the call and, if you agree, for reminders about it.

Text messages, WhatsApp and phone calls

These work only where we have set them up and the site shows our number. Your messages, or what you say on a call, go through Twilio, and our AI provider writes the answers. We link text conversations and calls to a scrambled (hashed) form of your number rather than the number itself, and keep their text so the assistant can follow the conversation. Calls are not recorded: Twilio turns what you say into text for the assistant. While a request you made this way is open, a nurse may send you a follow-up text or arrange an automated check-in call to the same number, and an AI-written summary of the call is kept for the nurse. Reply STOP at any time and we will not contact you again.

If a clinic, hospital or other organisation enrolled you

Organisations such as clinics, hospitals and NGOs can use YourNurses.io for their own patients, for example for follow-up programmes. They may add you from their own records, including their health record system, with details such as a reference or your initials, year of birth, sex, phone number, language, the health facts the programme needs, and the permissions you gave them for texts, calls, AI conversations and updates to their records. For that information, the organisation decides how it is used and is the personal information controller; we process it for the organisation and only on its instructions. Please contact the organisation first about your rights; you can also write to us and we will pass your request on.

Support, partnership and professional forms, and emails to us

What you write and the email address you give, so we can reply: support messages, with their topic and language and, if you are signed in, your account; and partnership enquiries, with your name, organisation, work email, region and what you need. A copy of each message sent through our forms is emailed to our team's inbox, and emails you send to our @yournurses.io addresses are forwarded there by ImprovMX. Please don't include health details in support messages.

Healthcare professionals and staff

When you apply, we collect your name, email address, profession, licence number, issuing authority, country and what you tell us about yourself, to check your licence with the issuing authority's public register and decide on your application. Licence details are sensitive personal information under the Data Privacy Act, so we ask for your consent before we check them. Once you are verified, your staff account holds your name, email address, role and, if you add one, a photo. People you reply to see your first name, your photo if you added one, and whether we have checked your licence. The actions you take on requests are logged.

Safety, quality and running costs

We count events such as an emergency warning being shown, an answer being flagged by the safety checks, a suspected attempt to get around them, or a thumbs up or down, with the specialist mode and language. We also keep each safety check's result as codes. None of these keep the text of the message. We count AI usage per day to manage costs.

Visit counts (no cookies)

Our own server counts page views on our public pages, so we can see which pages help people, from which countries and on what kind of device, and how people find us (a search engine, an AI assistant such as ChatGPT, social media, email or another website). No other company receives anything for this: there is no Google Analytics or other analytics service on the site.

With each public page you open, your browser sends us the page's address without anything after a ? or # (so no search words, places or codes), the site's language and whether you came from another page of this site; with the first page, also the name of the website you came from (not its page) and the link's utm_source, utm_medium and ref tags if it had them. This includes the assistant, Request a nurse and the care finder, by address only. Pages in your account, staff pages, sign-in, sign-up, password reset, email confirmation and booking are never counted.

While the request is handled, our server reads, and then forgets: the country, and inside the Philippines the region, that our hosting provider works out from your IP address (never the city or an exact location); whether you use a phone, tablet or computer and the kind of browser, from the browser description your browser sends; and whether you are signed in, but not who you are. It also uses the browser description to leave out crawlers and scripts, and to tell when a link was opened inside the Facebook, Messenger, Instagram, TikTok or LinkedIn app.

To count each visitor only once a day without a cookie, the server combines your IP address, the browser description and our site's name with a random secret that changes every day, and keeps only the resulting code (a one-way hash, cut short), never the IP address or the browser description. The code is used only on that day to tell visitors and visits apart; the code and that day's secret are deleted when the day ends (midnight, Philippine time), so nobody, including us, can recognise you on another day or work back to your IP address. While the day lasts, someone with access to our database who already knew your IP address and exact browser description could recompute your code and see which public pages it opened that day; our hosting provider's request logs hold that information too.

What we keep are daily totals of page views, visitors and visits for each page, country, Philippine region, type of device, browser family, language, how people arrived and whether they were signed in, for 400 days. No cookie, ID, IP address or browser description is kept, and nothing you type. On staff screens, a page is shown together with any other detail only when it covers at least 5 visitors, so a small number can't point at a person. We also count, per day, requests from search engine and AI crawlers by the name they give. See the cookie page.

Security records

We log what staff change, such as adding a note or changing a request's status, and each time they open a document you shared, so it can be checked. To stop abuse, our server briefly keeps a count of requests per IP address, account or scrambled phone number or email address, in memory only; it is not stored in the database.

4. How the AI uses your information

The assistant's answers are written by Claude, an AI model provided by Anthropic. For each answer we send Anthropic the recent messages of the conversation, any file you added for that message, the language and your country's health services, and approved health information that fits the question. We don't add your name, email address, phone number or account details to what we send, but a message, document or photo may show them (a test result often shows your name), so please leave them out where you can. Under Anthropic's commercial terms, it does not use what we send to train its models, and it keeps it only for a limited time (longer only where needed to enforce its usage rules or to meet a legal duty).

Some steps are automatic. Each answer starts with an urgency level, an emergency warning with emergency and crisis numbers appears when a message contains words that match warning signs such as chest pain, trouble breathing or thoughts of suicide, and safety checks and a second AI normally review each answer. These steps help you decide what to do next, but they are suggestions: nothing automatic decides whether you can get care, and you can always ask a nurse or go to a health service. We do not use your information for advertising, to build marketing profiles, or to make automatic decisions that have legal or similarly significant effects on you.

5. Why we are allowed to use it

Under the Data Privacy Act of 2012, we may use personal information only for a lawful reason. Health information and licence details are “sensitive personal information”, which we use only with your consent or where the law allows it without consent. The table names the sections of the Act we rely on.

If the European Union's GDPR or a similar law applies to you, we rely on the equivalent bases: your explicit consent for health information, a contract with you, our legitimate interests and our legal obligations.

6. Your consent choices

When you create an account, you agree to the Terms of use, confirm that you are 18 or older and confirm that you have read this notice, and we keep a record of when you did. Everything else is your choice, and every switch on your privacy settings page can be turned on or off at any time. Turning one off doesn't affect what we did before, while it was on.

7. Who receives your information

Our service providers

These companies process information for us, only for what is described here and on our instructions under their terms with us.

The OpenStreetMap services described under What we collect and why are public services, not our providers: we send them only what is needed to find places, never your IP address or anything that identifies you.

Nurses and staff

• Nurses, other healthcare professionals we have approved and our clinical administrators see the requests sent to the nurse desk, and your documents only when you share them with a request. Each time they open a shared document, it is logged.
• Your saved conversations, health profile, home readings and documents are visible only to you: our staff tools don't show them.
• Administrators and operations staff read support messages and partnership enquiries so they can answer them. Administrators also check applications from professionals and manage accounts: they see account details (email address, status, and when you signed up and last signed in) and how many items an account holds, and they can sign an account out or suspend it.
• Operations staff, who look after the care directory and partners, cannot open requests to nurses or anything kept in an account.
• The few people who maintain the service have technical access to the database. They use it only when needed to keep the service running and secure, and everyone with access must keep personal information confidential.

Organisations, the law and changes to who runs YourNurses.io

• If an organisation enrolled you, it receives what its programme records about you (see What we collect and why).
• We share information with public authorities, courts or law enforcement only when the law requires it, for example under a court order, and only what is required. We check each request first.
• If another non-profit organisation or legal entity takes over running YourNurses.io, for example when the initiative registers its own legal entity, your information would move with the service under this notice. We will tell account holders before that happens.
• We never sell personal information, and we never share it with advertisers, data brokers, funders or sponsors.

Public information we use

Some lists on the site come from public data and receive nothing from you. The Philippine regions, provinces, cities and municipalities are the Philippine Standard Geographic Code published by the Philippine Statistics Authority (masterlist dated 12 October 2026), taken from the open-source barangay project (MIT licence).

8. Where your information is stored

Your information is stored and processed outside the Philippines:

• Our database (Supabase) and the server that runs our code (Vercel) are in Mumbai, India.
• Vercel, a US company, also delivers our pages through its worldwide network and keeps its request logs, which may be processed in the United States and other countries.
• Our AI provider (Anthropic) and our email provider (Resend) process information in the United States (Anthropic may also use other countries), and so does Twilio when text messages or calls are in use. ImprovMX and the public OpenStreetMap services are also outside the Philippines, and our team's email service may be.

Wherever it is processed, we remain responsible for your information, as the Data Privacy Act requires. To protect it, we use providers whose terms with us include data protection commitments, we send each one only what it needs, all information travels encrypted (HTTPS), and documents are encrypted before they are stored. If you are in the European Union or another place with transfer rules, these steps are how we protect information sent to countries that may not have the same laws as yours.

9. How long we keep it

We are setting fixed periods for the information marked “no fixed end date yet”, and we will update this notice when they apply. Until then, you can ask us to delete your information at any time (see Your rights). Deleting something removes it from our database at once; copies in backups are overwritten in the normal backup cycle.

10. How we protect it

• Connections to the site are encrypted (HTTPS).
• Documents you keep are encrypted by our server (AES-256-GCM) before they are stored, and can only be opened through your account, or by a nurse through a request you shared them with.
• Passwords are stored only as a strong one-way hash (bcrypt). One-time links, codes and nurse-request codes are stored only as hashes.
• Only our own server can read the database: it is closed to Supabase's public interfaces.
• Staff see only what their role needs, and professionals are verified before they get access. What staff change, and every time they open a document you shared, is logged.
• Uploads are checked: only images and PDFs of a limited size are accepted, and PDFs with active content are refused.
• No advertising, analytics or other companies' scripts run on our pages, and statistics hide small numbers so they can't point at a person.

No system is completely secure, so we also collect as little as we can: you don't need to give your name to ask a question or to ask for a nurse.

11. Your rights

Under the Data Privacy Act of 2012, you have the right to:

• be informed about how your information is used, as in this notice;
• see the information we hold about you and get a copy of it (access);
• have it corrected if it is wrong or incomplete;
• have it deleted or blocked, for example when it is no longer needed, was obtained unlawfully, or you withdraw your consent;
• object to how we use it, including uses based on our legitimate interests;
• withdraw your consent at any time, without affecting what we did before;
• get your information in a commonly used electronic format and take it to another service (data portability);
• be compensated for damage caused by inaccurate, incomplete, outdated, false or unlawfully obtained information, or by its unauthorised use; and
• complain to the National Privacy Commission (privacy.gov.ph).

If a person has died or can no longer act for themselves, their lawful heirs or assigns may use these rights for them.

How to use them. With an account, most of this is self-service on your privacy settings page: download your data as a file, turn each permission on or off, sign out on every device, or delete your account and everything in it. You can change your profile details, and delete saved conversations, health profile items, readings, documents and reminders where they are shown. If something we hold is wrong and you can't fix it yourself, tell us.

For anything else, or if you used YourNurses.io without an account, email support@yournurses.io or use the support page. For a request to a nurse that you made without an account, include its private code so we can find it. We may ask you to confirm who you are first, for example by writing from your account's email address. This is free. We reply within 15 days and tell you if we need longer to finish. If the law requires us to keep some information, or we need it to establish, exercise or defend a legal claim, we will tell you.

If you live outside the Philippines, the law where you live may give you further rights, such as restricting how we use your information; tell us and we will apply them where that law applies to us. You can also complain to your local data protection authority.

12. If there is a data breach

If personal information is lost, or someone gets access who should not, we act straight away to stop it and limit the harm. If the breach involves health or other sensitive information, or information that could be used for identity fraud, and is likely to put you at real risk of serious harm, we will notify the National Privacy Commission and you within 72 hours of finding out, as Philippine rules require. We will tell you what happened, what information was involved, what we are doing about it, what you can do to protect yourself and how to reach us. We keep a record of every security incident.

13. Children

Accounts are only for people aged 18 and over. Children and young people under 18 should use YourNurses.io with, or through, a parent or guardian, and a parent or guardian can use it to ask about a child's health. When you ask about a child, please don't include the child's name or other details that identify them. We do not knowingly create accounts for anyone under 18. If we learn that an account belongs to someone under 18, we will suspend it, offer the account holder or their parent or guardian a copy of its information, and then delete it.

14. Cookies and your device

The site sets only essential cookies: to keep you signed in, to keep staff signed in, to remember your language and your country, and to remember Hide details if you turn it on. Some features also save items in your browser's storage, such as your health log and the private code for reading a nurse's reply. There are no advertising or tracking cookies, and our visit counts use no cookies at all. The cookie page lists each cookie and how long it lasts, and lets you clear what this site saved in your browser.

15. Changes to this notice

We update this notice when the way we handle information changes, and the date at the top shows when it last changed. If a change is important, for example a new purpose or a new kind of provider, we will tell account holders by email or in the app before it applies, and ask for your consent again where the law requires it.