SBAR Practice Coach (“SBAR Practice Coach”, “we”, “us”) provides an AI-powered practice tool that helps nursing students and educators rehearse SBAR clinical handoffs. This Privacy Policy explains what we collect, why we collect it, and the choices you have. If you have questions, email sbarpractice@gmail.com.
1. Who this policy applies to
This policy applies to visitors of sbarpractice.com and to registered users of the SBAR Practice Coach web application. The service is intended for adult learners (18+) enrolled in or teaching a nursing program. It is not directed at children under 13.
2. What we collect
Account data
- Email address (required to create an account and sign in)
- Display name, if you provide one, and role (student or instructor)
- Authentication metadata (magic-link tokens, session identifiers)
Practice data you submit
- The SBAR responses you type into practice scenarios and any instructor cohort you join
- Rubric scores, focus-area notes, and safety flags generated by our AI scoring engine for each attempt
Billing data
- Subscription tier (free or paid) and Stripe customer / subscription identifiers
- Card details are handled by Stripe on their hosted checkout and billing portal. We never see or store your full card number.
Automatically collected
- Basic request logs (IP address, user agent, timestamps) used for security, abuse prevention, and debugging
- Cookies strictly required for authentication (session cookie) and CSRF protection. We do not use third-party advertising cookies.
3. Do not submit real patient information
SBAR Practice Coach is a training tool. The scenarios are AI-generated and fictional. Do not paste real patient identifiers, protected health information (PHI), or any information that could identify a real person into practice responses. We do not operate under a HIPAA Business Associate Agreement, and the service is not intended for use with real clinical data.
4. How we use your data
- Provide the core practice, scoring, and history features
- Show instructors aggregated cohort performance for classes they own
- Send transactional email (magic-link sign-in, billing receipts)
- Operate, secure, and improve the service
- Comply with legal obligations
We do not sell your personal information. We do not use your practice submissions to train third-party AI models.
5. Service providers
We share the minimum data needed with the following processors to run the service:
- Neon (Postgres database hosting) — account and practice data at rest.
- Vercel (application hosting) — serves the web app and processes request logs.
- Anthropic (Claude API) — receives scenario prompts and your SBAR responses to generate rubric feedback. Anthropic processes this data as our subprocessor and, per their API terms, does not train models on API inputs.
- Stripe (payments) — handles all payment card data and subscription billing.
- Resend (transactional email) — delivers sign-in and receipt emails.
6. Data retention
- Account & practice history: retained while your account is active. Free-tier users only see the most recent 5 attempts in the UI, but all attempts remain associated with your account until you delete it.
- Billing records: retained as required by tax and accounting law (typically 7 years).
- Request logs: retained for up to 30 days for security and debugging, then rotated.
7. Your choices
- Access & export: email sbarpractice@gmail.com and we will send you a copy of your account data within 30 days.
- Correction: update your display name in the app or email us to correct other account data.
- Deletion: email us to close your account. We will delete your account, practice history, and personal identifiers within 30 days, subject to legal retention limits above.
- Marketing: we only send transactional email today. If we ever add marketing email, it will include an unsubscribe link.
8. Security
All traffic is served over TLS. Passwords are not stored — we use passwordless magic-link sign-in via one-time email tokens. Card data never touches our servers; Stripe handles it on their hosted pages.
9. International users
The service is operated from the United States. If you access the service from outside the U.S., your data will be transferred to and processed in the U.S. by the providers listed above.
10. Changes
We may update this policy from time to time. The “Last updated” date at the top of this page will change. Material changes will be announced by email or in-app notice.
11. Contact
Questions or requests about your data: sbarpractice@gmail.com.