NURSE FROGE

Your study story is personal.

Nurse Froge version 2 privacy notice

Pre-release notice, updated September 10, 2026. This notice applies to the account-based version 2 beta when you use it. It does not replace the separate policy for the currently released version 1 app.

Nurse Froge is operated by John Lewis. For privacy or support, email johnlewisivv2@gmail.com.

What we save

Account details. Supabase handles your sign-in email, account identifier and the Apple, Google or email identity you choose. Apple may supply a private relay address. Froge does not request your Apple or Google password, contacts, inbox or cloud files.

Your study profile. We save the name you want Froge to use, learning stage, program, semester and classes. You can optionally add school, finals and other exam dates, graduation or term information, nursing unit, learning preferences and MBTI. The profile includes your time zone. These details personalize study; they do not certify competence or determine employment. You can edit your profile and remove optional information.

Conversations and memory. We save your messages, generated questions and explanations, submitted answers and study feedback, a short memory summary, and Froge’s name, condition and generation history. We record your AI-sharing consent and its version. A small recent-message window and a compressed summary help the tutor remember context; older saved study records can remain after a message leaves that window. Question reports and review decisions may be saved with the original item.

Purchases and service operation. Apple processes App Store payments. We receive purchase identifiers, subscription status and verification records, but not your card number. We keep request identifiers, reliability and security events, and service-cost accounting to operate the app and prevent duplicate requests or abuse. Infrastructure providers may process IP addresses and request metadata.

Support. We receive the information you include in an email. Send only what is needed, such as an error message or a redacted screenshot. Never send patient details, passwords or sign-in codes.

When information goes to AI

Before any OpenAI-generated interaction, including the laboratory introduction, naming scenes and tutoring, the app asks for your permission to share study information with OpenAI. The information sent can include your saved study profile, optional preferences, recent conversation, compressed memory, question and answer, and Froge’s current story and condition. Sign-in credentials and your account email are not deliberately included in tutor prompts. Information you type can still identify you.

We request that OpenAI not store Responses as saved API response objects. This does not mean zero retention. OpenAI says API content is not used to train its models by default unless the customer opts in. Default abuse-monitoring records may contain content for up to 30 days, with legal and safety exceptions. Prompt-cache data may remain for up to 24 hours. Froge does not claim approved Zero Data Retention. OpenAI’s data controls.

Supabase supplies account, database and backend services. The configured database region is Oregon, United States; processing by OpenAI, authentication, email, support and other infrastructure providers may occur elsewhere. Apple and Google handle their respective sign-in flows. An email delivery provider receives the sign-in address and login message when email sign-in is used. We do not sell your personal information or use it for targeted advertising. The version 2 app has no advertising SDK or public social feed.

Google Cloud hosts Froge’s purchase-verification service. It receives Apple purchase and subscription records and the account identifier needed to verify access. It does not receive study chats, profiles or saved memory. Apple processes payments.

Use fictional educational cases. Do not enter patient information, confidential employer records, passwords or other secrets. The tutor is an educational service, not a clinical-care system.

Your controls

When Apple sign-in supplies a revocable authorization grant, the backend verifies and encrypts it for account-deletion processing; it is excluded from tutor prompts. The service attempts Apple revocation during deletion. If an older sign-in did not supply that grant, the app can complete data deletion while explaining the separate manual Apple-authorization step.

How long records remain

Study data remains with your account until you clear or delete it, subject to the app’s count-based history limits. Those limits are not timed-erasure promises. Clearing history removes access to hosted exports and starts file cleanup; a previously issued download link can remain usable until it expires. Copies already downloaded cannot be recalled.

We keep a limited deletion-status record so the app can confirm the outcome if the connection is interrupted. It remains while deletion is pending. Completed confirmations expire after 30 days and are cleared automatically. This record does not contain your study history.

Minimal Apple purchase-ownership and transaction records remain after account deletion to prevent the same purchase from being assigned to a different account and to handle verification. They include transaction identifiers and a cryptographic account binding, without your chat or study profile. These records are pseudonymous, not anonymous, and currently have no automatic expiry. Some service-accounting and security records likewise remain without a fixed automatic deletion period. Support correspondence remains in our support mailbox unless removed or handled in response to a valid deletion request.

Infrastructure logs and any provider backup copies follow the provider’s applicable retention and service configuration. Deleting active data does not instantly erase an existing backup. We do not promise a particular backup recovery window in this beta. We may preserve information when legally required or needed to resolve security, billing or rights requests.

Deleting a Froge account does not cancel an Apple subscription. Manage or cancel through Apple. Contact support before deleting an account with an active purchase; a new account cannot automatically take over the deleted account’s purchase.

Security, age and requests

The app uses authenticated, account-scoped access; native session credentials use device secure storage. These controls reduce risk but do not guarantee perfect security. Froge is intended for nursing students and adult learners, and is not directed at children under 13. Contact us if you believe a child under 13 supplied personal information.

Depending on where you live, you may have rights to access, correct or delete personal information or object to certain processing. Email johnlewisivv2@gmail.com. We may verify that a request concerns your account and will explain any information that must be retained. We will update this notice and provide appropriate notice of material changes.