Your practice data stays yours.

What we collect

To run your account we collect only what the product needs to function:

• Account details you provide: your name and email address.
• Authentication and session data required to keep you signed in securely.
• Billing status from our payment processor when you subscribe. We never store full card numbers.

For billing reliability, a verified Stripe webhook body is retained for replay while it is being processed. Bodies for completed or ignored events are erased after 30 days. Failed-event bodies are retained for up to 90 days for controlled replay, then erased and dead-lettered. RemoteNurse keeps the event ID, type, object ID, cryptographic payload hash, status, and processing timestamps as the durable billing ledger after body erasure.

What practice data we store

As you work through cases, RemoteNurse records the practice itself so your progress is meaningful:

• The cases you attempt, the actions you take, and the order you take them in.
• Your written notes and committed next steps.
• Deterministic Case Judge scores, verdicts, and the readiness evidence they produce.

Scoring inputs and hidden case state stay on our servers and are never exposed in your browser.

What can be public

Every profile is private by default. Nothing about your practice is shared until you choose to share it. When you do opt in, only the fields you select become visible: a handle, a headline, and the specific readiness metrics you approve.

Third-party AI processing

When you choose an AI feature, RemoteNurse sends only the text needed for that request to our configured AI provider, currently DeepSeek. This can include resume text, a job description, career preferences, an interview-answer transcript, or an assistant question. The purpose is to generate the analysis, draft, ranking, or coaching response you requested.

RemoteNurse screens inputs, does not put request text or provider responses in application logs, and does not create a separate stored AI conversation history for Career Studio or Interview Studio. Resume Check and Apply Tailor automatically omit the structured name, email, phone, home location, and profile links from the text sent to the provider. The provider processes the remaining request under its own service terms and retention controls. For every AI feature, remove patient information, payer credentials, and identifiers from narrative text before submitting. Audio used for speaking or interview input is processed in memory and is not deliberately stored; only the transcript is sent for coaching.

How you control sharing

• Set your profile to private, public, or a private secret link at any time.
• Choose exactly which metrics and verified results appear before anything is shown.
• Export your practice record at any time from your profile settings.
• Delete your account from profile settings on the website, from Settings in the mobile app, or by contacting support.
• Employer reports are only ever shared with your explicit consent.

Account deletion is self-serve after an explicit confirmation on the website or in the mobile app. It destroys your name, email, password, sessions, and every case attempt, note, score, and verdict you have produced, along with your profile, privacy settings, and every link that opened a shared profile. One record is permanent by design, because others rely on it: an issued Verified Assessment credential, whose verification record is retained and marked revoked, exactly as if you had revoked it yourself. The work behind that credential - your notes and action trace - is deleted with everything else. If you subscribed, your billing account is closed. Stripe subscriptions are canceled before the provider customer and local billing rows are removed.