This notice explains what information YourNurses.io collects, why, who processes it and what you can do about it. We have tried to write it in plain words. If anything is unclear, contact us through the support page.
1. Who we are
YourNurses.io is run by [legal entity name, registered address and registration number — to be confirmed], which is responsible for your information (the “data controller”).
Our data protection officer can be reached at [DPO contact — to be confirmed]. In the Philippines, you can also contact the National Privacy Commission.
2. The short version
- You can ask questions without an account and without giving your name.
- We never sell health data, and we never show ads in medical conversations.
- Sponsors and partners never receive information that identifies you.
- If you have an account, you can download or delete your information at any time.
- We use only the cookies the site needs to work. See the cookie page.
3. What we collect and why
Using the assistant without an account
Your messages and any photos or files you add are sent to our server and on to our AI provider to write the answer. We do not store the conversation. Photos are made smaller on your device first; videos are turned into a few still pictures on your device and the video itself is never uploaded.
Your browser may save a few items on your device, such as your chosen language and health log readings. These stay on your device; see the cookie page.
A free account
We store your email address, a scrambled (hashed) version of your password, an optional preferred name, your language and time zone, and when you signed up and last signed in. We use these to run your account and send account emails.
Saved conversations and summaries
Only if you choose to save them: your messages, the assistant's answers, their urgency levels and the sources cited, plus any summary you create. You can delete a conversation at any time, and it is removed for good.
Documents
Only if you choose to keep them: files are encrypted on our server (AES-256-GCM) before they are stored in the database. If you ask the assistant to read a test result, we also store what it extracted, clearly labelled as AI-extracted.
Health profile and reminders
Allergies, medicines, conditions and notes that you add, each labelled with where it came from. Reminders you set, and, if you choose text-message reminders, your phone number. Reminder messages use neutral wording without health details.
Asking for a nurse
When you send a conversation to a nurse, we store the AI-written summary (SBAR), the conversation you sent, the urgency level, the language and your messages with the nurse. You get a private code to read the reply; we store only a scrambled version of that code. If you asked by text message, your phone number is kept only while the request is open.
Text messages and phone calls
Where this is set up, conversations by text, WhatsApp or phone are linked to a scrambled (hashed) form of your number rather than the number itself. If you book a call with a nurse and agree to reminders, we keep your number for the reminders and the call.
Support, partner and professional forms
What you write in the form and the email address you give, so we can reply. Healthcare professionals who apply also give their name, profession, licence number and issuing authority so we can verify them.
Safety, quality and running costs
We count events such as an emergency warning being shown, an answer being flagged by the safety reviewer, or a thumbs up or down, with the specialist mode and language. We do not store the text of the message for these counts. We also count AI usage per day to manage costs.
Security records
We keep a log of actions taken by staff (for example, a nurse opening a request) for clinical and privacy review. To stop abuse, the server briefly keeps a count of requests per IP address in memory; it is not stored in the database.
4. Why we are allowed to use it
We ask for your consent before we store health information in an account, process documents or send reminders, and you can withdraw consent in your account settings. We rely on our legitimate interest to keep the service safe and secure, and on legal obligations where the law requires us to keep records.
[Legal bases to be confirmed for each country we operate in, including the Philippine Data Privacy Act of 2012 and, where it applies, the GDPR.]
5. Who processes your information
We use these service providers. They process information on our behalf and only for the purpose described.
| Provider | What they do | What they receive |
|---|---|---|
| Anthropic | Writes the assistant's answers, the safety review, nurse summaries, conversation summaries and test-result explanations. | The messages and files in the conversation you are having, for that answer. |
| Supabase | Hosts our Postgres database. | Everything we store, listed in section 3. |
| Vercel | Hosts the website and runs the server code. | Requests to the site, including your IP address, in its server logs. |
| Twilio | Sends and receives text messages, WhatsApp messages and phone calls, where that is set up. | Your phone number and the messages or call audio for that conversation. |
| Resend | Sends account emails (confirming your address, password resets) and email reminders, when email is set up. | Your email address and the email text. Subjects never contain health details. |
| Google Fonts | Serves the website's font. | Your IP address and browser details, as with any website you load. |
| OpenStreetMap | Shows a map in the care directory, only after you choose to show it. | Your IP address and the map area you are looking at. |
Nurses and other verified healthcare professionals see the requests people send to them. Administrators who manage the directory, partners and analytics cannot see patient conversations or documents.
[Data processing agreements, and each provider's data retention and training terms, to be confirmed and linked here.]
6. Where your information goes
Our providers may process information outside your country, including in the United States. [Hosting regions and the safeguards used for international transfers to be confirmed.]
7. How long we keep it
- Conversations without an account: not stored by us.
- Saved conversations, documents, health profile and reminders: until you delete them or your account.
- Email confirmation links expire after 24 hours, and password reset links after 1 hour.
- Phone numbers for a nurse request by text: until the request is closed.
- Support messages, nurse requests, safety counts and staff logs: [retention periods to be confirmed].
8. Your choices and rights
You can ask to see, correct, download or delete your information, and you can withdraw consent at any time. With an account, most of this is self-service on your privacy settings page: download your data as a file, change your consents, or delete your account and everything in it.
For anything else, write to us through the support page. You also have the right to complain to your data protection authority.
9. How we protect it
- Connections to the site are encrypted (HTTPS).
- Documents are encrypted before they are stored.
- Passwords are stored only as a strong one-way hash (bcrypt). One-time links and nurse-request codes are stored only as hashes.
- The database is not reachable through Supabase's public interface; only our server can read it.
- Staff access depends on their role, and staff actions are logged.
10. Children
Parents and carers can use the assistant to ask about a child's health. Accounts are for people aged [minimum age to be confirmed] and over.
11. Changes to this notice
We will update this page when the way we handle information changes, and tell account holders about important changes by email or in the app.