Privacy Policy

Stable-ish ("we", "us", "the app") is a clinical knowledge reference tool for trained emergency department and critical care registered nurses. We respect your privacy. This policy explains what data the app collects, how it is used, and your choices.

1. Who we are

Stable-ish is built and operated by the Stable-ish team. For privacy questions, contact us at privacy@stableish.me.

2. What information we collect

We collect the minimum data needed to operate the app:

• Anonymous profile ID. When you first open the app, a random UUID (e.g., a1b2c3...) is generated and stored locally on your device. We do not collect your name, email, phone number, or any contact information. No account or login is required.
• Clinical questions and AI responses. Questions you type or dictate, and the answers returned, are stored on our backend tied to your anonymous profile ID so you can see your history and bookmarks. They are not associated with any identifiable person.
• Bookmarks and saved items. Tool snippets, scenarios, and questions you save.
• Audit logs. Endpoint, timestamp, latency, and anonymous profile ID are logged for safety review and quality improvement.
• Camera, microphone, photo library access. Used only when you explicitly tap a feature that requires them (ECG photo upload, voice dictation, document attachment). The image or audio is sent transiently to our AI provider for processing and the result is stored — we do not store the raw image or audio file beyond the request.

3. Information we do NOT collect

• Your name, email, phone number, address, or any contact info
• Location (the app does not request GPS access)
• Health data from Apple Health / HealthKit
• Contacts or calendar
• Advertising identifiers (IDFA) — we do not show ads
• Patient data, MRNs, or any field that identifies a specific patient

4. How we use your information

• To generate AI clinical reference responses
• To show your question history and saved bookmarks
• To improve answer quality, detect bugs, and review safety
• To comply with legal obligations if applicable

We do not sell, rent, or share your data with advertisers.

5. Third-party AI providers

To generate clinical reference content, the app sends your typed or dictated question to AI providers under contract:

• Anthropic (Claude Sonnet 4.5) — text questions and AI responses (privacy policy). Inputs sent to Claude are not used to train Anthropic models per their API terms.
• OpenAI (Whisper) — audio you record for voice dictation (privacy policy). Audio is transcribed and discarded.

These providers process content strictly to deliver the response and do not retain it beyond their stated retention windows.

5b. Website analytics (Google Analytics)

Our marketing website (stableish.me) uses Google Analytics 4 to measure aggregate visitor behaviour — page views, referral sources, general geography (country & region, not precise location), device type. We use IP-anonymisation and Google Consent Mode v2, which means no analytics cookies or identifiers are set until you tap “Accept” on the cookie banner. If you tap “Reject” (or ignore the banner), we still receive aggregated cookieless pings that Google uses only for internal modelling — no persistent identifier is stored on your device.

Google Analytics data is separate from any data collected by the Stable-ish iOS app; the app itself does not use Google Analytics.

5c. California residents (CCPA / CPRA)

We do not sell or share personal information for cross-context behavioural advertising as those terms are defined under the California Consumer Privacy Act. If you are a California resident and want to exercise your rights to access, correct, or delete personal information, email privacy@stableish.me. You may also revoke your analytics consent at any time by clearing your browser storage for stableish.me, which will bring the cookie banner back on your next visit.

6. Data retention and deletion

Your data is associated with your anonymous profile ID. You can delete your data at any time:

• Open the app → Settings → "Clear all data"
• Or email privacy@stableish.me with your profile ID and we will purge it
• Uninstalling the app removes the local profile ID; without it, your backend data becomes unrecoverable orphaned content

7. Security

• All traffic uses HTTPS (TLS) in transit
• Data is stored on managed cloud infrastructure with industry-standard access controls
• We do not collect identifiers that could be used to re-identify you

No system is 100% secure. By using Stable-ish you accept residual risk.

8. Minors

Stable-ish is intended for licensed registered nurses and clinicians only. It is not directed to minors under 17. We do not knowingly collect data from minors.

9. International users

The app is operated from the United States. By using Stable-ish you consent to processing of your information in the United States.

10. Your rights

Depending on where you live (e.g., California CCPA, EU GDPR), you may have the right to:

• Request a copy of the data we hold about your profile ID
• Request deletion of that data
• Object to specific processing

Email privacy@stableish.me with your anonymous profile ID (found in Settings) to make a request.

11. Medical disclaimer

Stable-ish is an educational reference tool. AI-generated content can be incomplete, outdated, or wrong. Stable-ish does not diagnose, treat, or prescribe. Always verify against your hospital policies, pharmacy, and provider orders. Do not use Stable-ish in place of clinical judgment.

12. Changes

We may update this policy from time to time. Material changes will be announced in the app. The "Last updated" date at the top will always reflect the current revision.

13. Contact

Privacy questions: privacy@stableish.me
Safety concerns: safety@stableish.me

14. Related Policies

This Privacy Policy should be read alongside our Terms of Service and Medical Disclaimer, which together govern your use of Stable-ish.