Privacy

Your practice data stays yours.

RemoteNurse is a fictional, no-PHI practice environment. This page explains what we collect, what we store from your practice, what can ever become public, and the controls you hold over all of it.

Last updated October 2026

Who we are

RemoteNurse is run by its founder as a sole proprietor. For privacy questions or requests, write to support@remotenurse.org.

What we collect

To run your account we collect only what the product needs to function:

  • Account details you provide: your name and email address.
  • Authentication and session data required to keep you signed in securely.
  • Billing status from our payment processor when you subscribe. We never store full card numbers.

For billing reliability, a verified Stripe webhook body is retained for replay while it is being processed. Bodies for completed or ignored events are erased after 30 days. Failed-event bodies are retained for up to 90 days for controlled replay, then erased and dead-lettered. RemoteNurse keeps the event ID, type, object ID, cryptographic payload hash, status, and processing timestamps as the durable billing ledger after body erasure.

What practice data we store

As you work through cases, RemoteNurse records the practice itself so your progress is meaningful:

  • The cases you attempt, the actions you take, and the order you take them in.
  • Your written notes and committed next steps.
  • Case Judge scores, verdicts, and the readiness score they produce.

Scoring inputs and hidden case state stay on our servers and are never exposed in your browser.

What can be public

Every profile is private by default. Nothing about your practice is shared until you choose to share it. When you do opt in, only the fields you select become visible: a handle, a headline, and the specific readiness metrics you approve.

Employers

Verified employers can post jobs on RemoteNurse. When you apply, you apply on the employer's own site, so RemoteNurse does not send your details to them.

Employer accounts. We keep the organization's name, website, country, and the work email used to confirm it. We send a one-time code to that email and keep only a scrambled copy of the code.

Reports. If you report a job, we keep your report. We delete reports 24 months after we review them.

If we ever let you apply, be found or message employers on RemoteNurse itself, we will update this page before that starts.

Where we store your data and who helps us

We store your data with Cloudflare. Our main database is in Japan, and Cloudflare may handle requests in other countries. We also use Stripe for payments and Sentry for error reports, both in the United States, Apple for purchases in the iPhone app, and DeepSeek for AI features (see below). Each of these companies handles your data only to provide its service to us.

Why we use your data

  • We use your account and practice data to provide the service you signed up for.
  • We review reports to protect users from scams.
  • We keep billing records because the law requires it.

How long we keep data

  • Your account and practice data: until you delete your account.
  • Reports: 24 months after review.
  • Billing records: as described above.

Third-party AI processing

When you choose an AI feature, RemoteNurse sends only the text needed for that request to our configured AI provider, currently DeepSeek. This can include resume text, a job description, career preferences, or an interview-answer transcript. The purpose is to generate the analysis, draft, ranking, or coaching response you requested.

RemoteNurse runs an automatic check for obvious identifiers such as record numbers, birth dates, Social Security numbers, emails, and phone numbers. RemoteNurse does not put request text or provider responses in application logs, and does not create a separate stored AI conversation history for Career Studio or Interview Studio. Resume Check and Apply Tailor automatically omit the structured name, email, phone, home location, and profile links from the text sent to the provider. The provider processes the remaining request under its own service terms and retention controls. For every AI feature, remove patient information, payer credentials, and identifiers from narrative text before submitting. Audio used for speaking or interview input is processed in memory and is not deliberately stored; only the transcript is sent for coaching.

How you control sharing

  • Set your profile to private, public, or a private secret link at any time.
  • Choose exactly which metrics and verified results appear before anything is shown.
  • Download a shareable report of your verified practice from your profile settings. For a full copy of your data, write to support@remotenurse.org.
  • Delete your account from profile settings on the website, from Settings in the mobile app, or by contacting support.
  • Employer reports are only ever shared with your explicit consent.

Account deletion is self-serve after an explicit confirmation on the website or in the mobile app. It destroys your name, email, password, sessions, and every case attempt, note, score, and verdict you have produced, along with your profile, privacy settings, and every link that opened a shared profile. One record is permanent by design, because others rely on it: an issued Verified Assessment credential, whose verification record is retained and marked revoked, exactly as if you had revoked it yourself. The work behind that credential - your notes and action trace - is deleted with everything else. If you subscribed, your billing account is closed. Stripe subscriptions are canceled before the provider customer and local billing rows are removed.

Your rights

You can ask to see, correct, download or delete your data, or to stop a use you agreed to. Write to support@remotenurse.org. We reply within 15 days.

You can also complain to the data protection authority where you live. For example: the Nigeria Data Protection Commission, the Data Protection Board of India, Brazil's ANPD, Kenya's Office of the Data Protection Commissioner, or South Africa's Information Regulator.

If something goes wrong

If your data is exposed, we will tell you and the authorities that need to know as soon as we can, and within the time the law sets.

Patient data

Do not enter real patient data, protected health information, or real payer credentials into any field.