Privacy policy

NurseMate AI (“NurseMate”, “we”, “us”) is an educational study tool for nursing students. This policy explains what information we collect, why, and the choices you have. The short version: your study data belongs to you, we don’t sell it or use it for advertising, and you can permanently delete your account — and everything in it — yourself at any time.

What we collect

• Account details. Your email address and password (stored as a secure hash), plus the optional display name, study level, exam goal and exam date you add to your profile.
• Study activity. Study sessions, chat messages with the Challis study buddy, quiz questions and answers, scores, weak topics and progress records. We keep these so the app can adapt to you and show your progress.
• Uploaded study material. Notes, images and PDFs you choose to upload are stored in a private bucket only your account can access. The complete file is sent to Anthropic or OpenAI as needed to extract text and prepare your private study set. Do not upload identifiable patient information — the app asks you to confirm material is de-identified before upload.
• Voice input. When you use voice features, your microphone audio is captured only while you are recording. Depending on your device, speech may be processed by the operating system or browser speech service, or sent to OpenAI for transcription. We store the resulting text as part of your chat history, not the audio file.
• Preferences. Voice, speed, personality and theme settings.
• Support and safety reports. If you use the public support form, we store the reply email, category and message you provide. If you report an AI response in the app, we store that response and the immediately preceding message so an authorised person can review the problem.

We do not collect your precise location, contacts, photos (other than files you deliberately upload), or advertising identifiers, and we do not track you across other apps or websites.

How your data is processed

• Our servers. Accounts, study data and uploads are stored in our own database infrastructure (self-hosted Supabase), protected by row-level security so each account can only read its own data.
• AI providers. To generate study replies, quiz marking, upload preparation and case feedback, the content needed for the feature—including a full uploaded image or PDF—is sent to Anthropic and/or OpenAI. Audio may be transcribed by OpenAI, and the text of spoken replies may be sent to ElevenLabs or OpenAI. These providers process the content only to provide the feature requested; we do not use it for advertising.

Your AI data choice

Before using Challis, you choose whether NurseMate may send the content described above to Anthropic, OpenAI and ElevenLabs. You can withdraw that permission at any time in Settings → Third-party AI processing. AI features then stop sending new content, while non-AI settings and account deletion remain available. You can allow it again later.

What we don’t do

• No selling or renting of personal data.
• No third-party advertising or ad tracking.
• No use of your uploads or conversations to train our own models.

Retention and deletion

Your NurseMate data is kept while your account is active. AI providers may keep limited request records for security and abuse prevention under their business-service terms; those transient records are not part of your NurseMate profile. You can delete your account at any time in Settings → Delete account: this permanently removes your profile, study sessions, messages, quiz history, uploaded documents and preferences from NurseMate. Deletion is immediate in our systems and cannot be undone.

Support-form requests are stored separately because the form can be used without signing in. We keep them only as long as reasonably needed to respond, protect the service or meet legal obligations, then delete or de-identify them. Requests submitted while you are signed in are linked to your account and deleted with it. A request submitted while signed out is not linked to an account and may remain after a later account deletion. You can ask us to delete it by contacting Support from the reply email used in the request.

Security

All traffic is encrypted in transit (HTTPS). Access to stored data is limited by row-level security and authenticated sessions. No system is perfectly secure, so please use a strong, unique password.

Children

NurseMate is intended for nursing students and other adult learners. It is not directed at anyone under 16, and we do not knowingly collect data from them.

Not medical advice

NurseMate is a study aid. It does not provide medical diagnosis, treatment or patient-specific advice, and nothing in the app should be used for real patient care. See our Terms of use.

Changes and contact

If this policy changes materially, we will update the date above and note the change in the app. Questions or requests (including data access or deletion requests) — see Support.