Privacy & security
Private by design.
Effective 14 October 2026 · Version 2.1
Nurse Focus, a Sterling Readiness Group, LLC product, is built to hold as little of you as possible. Here is exactly what that means — in plain language.
Nurse Focus is for adults 18 and older who work in healthcare.
What we store
- — No account. Nurse Focus does not ask for your name, email, employer, or password.
- — If you use an access code, your device keeps a signed pass that names the sponsor code — nothing about you. On our side, we count how many times a code has been redeemed, and nothing else.
- — Anonymous usage counters (a random session id and a salted, one-way hash of your network address) that keep the free preview from being abused. They expire within days and hold no message content.
- — An anonymous safety tick when a safeguard fires: the tier reached and a timestamp. No name, no session id, no words you said.
- — With each safety tick, whether the crisis banner was shown or the conversation was paused for crisis support, and the two-letter US state the request came from (for example, TN), so we can file state safety reports. We never store your IP address, city, or anything more precise than the state.
- — Ordinary technical logs (request timing, error traces) that keep the app running. These are not tied to conversation content.
What we never store
- — Your conversations with Maren are not saved to the Nurse Focus application database, and Nurse Focus does not create a conversation history. When you close the tab, the thread is gone from the app, including from your device.
- — No transcripts, excerpts, keywords, summaries, or distress phrases pulled from what you told Maren.
- — Your conversations are never used to train any AI model, ours or anyone else's.
- — No patient information. Please don't put it in the app. Nurse Focus is not a covered entity.
- — No advertising or tracking profiles. No advertising is shown during a conversation, and we never sell or share health information. There is no third-party ad or analytics pixel following you between pages.
- — Nothing goes to your employer, your manager, your board of nursing, or your licensing body. There is no organizational dashboard.
How and when we tell you Maren is AI
Maren is an AI companion, and we say so where you can't miss it. A one-line notice sits in the chat header for the whole conversation. A disclosure card appears at the start of your first conversation, again if a week or more has passed since your last one, and again every three hours if you stay in one continuous conversation. If you ask her whether she is a person, human, real, or an AI, she tells you plainly that she is an AI companion before anything else. Companion chatbots may not be suitable for some minors; Nurse Focus is for adults 18 and older.
How sponsor access stays anonymous
- — Every page of the app is served over HTTPS, and traffic between the app and the database is encrypted in transit. Stored data is encrypted at rest by our hosting provider.
- — Hospitals, unions, and sponsors buy access as a code. They receive no roster, no names, no usage times, no message counts, and no transcripts — there is nothing about individuals for us to give them.
- — Your access pass lives only on your device. Clearing your browser data removes it; you can re-enter the code any time.
- — Every request to Maren carries a short-lived signed session token checked on the server. Requests without one are refused with a generic error.
- — Administrative keys live only on the server and are never shipped to the browser. There is no admin console that reads conversations, because there are no conversations to read.
How Maren actually processes what you say
To answer you, the text of your message and the current thread travel over encrypted connections through two hops: first to the Lovable AI gateway, which routes the request, and then to OpenAI, the model provider behind it, which generates Maren's reply. That's the path your words take, and it's the only place they leave this app.
Nurse Focus does not save message content to its application database, create a conversation history, index it, or use it for reporting, research, or profiling. We have disabled the gateway's optional platform-side logging of AI call content and request that model responses are not stored. Message content is still processed transiently by the gateway, OpenAI, and their infrastructure under their applicable terms solely to generate the reply.
OpenAI may retain API inputs and outputs for up to 30 days for abuse monitoring, after which they are deleted, unless zero-data-retention has been approved for our account.
In this policy, “not saved to our database” describes Nurse Focus's application storage; it does not mean that outside providers never process or temporarily handle the data. Because Nurse Focus does not create a conversation history, Maren starts each conversation without a memory of the last one. That's a deliberate trade: less continuity, far less exposure.
Who handles your data (subprocessors)
- — Supabase — the managed database that holds sponsor codes and anonymous usage counters, with row-level security closed by default.
- — Lovable AI gateway — routes each chat message from our server to the model. Message content passes through transiently; platform-side retention of AI call content is disabled for this app.
- — OpenAI — the model provider behind the gateway. It receives the message text and thread to generate Maren's reply, under its own API data terms.
Lovable Cloud (hosting and edge routing) and Supabase (database), both in US regions.
No other third party receives your data. No advertisers, no analytics pixels, no data brokers.
A clean slate every conversation
Maren does not remember you between visits, and that is on purpose. She arrives in each conversation with a fresh intention — listening only to what is happening now, without past labels or a paper trail. When you close the screen, it's gone. There's nothing to leak, nothing to request, and nothing to delete.
If you're in crisis
Maren steps aside and points you to 988 — people trained for exactly that moment. No one at Nurse Focus reads what you wrote, then or later. The handoff is designed to get you to a human if you need one, not to create a record.
How safety works walks through the four levels and what happens at each one.
Not clinical care
Nurse Focus is a support tool, not treatment. Maren is not a therapist, does not diagnose, and does not chart. Nothing here creates a medical record or a clinical relationship, and none of it is a substitute for care from a licensed clinician.
Cookies
Nurse Focus sets one strictly-necessary first-party cookie used by our hosting platform to route and secure requests. It contains no personal information and is not used for tracking. We set no advertising or analytics cookies, so no cookie banner is required.
Your privacy rights by state
Residents of California, Colorado, Connecticut, Oregon, Texas, Virginia, Washington and other states with privacy laws can ask what we hold, ask for deletion, and opt out of sale or sharing. Because Nurse Focus holds nothing that identifies you, there is nothing to return or delete, but we answer every request within 45 days at NurseFocus@SterlingLLC.com. We never sell or share personal or health data.
Washington consumer health data
For Washington residents, this policy also serves as our Consumer Health Data Privacy Policy under the My Health My Data Act. The only health-related data processed is the anonymous safety tick described above. We do not geofence health facilities.
Breach notification
If unsecured health-related data were ever breached, we would notify affected users and the FTC as required by the Health Breach Notification Rule.
Children
Nurse Focus is for adults 18 and older. We do not knowingly collect information from anyone under 18; if we learn we have, we delete it.
Questions
Privacy questions can be sent to nursefocus@sterlingllc.com. Sterling Readiness Group, LLC operates Nurse Focus. This page describes current practice and will be updated as the app changes; it isn't a legal opinion, third-party audit, or certification.