Privacy Policy

Stable-ish is a clinical knowledge reference tool for trained emergency department and critical care registered nurses. It is operated by Stable-ish LLC ("we", "us", "the app"). We respect your privacy. This policy explains what data the app collects, how it is used, and your choices.

1. Who we are

Stable-ish is built and operated by the Stable-ish team. For privacy questions, contact us at privacy@stableish.me.

2. What information we collect

We collect the minimum data needed to operate the app:

• Anonymous profile ID. When you first open the app, a random UUID (e.g., a1b2c3...) is generated and stored locally on your device. We do not collect your name, email, phone number, or any contact information. No account or login is required.
• Clinical questions and AI responses. Questions you type or dictate, and the answers returned, are stored on our backend tied to your anonymous profile ID so you can see your history and bookmarks. They are not associated with any identifiable person.
• Bookmarks and saved items. Tool snippets, scenarios, and questions you save.
• Audit logs. Endpoint, timestamp, latency, and anonymous profile ID are logged for safety review and quality improvement.
• Camera, microphone, photo library access. Used only when you explicitly tap a feature that requires them (ECG photo upload, voice dictation, document attachment). The image or audio is sent transiently to our AI provider for processing and the result is stored — we do not store the raw image or audio file beyond the request.
• Clinical calculator inputs. When you use a bedside calculator (weight-based dose, Parkland burn fluid, Peds dose, GCS, CrCl, anion gap, IBW/ABW, etc.), you may type numeric values such as a weight, a lab value, or vital signs. These values are used only to compute the calculator result. They are not associated with any identifiable patient and are not transmitted to product-analytics providers — PostHog receives only the fact that a given calculator was opened, never the numeric values you entered.
• Subscription status. If you start a free trial or subscribe, we store whether you have an active subscription and which tier (monthly / annual / founding member). We do not see or store your credit card, bank details, or Apple ID password — Apple handles all payment processing.

3. Information we do NOT collect

• Your name, email, phone number, address, or any contact info
• Location (the app does not request GPS access)
• Health data from Apple Health / HealthKit
• Contacts or calendar
• Advertising identifiers (IDFA) — we do not show ads
• Patient data, MRNs, or any field that identifies a specific patient

4. How we use your information

• To generate AI clinical reference responses
• To show your question history and saved bookmarks
• To improve answer quality, detect bugs, and review safety
• To comply with legal obligations if applicable

We do not sell, rent, or share your data with advertisers.

5. Third-party AI providers

To generate clinical reference content, the app sends your typed or dictated question to AI providers under contract:

• Anthropic (Claude Sonnet 4.5) — text questions and AI responses (privacy policy). Inputs sent to Claude are not used to train Anthropic models per their API terms.
• OpenAI (Whisper) — audio you record for voice dictation (privacy policy). Audio is transcribed and discarded.

These providers process content strictly to deliver the response and do not retain it beyond their stated retention windows.

5b. Website analytics & advertising tags

Our marketing website (stableish.me) uses the following third-party tags to measure aggregate visitor behaviour and to attribute conversions from paid campaigns:

• Google Analytics 4 — page views, referral sources, country/region (not precise location), device type.
• Google Ads conversion tracking — records "App Store click" events so we can measure the return on paid ad campaigns.
• Meta Pixel — same purpose as Google Ads tracking, for Facebook and Instagram ad campaigns.
• TikTok Pixel — attribution and conversion tracking for TikTok ad campaigns. Records aggregate pageviews and App Store click events. Data sent to TikTok Ads (US). Gated by our cookie banner and GPC signal in the same way as Meta and Google Ads.
• PostHog (marketing site) — anonymous product analytics for the marketing website only. Records aggregate pageviews, autocaptured clicks (e.g., which App Store button you tapped), and referrer / campaign source. Session replays are disabled on the marketing site. PostHog receives an anonymous random ID assigned to your browser session and coarse geolocation derived server-side from your IP; we do not send PostHog your email, name, or any personal identifier. Data is sent to PostHog Cloud (US).
• Emergent platform analytics — our hosting provider (Emergent) also runs its own operational telemetry to keep the site online and diagnose errors. This is separate from our PostHog instance and is not tied to any personal identifier.

All of the above are gated by Google Consent Mode v2 and our cookie banner. Nothing that would set an identifying cookie fires until you tap “Accept”. If you tap “Reject” (or ignore the banner), Google, Meta, TikTok, and PostHog are all opted out — no persistent identifier is stored on your device. We also honour the Global Privacy Control (GPC) browser signal as an automatic opt-out.

Website analytics are entirely separate from any data collected by the Stable-ish iOS app.

5c. Mobile app analytics (iOS)

Inside the Stable-ish iOS app, we use two lightweight tools to understand how nurses use the app and to catch bugs before they affect more users:

• PostHog — product analytics. Records anonymous events like “opened the ACLS scenario” or “used the drip calculator” so we can improve what nurses actually reach for. We do not send PostHog your email, username, real name, or your device’s user-assigned name. PostHog does, however, receive:
  • A random anonymous ID assigned to your install (not linked to your identity).
  • Your device model & iOS version (e.g., iPhone 15 Pro Max, iOS 26).
  • Approximate location derived from your IP address — city, state, postal code, and coarse latitude/longitude. Your raw IP address is processed server-side by PostHog only to derive this location and is not stored as a queryable property.
• Sentry — crash and error reporting. When something in the app throws an error, Sentry captures the technical details so we can fix it. What Sentry receives:
  • A random pseudonymous user ID (UUID like 9279c02d-ec3c-4322-8f29-771993558a18) — not linked to your email or name.
  • Device model (e.g., iPhone 15 Pro Max) and iOS version.
  • The stack trace and code path that caused the error.
  Sentry does not receive your email, real name, IP address, or any content you type into the app.

Sentry is also used on our backend server to catch API errors. That usage is server-side only and never involves a device identifier.

5d. Subscription payments (Apple IAP + RevenueCat)

Stable-ish offers a paid subscription (14-day free trial, then $9.99/month or $79.99/year) via Apple’s In-App Purchase system. When you subscribe:

• Apple processes the payment. Stable-ish LLC never sees your credit card, bank account, or Apple ID password.
• RevenueCat — a subscription-management service — receives the anonymous transaction receipt from Apple so that we can verify your subscription status across devices, handle restore-purchase requests, and grant Founding Member pricing to existing subscribers. RevenueCat receives your anonymous app user ID, subscription tier, trial status, and purchase timestamps. It does not receive your name, email, credit card, or any clinical content.

To manage or cancel your subscription, go to Settings → Apple ID → Subscriptions on your iPhone — we do not have the ability to cancel it for you, but our support team will point you to the right menu at any time.

5e. California residents (CCPA / CPRA)

We do not sell or share personal information for cross-context behavioural advertising as those terms are defined under the California Consumer Privacy Act. If you are a California resident and want to exercise your rights to access, correct, or delete personal information, email privacy@stableish.me. You may also revoke your analytics consent at any time by clearing your browser storage for stableish.me, which will bring the cookie banner back on your next visit.

6. Data retention and deletion

Your data is associated with your anonymous profile ID. You can delete your data at any time:

• Open the app → Settings → "Clear all data"
• Or email privacy@stableish.me with your profile ID and we will purge it
• Uninstalling the app removes the local profile ID; without it, your backend data becomes unrecoverable orphaned content

7. Security

• All traffic uses HTTPS (TLS) in transit
• Data is stored on managed cloud infrastructure with industry-standard access controls
• We do not collect identifiers that could be used to re-identify you

No system is 100% secure. By using Stable-ish you accept residual risk.

8. Minors

Stable-ish is intended for licensed registered nurses and clinicians only. It is not directed to minors under 17. We do not knowingly collect data from minors.

9. International users

The app is operated from the United States. By using Stable-ish you consent to processing of your information in the United States.

10. Your rights

Depending on where you live (e.g., California CCPA, EU GDPR), you may have the right to:

• Request a copy of the data we hold about your profile ID
• Request deletion of that data
• Object to specific processing

Email privacy@stableish.me with your anonymous profile ID (found in Settings) to make a request.

11. Medical disclaimer

Stable-ish is an educational reference tool. AI-generated content can be incomplete, outdated, or wrong. Stable-ish does not diagnose, treat, or prescribe. Always verify against your hospital policies, pharmacy, and provider orders. Do not use Stable-ish in place of clinical judgment.

12. Changes

We may update this policy from time to time. Material changes will be announced in the app. The "Last updated" date at the top will always reflect the current revision.

13. Contact

Privacy questions: privacy@stableish.me
Safety concerns: safety@stableish.me

Mailing address:
Stable-ish LLC
557 Prospect Ave., Suite 102
West Hartford, CT 06105
United States

14. Related Policies

This Privacy Policy should be read alongside our Terms of Service and Medical Disclaimer, which together govern your use of Stable-ish.