Privacy Policy

1. Introduction

Nurse Tasker ("we", "us", "our") provides clinical shift planning, bed board and organisation administration software, available at nursetasker.com and app.nursetasker.com, and through our iOS, Android, Windows and Mac apps (together, the "Service"). This Privacy Policy explains what information we collect, why we collect it, and how it's used and protected.

Nurse Tasker is a shift-planning and coordination tool, not an electronic health record. We do not intend for full patient medical records to be entered into the Service, and this policy is written with that scope in mind — see also Section 2 for how task/shift content is treated.

2. Information We Collect

Account information

When you create an account we collect your name, username, email address, and a securely hashed password (we never store your password in plain text). If you use single sign-on or enable multi-factor authentication, we store the minimum information needed to make that work.

Organisation & role information

If you join or create an organisation, we store your organisation membership, clinical role, and ward assignments, along with administrative actions taken within your organisation (for audit purposes — see Section 4).

Shift & task content

The Service stores the shift schedules, tasks, handover notes and bed/ward data your organisation enters. This content is created and controlled by you and your organisation — we do not review it, and we ask that identifying patient information be kept to the minimum your organisation's own clinical and legal obligations require (for example, initials or a room number rather than a full patient record). Your organisation remains responsible for what it chooses to record in task descriptions and notes.

Device & usage information

We collect standard technical information such as IP address, browser or app version, device type, and basic usage/error logs, used to keep the Service reliable and secure.

Cookies

The web app uses essential cookies for authentication and session management. See our Cookie Policy for full detail.

3. How We Use Your Information

• To provide, operate and maintain the Service, including real-time collaboration between your team.
• To authenticate you and enforce your organisation's roles and permissions.
• To send you service-related communications (e.g. security alerts, password resets) and, if you opt in, product updates.
• To detect, investigate and prevent fraud, abuse and security incidents.
• To improve the Service's reliability and performance.

We do not sell your personal information, or your organisation's data, to third parties.

4. Data Security

We take a defense-in-depth approach to protecting your data:

• Tenant isolation. Every organisation's data is isolated using row-level security enforced by the database itself, not only by the application layer.
• Password hashing. Passwords are hashed using industry-standard PBKDF2 with a unique salt per account — we cannot see or recover your actual password.
• Multi-factor authentication. Available on every account, and can be required organisation-wide by an administrator.
• Encryption in transit. All traffic to and from the Service is encrypted using HTTPS/TLS.
• Audit logging. Administrative actions (role changes, membership changes, permission changes) are logged for accountability.

No system is completely immune to risk, and we continuously review and improve our security practices. If you believe you've found a security issue, please let us know.

5. Data Sharing & Third Parties

We share information only where necessary to operate the Service:

• Infrastructure providers who host our servers and databases, under contractual confidentiality and security obligations.
• Email delivery providers, to send account and notification emails on our behalf.
• Legal requirements — if required to comply with a valid legal process, or to protect the rights, property or safety of Nurse Tasker, our users, or the public.

We do not share your organisation's shift, task or bed data with any other organisation using Nurse Tasker — tenant isolation is enforced at the database level, described in Section 4.

6. Data Retention

We retain your account and organisation data for as long as your account is active. Historical shift archives, login history and access audit logs are retained for a limited period for operational and compliance purposes, then automatically purged. If you close your account or your organisation is deleted, we remove personal data within a reasonable period, except where we're required to retain it for legal or security purposes.

7. Your Rights

Depending on where you're located, you may have rights to:

• Access the personal information we hold about you.
• Correct inaccurate information.
• Request deletion of your account and associated personal data.
• Export a copy of your data in a portable format.
• Object to, or restrict, certain processing of your information.

To exercise any of these rights, contact us at privacy@nursetasker.com. If you're a member of an organisation, some requests (like deleting shift data your organisation owns) may need to be actioned by your organisation's administrator, since that data belongs to your organisation's own records.

8. International Data Transfers

Your information may be processed in a country other than the one you live in. Where this happens, we take steps to ensure your information receives an adequate level of protection, consistent with this Privacy Policy.

9. Children's Privacy

Nurse Tasker is intended for use by healthcare and care professionals and is not directed at children. We do not knowingly collect personal information from anyone under the age of 16.

10. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we'll notify account holders by email or through the Service before the change takes effect. The "Last updated" date at the top of this page always reflects the most recent version.

11. Contact Us

Questions about this Privacy Policy or how we handle your data? Email privacy@nursetasker.com, or use our Contact page.