Privacy Policy

Information we collect

We may collect the following information when you use the website:

• Contact form details, such as name, email address, organization, phone number, primary interest, visitor type, requested next step, and message.
• Website analytics events, such as page views, navigation clicks, call-to-action clicks, and form completion events.
• Technical information, such as browser type, approximate country from Cloudflare, referrer, page path, and user agent.

App access requests

The app access request form at /app-access/ is a website form. The apps themselves do not collect the details described in this section. When you submit a request we collect:

• Your full name and email address, which are required so we can evaluate the request and reply.
• The app you selected and the type of access you are requesting.
• Professional details you choose to share: profession, professional role, practice area, specialty or subspecialty, career stage, years of experience, and an optional description of your background.
• Optional organization details: organization or employer, department, organization website, approximate number of users or seats, and a needed-by date.
• Your intended use, device platforms, and your written request, including any details you add about teaching, simulation, or beta testing.
• The source or campaign tag on the link you arrived from, when there is one.
• A one-way, salted hash of your IP address, used only to limit the number of submissions per hour. It cannot be turned back into your IP address. We clear it from the request record once it is more than 24 hours old, and that clearing runs whenever the form receives another request, so on a quiet day a hash can sit a little longer before it is removed.

We use this information only to evaluate and fulfill the request, to check it against access that an administrator has pre-approved for a named person, to send the confirmation and access emails for that request, and to prevent duplicate or fraudulent claims. We do not use your profession, specialty, or app choice to infer anything about your health, and we do not use requests to profile you for advertising.

• Pre-approved access records. We hold the names, and sometimes the email addresses, of people who have been pre-approved for access, provided by them or by their organization. A request is compared with these records only for the app you selected, using an exact match on the name you enter.
• Records we keep. For each request we keep the request itself, its review status, any pre-approved record it matched, the access code record issued for it, the emails we sent and whether they were delivered, and an audit trail of automatic and administrative actions.
• Access codes. Codes are stored encrypted in our database. Depending on how a code was set up, it is shown to you on the confirmation screen, sent to your email address, or shown on a page linked from that email. Emails are delivered through Resend, so the code appears in the email message. Full codes are never written to our analytics or application logs.
• Form analytics. Our first-party analytics record which app you selected, the request type, the profession category you chose, which step you reached, and whether the request was submitted or fulfilled automatically, together with the page path, referring page, approximate country, and browser type recorded for every page. They never include your name, email address, free-text answers, or codes, and they do not set cookies or store a visitor ID.
• Marketing updates. We send product and launch updates only if you check the separate opt-in box, which is unchecked by default. Emails about your request are sent regardless because they are needed to process it.
• Retention. We keep request records for 24 months after the request is closed, and issued-code and audit records for as long as the code could still be redeemed or reused, so we can answer questions, prevent duplicate or fraudulent claims, and keep operational records.
• Your choices. You can ask us to correct or delete your request records by emailing richard@yourfriendrich.com with your request reference. We may keep a minimal record of an issued code and the audit entries needed to prevent reuse or resolve a dispute.
• Do not include patient names, medical record information, protected health information, passwords, payment information, or other sensitive data anywhere in a request or in a reply to our emails.

How we use information

We use collected information to:

• Respond to inquiries and launch-list requests.
• Evaluate and fulfill app access requests, including matching a request to access that was pre-approved for a named person.
• Understand interest in the nurse education app, VitalSim, courses, and partnerships.
• Improve website content, calls to action, and product messaging.
• Maintain site security, reliability, and operational records.

Educational and health information

This website is for education, product updates, and business inquiries. Do not submit patient information, medical record details, protected health information, or urgent clinical questions through any website form.

Service providers

We use service providers to operate the website and related systems. These may include Cloudflare for hosting and security, Supabase for lead and analytics storage, Resend for email notifications, GitHub for source control and deployment, Squarespace for domain services, and Google Workspace for email. When enabled, Cloudflare Turnstile checks that a form submission comes from a person and processes your IP address and browser information under Cloudflare's privacy policy.

Analytics

The website uses first-party analytics that do not set tracking cookies or store visitor IDs. The analytics system records anonymous interaction events so we can understand whether visitors are finding the app, course, VitalSim, and contact information useful.

Sharing information

We do not sell personal information. We may share information with service providers who help operate the website, respond to inquiries, comply with legal obligations, protect rights and security, or complete a business transfer if the company changes ownership.

Retention

We keep lead and analytics information for as long as it is useful for business, product, support, legal, or security purposes. We may delete or anonymize records when they are no longer needed.

Your choices

You may ask us to review, correct, or delete contact information you submitted through the website. We may need to retain limited records when required for legal, security, or operational reasons.

Children

This website is not directed to children under 13, and we do not knowingly collect information from children under 13.

Policy updates

We may update this Privacy Policy as the website, products, or services change. The updated date above shows when the policy was last revised.

Contact

Privacy questions can be sent to richard@yourfriendrich.com.