Private by design.

• — Your account: the email address you signed up with, or the fact that you signed in with Google. Nothing else is required — no name, no employer, or anything personal.
• — An anonymous safety tick if the crisis pipeline hands off to 988, or when Mira notices acute distress. This includes the moment and the timestamp. No name, no user id, no words you said. It exists so we know the safeguards are working — nothing more.
• — Ordinary technical logs (request timing, error traces) that keep the app running. These are not tied to conversation content.

• — Your conversations with Mira. They are not written to our database. They are not encrypted-and-kept or kept at all. When you close the tab, the thread is gone, including from your own device.
• — No transcripts, excerpts, keywords, summaries, or distress phrases pulled from what you told Mira.
• — No patient information. Please don't put it in the app. Nurse Focus is not a covered entity.
• — No advertising or tracking profiles. We don't sell data, we don't run ads, and there is no third-party ad or analytics pixel following you between pages.
• — Nothing goes to your employer, your manager, your board of nursing, or your licensing body. There is no organizational dashboard.

• — Every page of the app is served over HTTPS, and traffic between the app and the database is encrypted in transit. Stored data is encrypted at rest by our hosting provider.
• — Sign-in is handled by a managed authentication service. We never see or store your password — it's hashed by the provider, and Google sign-in never hands us a password at all.
• — Your account row is protected by database-level row security that is closed by default. A signed-in session can reach your record and no one else's. Other users can't read it, and the app has no query path that returns another person's data.
• — The chat endpoint requires a valid signed-in session on the server before a single word reaches Mira. Requests without one are refused with a generic error that reveals nothing about the account.
• — Administrative keys live only on the server and are never shipped to the browser. There is no admin console that reads conversations, because there are no conversations to read.

To answer you, the text of your message and the current thread travel over encrypted connections through two hops: first to the Lovable AI gateway, which routes the request, and then to OpenAI, the model provider behind it, which generates Mira's reply. That's the path your words take, and it's the only place they leave this app.

We write none of it down. Nurse Focus does not keep a copy, does not index it, and does not feed it into any reporting, research, or profile about you — and we've disabled the gateway's optional platform-side logging of AI call content, so nothing is retained on our side of the request at all. Message content passes through the gateway and the model provider transiently, under their own privacy terms, solely to generate the reply.

Because nothing is retained, Mira starts each conversation without a memory of the last one. That's a deliberate trade: less continuity, far less exposure.

• — Supabase — holds your account and authentication data (your email address and sign-in records) in a managed database with row-level security.
• — Lovable AI gateway — routes each chat message from our server to the model. Message content passes through transiently; platform-side retention of AI call content is disabled for this app.
• — OpenAI — the model provider behind the gateway. It receives the message text and thread to generate Mira's reply, under its own API data terms.

No other third party receives your data. No advertisers, no analytics pixels, no data brokers.

There's no conversation history to delete — that's the point. If you want the account itself gone, ask and we'll remove it, along with your email address, within 30 days. The anonymous safety ticks can't be removed on request because they were never connected to you in the first place.

Mira steps aside and points you to 988 — people trained for exactly that moment. No one at Nurse Focus reads what you wrote, then or later. The handoff is designed to get you to a human if you need one, not to create a record.

How safety works walks through the four levels and what happens at each one.

Nurse Focus is a support tool, not treatment. Mira is not a therapist, does not diagnose, and does not chart. Nothing here creates a medical record or a clinical relationship, and none of it is a substitute for care from a licensed clinician.

Privacy questions — including account deletion — can be sent to hello@nursefocus.com. This page describes current practice and will be updated as the app changes; it isn't a third-party audit or certification.