🔒 Privacy First: ShiftWhisper is designed with privacy at its core. No patient data is stored in the cloud. All patient notes remain on your device and are automatically deleted after every shift. We process data momentarily for transcription and AI handoff generation, but we never store it on our servers.
This Privacy Policy explains how Tailwind, LLC ("we," "us," or "our") collects, uses, and protects your information when you use ShiftWhisper.
When you create an account, we collect:
If you sign up via Google Sign-In, we receive your name, email, and profile picture from Google.
Important: All patient data you enter — voice notes, transcriptions, patient identifiers (room numbers, initials), and handoff reports — is stored locally on your device only using browser localStorage.
Patient data is:
We collect anonymized usage data to improve the Service:
This data does not include patient information or clinical content.
Payment processing is handled by third-party payment processors (e.g., Stripe). We do not store your credit card numbers or payment details. We receive only:
We use your account information to:
When you use voice capture or generate handoff reports, your data is processed momentarily through HIPAA-compliant infrastructure:
All communication is encrypted using SSL/HTTPS.
We use anonymized usage data to:
We do not sell, rent, or trade your personal information to third parties for marketing purposes.
We share data with trusted third-party service providers who assist us in operating the Service:
These providers are contractually obligated to protect your data and use it only for the purposes we specify.
We may disclose your information if required by law or in response to:
If Tailwind, LLC is acquired, merged, or sells assets, your information may be transferred to the new owner. We will notify you before your information is transferred and becomes subject to a different privacy policy.
ShiftWhisper is designed to support HIPAA-compliant workflows. We have implemented safeguards to protect patient data:
You are solely responsible for ensuring compliance with HIPAA and other privacy regulations. This includes:
We implement industry-standard security measures to protect your data:
No system is 100% secure. While we take reasonable precautions, we cannot guarantee absolute security. You are responsible for keeping your account credentials confidential.
Patient data stored locally on your device is automatically deleted when you end your shift. You can also manually clear data at any time by ending your shift or clearing browser storage.
We retain your account information (email, name, subscription details) for as long as your account is active. If you delete your account, we will delete your account data within 30 days, except where we are required to retain it for legal or regulatory purposes.
Anonymized usage data may be retained indefinitely for analytics and improvement purposes.
You can access and update your account information at any time through your account settings.
You can delete your account and all associated data by contacting us at privacy@shiftwhisper.com. Patient data is automatically deleted after every shift.
You can opt out of non-essential emails by clicking "unsubscribe" in any email we send. You cannot opt out of essential account-related communications (e.g., password resets, billing notices).
If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):
To exercise these rights, contact us at privacy@shiftwhisper.com.
We use cookies and similar tracking technologies to:
You can disable cookies in your browser settings, but some features of the Service may not function properly.
ShiftWhisper is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children. If we discover that we have collected data from a child, we will delete it immediately.
ShiftWhisper is operated in the United States. If you access the Service from outside the U.S., your data may be transferred to and processed in the U.S., which may have different data protection laws than your country. By using the Service, you consent to this transfer.
We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email or through the Service. The "Last Updated" date at the top of this page will reflect the most recent changes. Your continued use of the Service after changes take effect constitutes acceptance of the updated Privacy Policy.
If you have questions, concerns, or requests regarding this Privacy Policy or your data, please contact us:
Tailwind, LLC
Email: privacy@shiftwhisper.com
Website: shiftwhisper.com
Key Takeaways: