Privacy Policy

Information we collect

We may collect the following information when you use the website:

• Contact form details, such as name, email address, organization, phone number, primary interest, visitor type, requested next step, and message.
• Website analytics events, such as page views, navigation clicks, call-to-action clicks, and form completion events.
• Technical information, such as browser type, approximate country from Cloudflare, referrer, page path, and user agent.

Nurse Resource content requests

When you request educational content, we collect your name, email, topic, selected audiences, licenses or roles, and any optional specialties, format preference, and learning goals you provide. If you complete About you, we also collect your self-reported role and the optional hospital or school, specialties, programs taught or studied, semester or term, expected graduation month, care setting, and additional context you supply. These details describe you separately from the intended learners. We store this information in our private Supabase CRM to review and respond to requests. Resend may notify Rich of the request. These fields are not included in website analytics.

Requesting content does not subscribe you to marketing. The optional resource-alert checkbox is unchecked by default and uses the separate confirmation and unsubscribe process described below. We keep request records while reviewing suggestions and planning or responding to content needs. Contact richard@yourfriendrich.com to request correction or deletion. Do not include patient information or confidential workplace material.

Nurse Resource alerts

When you sign up for resource alerts, we collect your email address and a dated record of your consent. About you is optional: you can provide your self-reported nursing role, hospital or school, specialties, programs taught or studied, semester or term, expected graduation month, care setting, and additional context. We use these details to plan useful resources. We store them privately with a fresh pending confirmation request, including when you opt in from a content request. A public signup cannot change these details for an already confirmed subscriber; contact us for corrections. We do not verify credentials from these selections. The checkbox is unchecked by default. We activate alerts only after you confirm your email, and use this subscription for new Nurse Resources only. It does not subscribe you to another marketing list, and downloading a resource does not require subscribing.

Supabase stores your consent, subscription status, and records of attempted alert delivery. Resend sends the confirmation and resource emails. Each alert includes a link to unsubscribe from resource alerts or stop publisher marketing emails. We preserve bounce and suppression records, and a signup never silently reverses an existing opt-out.

To limit misuse, we store a daily salted hash of the network address, never the raw address in this subscription record. Expired network hashes and unconfirmed requests older than 30 days are removed during signup or alert-delivery cleanup; on a quiet site they may remain until the next cleanup. Optional alert profile details are removed when you unsubscribe from resource alerts. A separate content request retains the context supplied with that request as described above. Confirmed consent and minimal opt-out records are kept to manage your preferences. Email addresses, role details, and confirmation/unsubscribe tokens are excluded from website analytics. Contact richard@yourfriendrich.com to request correction or deletion.

Android release updates

When you join the Chest Tube Simulator Android release list, we store your name, email address, the Android release interest, and a dated record of your consent in our private CRM hosted by Supabase. The checkbox is unchecked by default. We use this signup for Chest Tube Simulator Android release updates only, and do not add it to a general marketing list.

This website signup does not create an app account or collect app activity or patient data. Your name and email are not included in website analytics. To leave the list or ask us to correct or delete your signup, email richard@yourfriendrich.com. We keep the signup until you ask us to remove it or the Android release update has been sent and the list is no longer needed.

App access requests

The app access request form at /app-access/ is a website form. The apps themselves do not collect the details described in this section. When you submit a request we collect:

• Your full name and email address, which are required so we can evaluate the request and reply.
• The app you selected and the type of access you are requesting.
• Professional details you choose to share: profession, professional role, practice area, specialty or subspecialty, career stage, years of experience, and an optional description of your background.
• Optional organization details: organization or employer, department, organization website, approximate number of users or seats, and a needed-by date.
• Your intended use, device platforms, and your written request, including any details you add about teaching, simulation, or beta testing.
• The source or campaign tag on the link you arrived from, when there is one.
• A one-way, salted hash of your IP address, used only to limit the number of submissions per hour. It cannot be turned back into your IP address. We clear it from the request record once it is more than 24 hours old, and that clearing runs whenever the form receives another request, so on a quiet day a hash can sit a little longer before it is removed.

We use this information only to evaluate and fulfill the request, to check it against access that an administrator has pre-approved for a named person, to send the confirmation and access emails for that request, and to prevent duplicate or fraudulent claims. We do not use your profession, specialty, or app choice to infer anything about your health, and we do not use requests to profile you for advertising.

• Pre-approved access records. We hold the names, and sometimes the email addresses, of people who have been pre-approved for access, provided by them or by their organization. A request is compared with these records only for the app you selected, using an exact match on the name you enter.
• Records we keep. For each request we keep the request itself, its review status, any pre-approved record it matched, the access code record issued for it, the emails we sent and whether they were delivered, and an audit trail of automatic and administrative actions.
• Access codes. Codes are stored encrypted in our database. Depending on how a code was set up, it is shown to you on the confirmation screen, sent to your email address, or shown on a page linked from that email. Emails are delivered through Resend, so the code appears in the email message. Full codes are never written to our analytics or application logs.
• Form analytics. Our first-party analytics record which app you selected, the request type, the profession category you chose, which step you reached, and whether the request was submitted or fulfilled automatically, together with the page path, referring page, approximate country, and browser type recorded for every page. They never include your name, email address, free-text answers, or codes, and they do not set cookies or store a visitor ID.
• Marketing updates. We send product and launch updates only if you check the separate opt-in box, which is unchecked by default. Emails about your request are sent regardless because they are needed to process it.
• Retention. We keep request records for 24 months after the request is closed, and issued-code and audit records for as long as the code could still be redeemed or reused, so we can answer questions, prevent duplicate or fraudulent claims, and keep operational records.
• Your choices. You can ask us to correct or delete your request records by emailing richard@yourfriendrich.com with your request reference. We may keep a minimal record of an issued code and the audit entries needed to prevent reuse or resolve a dispute.
• Do not include patient names, medical record information, protected health information, passwords, payment information, or other sensitive data anywhere in a request or in a reply to our emails.

How we use information

We use collected information to:

• Respond to inquiries and launch-list requests.
• Evaluate and fulfill app access requests, including matching a request to access that was pre-approved for a named person.
• Understand interest in the nurse education app, VitalSim, courses, and partnerships.
• Improve website content, calls to action, and product messaging.
• Maintain site security, reliability, and operational records.

Educational and health information

This website is for education, product updates, and business inquiries. Do not submit patient information, medical record details, protected health information, or urgent clinical questions through any website form.

Service providers

We use service providers to operate the website and related systems. These may include Cloudflare for hosting and security, Supabase for lead and analytics storage, Resend for email notifications, GitHub for source control and deployment, Squarespace for domain services, and Google Workspace for email. When enabled, Cloudflare Turnstile checks that a form submission comes from a person and processes your IP address and browser information under Cloudflare's privacy policy.

Analytics

The website uses first-party analytics that do not set tracking cookies or store visitor IDs. The analytics system records anonymous interaction events so we can understand whether visitors are finding the app, course, VitalSim, and contact information useful.

Sharing information

We do not sell personal information. We may share information with service providers who help operate the website, respond to inquiries, comply with legal obligations, protect rights and security, or complete a business transfer if the company changes ownership.

Retention

We keep lead and analytics information for as long as it is useful for business, product, support, legal, or security purposes. We may delete or anonymize records when they are no longer needed.

Your choices

You may ask us to review, correct, or delete contact information you submitted through the website. We may need to retain limited records when required for legal, security, or operational reasons.

Children

This website is not directed to children under 13, and we do not knowingly collect information from children under 13.

Policy updates

We may update this Privacy Policy as the website, products, or services change. The updated date above shows when the policy was last revised.

Contact

Privacy questions can be sent to richard@yourfriendrich.com.