This policy says what personal data ResidentBuddy keeps, why, and who sees it. It goes with the Terms and Conditions.
1. Who is responsible
Ido Nissim and Noa Zimhony-Nissim, the owners named in the terms, reachable at contact@residentbuddy.com.
2. What we keep
- From Google sign-in: your name, email address, Google account identifier and the address of your profile picture.
- What a program Admin enters about you: your email address, your User Type (Admin, Resident or Nurse), the Courses you are in and your Role in each, with the dates you joined or left them. For a Resident also the Track and the Program Gantt, its Absences included.
- What you create: your Exam answers, saved before you submit them and after, and your Scores; the Messages, Exams and Questions you write, with any files attached to a Message; which Messages you have read. For a Resident also the Personal & Research Timeline entries and which Station Checklist items are checked.
- Bug reports: the description you write, who sent it, your Role on that screen (and an Admin's View Mode), the page it was sent from, the window size, the theme, the browser's user agent and the time.
- Usage statistics: Vercel Web Analytics counts page views without cookies. It records the page (with no ids in its address), the page you came from, the time, and your city-level location, browser, operating system and device type, and does not identify you.
3. Why
Only to run the platform for the residency program: sign-in, Courses and Exams, the Resident's schedule, and fixing bugs. Nothing is sold, used for advertising or shared with the employer beyond what the program's Admins see in the app.
4. Who sees it
- You see your own data.
- The Students and Teachers of a Course see its Messages, each with its author's name, or email address when there is no name.
- A Teacher sees how many Students took their Exams and how the results add up, never Student names or individual Scores.
- A Resident's Program Gantt, Timeline and Station Checklist progress are seen by that Resident and the program's Admins only.
- A program Admin sees everything in the program, bug reports included.
5. Service providers
Google (sign-in), Vercel (hosting and usage statistics), Neon (the database) and Cloudflare R2 (attached files) handle the data on our behalf, only to provide their service.
The data is kept in the United States: the database in Ohio (Neon on AWS US East 2), the attached files in eastern North America (Cloudflare R2), and the platform runs in Washington, D.C. (Vercel). Pages are delivered through Vercel's worldwide network. Google handles sign-in under its own privacy policy, in the United States and elsewhere.
6. Cookies and storage
A sign-in session cookie and the short-lived cookies that protect signing in with Google, a View Mode cookie for Admins, and your theme and colour scheme choices, kept in your browser. No advertising or tracking cookies.
7. How long
For as long as your account exists. Removing you from a Course, the last one included, or changing your User Type deletes nothing. You can ask for your account and data to be deleted by writing to contact@residentbuddy.com.
8. Your rights
Under the Israeli Privacy Protection Law you can ask to see, correct or delete your data, by writing to contact@residentbuddy.com.
9. Do not upload patient information
Do not write or attach patient information anywhere on ResidentBuddy, as the terms say.
10. Changes
The date at the top says when this policy last changed.