Privacy Policy

1. Information we collect

• Account information — your name, email, and login credentials (via Google, Apple, or email/password).
• Work data you enter — clients/patients, visits, vitals, wound assessments, clinical notes, schedules, earnings, and expenses.
• Photos — wound and visit photos you capture, stored in encrypted, access-controlled cloud storage.
• Location & mileage — device location used to calculate mileage and optimize your route. Used while you use those features; not sold or used for advertising.
• Payment information — handled by our payment processors (Apple, Stripe, and/or RevenueCat). We do not store full card numbers.
• Usage & device data — app diagnostics and crash/error data to keep the app working. We do not use session recording or ad tracking.

2. Patient information (PHI) & HIPAA

Information you enter about patients is Protected Health Information (PHI). When we handle PHI on your behalf, we act as your Business Associate and will enter into a Business Associate Agreement (BAA) where required by law.

• Encryption — PHI is encrypted in transit and at rest.
• Access control — only you and those you authorize can access your patients' records; every access is logged in an audit trail.
• AI minimization — when you generate a note with AI, we send only initials and city — never a patient's full name, date of birth, or address — to our AI provider, which does not retain it to train models.

You remain responsible for using NurseTrack in line with your own HIPAA obligations and your agency's policies, including the "minimum necessary" principle.

3. How we use information

• To provide the app's features — notes, mileage, routing, scheduling, and earnings.
• To generate documentation using AI, at your request.
• To process your subscription and send service messages.
• To secure the service, prevent abuse, and fix problems.

We do not sell your information, and we do not use PHI for advertising.

4. Service providers we share with

We share information only with vendors that help us run NurseTrack, under contract and (where PHI is involved) under a BAA:

• Microsoft Azure — hosting, database, encrypted storage, and AI.
• Google Maps Platform — geocoding and route optimization (addresses only).
• Apple / Stripe / RevenueCat — subscription payments.
• Twilio — optional appointment text messages you choose to send.
• OpenWeather — weather (coordinates only).

5. How long we keep it

We keep your information while your account is active. When you delete your account (Section 6), we delete or de-identify your personal data. Some records may be retained where required by law or for legitimate business needs (e.g., billing records), and audit logs are retained per healthcare-recordkeeping standards.

6. Your rights & account deletion

You can access and update your information in the app. You can delete your account and personal data at any time from Settings → Delete account. Depending on where you live, you may have additional rights (access, correction, deletion, portability); to exercise them, contact us at support@nursetrack.app.

7. Security, children, and changes

We use industry-standard safeguards, but no system is perfectly secure. NurseTrack is for licensed professionals and is not directed to children under 18. If we change this policy, we'll update the date above and, for material changes, notify you in the app. Questions? Email support@nursetrack.app.

A. About the reminder service

NurseTrack ("we," "us," or "our") is a scheduling and documentation platform operated by Christopher Kelly, doing business as NurseTrack, and used by licensed home-health nurses and agencies to coordinate patient visits. As part of that care coordination, NurseTrack sends SMS text message appointment reminders on behalf of your home-health nurse or agency so you know when your nurse will arrive.

B. Information we collect for reminders

• Your first name (used to personalize the reminder)
• Your mobile phone number
• Your scheduled visit date and approximate arrival time window
• Records of messages sent to you and your responses (including opt-out requests)

We do not include diagnoses, medications, vital signs, clinical notes, or any other Protected Health Information (PHI) in our SMS messages. Reminders contain only your first name and the time window of your upcoming home visit.

C. How we use it

• Send you appointment reminders for scheduled home health visits
• Notify you of changes to a scheduled visit (e.g., time adjustments)
• Respond to replies you send us, including HELP and STOP requests
• Maintain records required by state and federal healthcare regulations

We do not sell, rent, or share your mobile phone number or any SMS-related information with third parties for marketing purposes. Phone numbers collected for SMS reminders are never shared with affiliates or outside parties for their own purposes.

D. Message frequency, rates & consent

Message frequency depends on your visit schedule. On a typical scheduled-visit day, you may receive approximately 2 messages per day (for example, a day-before reminder and an on-the-way notice). Typical active patients receive up to approximately 10 messages per week. You will not receive messages on days when you do not have a scheduled visit.

Message and data rates may apply depending on your mobile carrier and plan. We do not charge you for receiving SMS reminders, but your carrier may charge standard messaging rates.

We obtain your verbal consent to receive SMS appointment reminders during your intake visit, and we document that consent in your intake paperwork signed at the start of service. You may decline SMS reminders at any time without affecting your nursing care.

E. Opt-out and HELP

You can stop receiving SMS reminders at any time by replying to any message with STOP, STOPALL, UNSUBSCRIBE, CANCEL, END, or QUIT. After you send one of these keywords, you will receive a single confirmation message and will not receive further SMS reminders unless you opt back in. Opting out of SMS reminders does not end your nursing care — your nurse will continue to visit on the scheduled dates.

Reply HELP to any message to receive a reply containing our contact information, or contact us directly (Section G).

F. Security, HIPAA & retention

We take reasonable administrative, technical, and physical safeguards to protect the limited information we collect. SMS messages are sent through Twilio, a licensed communications provider. Because SMS is not an encrypted channel, we intentionally limit the content of our messages to non-sensitive information (first name and visit time window only).

Your home-health nurse or agency operates under HIPAA as your healthcare provider; NurseTrack processes this limited information on their behalf. SMS appointment reminders are designed to comply with the HIPAA Privacy Rule's provisions for appointment reminders. If you have concerns about how your protected health information is handled, contact your nurse or agency for their Notice of Privacy Practices, or contact us (Section G).

We retain SMS-related records (phone number, consent record, and message logs) for as long as you are an active patient and for the period required by applicable state and federal healthcare recordkeeping laws after the end of service. When retention is no longer required, records are securely deleted or de-identified. Our SMS service is intended for adult patients or the adult guardian of a minor patient; we do not knowingly collect mobile phone numbers directly from children under 13.

G. SMS service contact

• NurseTrack — operated by Christopher Kelly, d/b/a NurseTrack
• SMS phone: (951) 644-1507
• Email: support@nursetrack.app