This notice explains what information YourNurses.io collects, why, who processes it and what you can do about it. We have tried to write it in plain words. If anything is unclear, contact us through the support page.
1. Who we are
YourNurses.io is run by [legal entity name, registered address and registration number — to be confirmed], which is responsible for your information (the “data controller”).
Our data protection officer can be reached at [DPO contact — to be confirmed]. In the Philippines, you can also contact the National Privacy Commission.
2. The short version
- You can ask questions without an account and without giving your name.
- We never sell health data, and we never show ads in medical conversations.
- Sponsors and partners never receive information that identifies you.
- If you have an account, you can download or delete your information at any time.
- We use the cookies the site needs to work. Usage statistics (Google Analytics) are the only optional ones: off until you allow them, and never on account, chat or health pages. See the cookie page.
3. What we collect and why
Using the assistant without an account
Your messages and any photos or files you add are sent to our server and on to our AI provider to write the answer. We do not store the conversation. Photos are made smaller on your device first; videos are turned into a few still pictures on your device and the video itself is never uploaded.
Your browser may save a few items on your device, such as your chosen language and health log readings. These stay on your device; see the cookie page.
A free account
We store your email address, a scrambled (hashed) version of your password, an optional preferred name, your language and time zone, and when you signed up and last signed in. We use these to run your account and send account emails.
Saved conversations and summaries
Only if you choose to save them: your messages, the assistant's answers, their urgency levels and the sources cited, plus any summary you create. You can delete a conversation at any time, and it is removed for good.
Documents
Only if you choose to keep them: files are encrypted on our server (AES-256-GCM) before they are stored in the database. If you ask the assistant to read a test result, we also store what it extracted, clearly labelled as AI-extracted.
Health profile and reminders
Allergies, medicines, conditions and notes that you add, each labelled with where it came from. Reminders you set, and, if you choose text-message reminders, your phone number. Reminder messages use neutral wording without health details.
Asking for a nurse
When you send a conversation to a nurse, we store the AI-written summary (SBAR), the conversation you sent, the urgency level, the language and your messages with the nurse. You get a private code to read the reply; we store only a scrambled version of that code. If you asked by text message, your phone number is kept only while the request is open.
Text messages and phone calls
Where this is set up, conversations by text, WhatsApp or phone are linked to a scrambled (hashed) form of your number rather than the number itself. If you book a call with a nurse and agree to reminders, we keep your number for the reminders and the call.
Support, partner and professional forms
What you write in the form and the email address you give, so we can reply. Healthcare professionals who apply also give their name, profession, licence number and issuing authority so we can verify them.
Safety, quality and running costs
We count events such as an emergency warning being shown, an answer being flagged by the safety reviewer, or a thumbs up or down, with the specialist mode and language. We do not store the text of the message for these counts. We also count AI usage per day to manage costs.
Usage statistics with Google Analytics (only if you allow them)
On our public pages, and only after you choose Allow, Google Analytics counts which pages are visited. It receives the page address (pages whose address has anything after a ? or # are not counted at all, so no search words, places or codes), the page title, the public page on this site you came from, browser and device details and a random ID in its cookies. That ID lets repeat visits be counted, and Google also sees your IP address, so these statistics are not anonymous: they are pseudonymous, which is why we ask first. Google may process them in the United States or other countries outside yours. It never runs on the assistant, your account, Request a nurse, booking, sign-in or staff pages, and it never receives anything you type or upload, your name, email, account or health information. We don't link it to your account. You can turn it off at any time on the cookie page, which also removes its cookies from this site.
Security records
We keep a log of actions taken by staff (for example, a nurse opening a request) for clinical and privacy review. To stop abuse, the server briefly keeps a count of requests per IP address in memory; it is not stored in the database.
4. Why we are allowed to use it
We ask for your consent before we store health information in an account, process documents or send reminders, and you can withdraw consent in your account settings. Usage statistics (Google Analytics) also rely on your consent, given and withdrawn on the cookie page. We rely on our legitimate interest to keep the service safe and secure, and on legal obligations where the law requires us to keep records.
[Legal bases to be confirmed for each country we operate in, including the Philippine Data Privacy Act of 2012 and, where it applies, the GDPR.]
5. Who processes your information
We use these service providers. They process information on our behalf and only for the purpose described.
| Provider | What they do | What they receive |
|---|---|---|
| Anthropic | Writes the assistant's answers, the safety review, nurse summaries, conversation summaries and test-result explanations. | The messages and files in the conversation you are having, for that answer. |
| Supabase | Hosts our Postgres database. | Everything we store, listed in section 3. |
| Vercel | Hosts the website and runs the server code. | Requests to the site, including your IP address, in its server logs. |
| Twilio | Sends and receives text messages, WhatsApp messages and phone calls, where that is set up. | Your phone number and the messages or call audio for that conversation. |
| Resend | Sends account emails (confirming your address, password resets) and email reminders, when email is set up. | Your email address and the email text. Subjects never contain health details. |
| Google Fonts | Serves the website's font. | Your IP address and browser details, as with any website you load. |
| Google LLC (Google Analytics) | Usage statistics for our public pages, only if you choose Allow. Never on the assistant, your account, nurse requests, booking, sign-in or staff pages. | The public page's address (pages with anything after ? or # in the address are not counted), its title, the public page on this site you came from (other sites as their name only), browser and device details, a random ID in its _ga cookies, and your IP address, which Google uses for a rough location and says it does not store. Google signals and ad personalisation are off. Google may process this in the United States or other countries. |
| OpenStreetMap | Shows a map in the care directory, only after you choose to show it. | Your IP address and the map area you are looking at. |
| Photon, run by komoot | Suggests places and health facilities while you type in the care finder's search boxes. Our server asks it; your browser doesn't. | The words you type in those boxes and, if you shared your location or chose a place, a point rounded to about 500 m. Not your IP address. We don't store what you type. |
Some lists on the site come from public data and receive nothing from you. The Philippine regions, provinces, cities and municipalities are the Philippine Standard Geographic Code published by the Philippine Statistics Authority (masterlist dated 12 October 2026), taken from the open-source barangay project (MIT licence).
Nurses and other verified healthcare professionals see the requests people send to them. Administrators who manage the directory, partners and analytics cannot see patient conversations or documents.
[Data processing agreements, and each provider's data retention and training terms, to be confirmed and linked here.]
6. Where your information goes
Our providers may process information outside your country, including in the United States. [Hosting regions and the safeguards used for international transfers to be confirmed.]
7. How long we keep it
- Conversations without an account: not stored by us.
- Saved conversations, documents, health profile and reminders: until you delete them or your account.
- Email confirmation links expire after 24 hours, and password reset links after 1 hour.
- Phone numbers for a nurse request by text: until the request is closed.
- Usage statistics in Google Analytics: [GA data retention setting, recommended 2 months, to be confirmed]; its cookies last 13 months or until you turn statistics off.
- Support messages, nurse requests, safety counts and staff logs: [retention periods to be confirmed].
8. Your choices and rights
You can ask to see, correct, download or delete your information, and you can withdraw consent at any time. With an account, most of this is self-service on your privacy settings page: download your data as a file, change your consents, or delete your account and everything in it.
For anything else, write to us through the support page. You also have the right to complain to your data protection authority.
9. How we protect it
- Connections to the site are encrypted (HTTPS).
- Documents are encrypted before they are stored.
- Passwords are stored only as a strong one-way hash (bcrypt). One-time links and nurse-request codes are stored only as hashes.
- The database is not reachable through Supabase's public interface; only our server can read it.
- Staff access depends on their role, and staff actions are logged.
10. Children
Parents and carers can use the assistant to ask about a child's health. Accounts are for people aged [minimum age to be confirmed] and over.
11. Changes to this notice
We will update this page when the way we handle information changes, and tell account holders about important changes by email or in the app.