Your practice data stays yours.

What we collect

To run your account we collect only what the product needs to function:

• Account details you provide: your name and email address.
• Authentication and session data required to keep you signed in securely.
• Billing status from our payment processor when you subscribe. We never store full card numbers.

For billing reliability, a verified Stripe webhook body is retained for replay while it is being processed. Bodies for completed or ignored events are erased after 30 days. Failed-event bodies are retained for up to 90 days for controlled replay, then erased and dead-lettered. RemoteNurse keeps the event ID, type, object ID, cryptographic payload hash, status, and processing timestamps as the durable billing ledger after body erasure.

What practice data we store

As you work through cases, RemoteNurse records the practice itself so your progress is meaningful:

• The cases you attempt, the actions you take, and the order you take them in.
• Your written notes and committed next steps.
• Deterministic Case Judge scores, verdicts, and the readiness evidence they produce.

Scoring inputs and hidden case state stay on our servers and are never exposed in your browser.

What can be public

Every profile is private by default. Nothing about your practice is shared until you choose to share it. When you do opt in, only the fields you select become visible: a handle, a headline, and the specific readiness metrics you approve.

Third-party AI processing

When you choose an AI feature, RemoteNurse sends only the text needed for that request to our configured AI provider, currently DeepSeek. This can include resume text, a job description, career preferences, an interview-answer transcript, or an assistant question. The purpose is to generate the analysis, draft, ranking, or coaching response you requested.

RemoteNurse screens inputs, does not put request text or provider responses in application logs, and does not create a separate stored AI conversation history for Career Studio or Interview Studio. The provider processes the request under its own service terms and retention controls. Because provider handling is outside the practice-record controls described below, remove names, contact details, patient information, payer credentials, and other identifiers before submitting. Audio used for speaking or interview input is processed in memory and is not deliberately stored; only the transcript is sent for coaching.

How you control sharing

• Set your profile to private, public, or a private secret link at any time.
• Choose exactly which metrics and verified results appear before anything is shown.
• Export your practice record at any time from your profile settings.
• Request deletion of your account and its data by contacting support; we action it for you.
• Employer reports are only ever shared with your explicit consent.

Deletion is handled on request rather than as a self-serve button, but nothing about what is destroyed changes. Deleting your account destroys your name, email, password, sessions, and every case attempt, note, score, and verdict you have produced, along with your profile, privacy settings, and every link that opened a shared profile. One record is permanent by design, because others rely on it: an issued Verified Assessment credential, whose verification record is retained and marked revoked, exactly as if you had revoked it yourself. The work behind that credential - your notes and action trace - is deleted with everything else. If you subscribed, your billing account is de-identified rather than removed: the payment-provider customer reference is cleared, leaving amounts and dates that name nobody.