Security brief

Messages travel from the device to our server, through the AI gateway, to the model, and back. Message content is never written to the database.

• — Lovable Cloud — hosting and edge routing.
• — Supabase — database for sponsor codes and anonymous counters.
• — Lovable AI gateway — routes each message to the model; platform-side logging of AI call content disabled.
• — OpenAI — model provider that generates Maren's replies, under its API data terms.

All traffic uses TLS (HTTPS) end to end. Stored data is encrypted at rest by the database provider. Access to the database is server-only, with row-level security closed by default.

• — Conversation content: not stored by Nurse Focus.
• — Anonymous usage counters: deleted after 3 days.
• — Safety ticks: tier, timestamp, banner/lockout flags and US state only — no identity, session, or words.
• — Sponsor codes: kept with a redemption count for the life of the sponsorship.

Provider-side handling is described in the Privacy policy.

Nurse Focus is not a HIPAA covered entity and is designed to hold no protected health information. Users are told not to enter patient information.

Sterling Readiness Group, LLC, 41 Peabody Street, Nashville, TN 37210 · NurseFocus@SterlingLLC.com