Optional setup texts
You may separately request up to four automated setup texts over seven days. Your phone stays private, is not part of your public profile and is not used for advertising audiences. Phone numbers are encrypted at rest. Our configured messaging provider and carriers process messages to provide this program. HighLevel/LeadConnector processes your phone number and reminder messages; SMS opt-in information and consent are not shared for unrelated third-party marketing. Reply STOP or use Settings to stop. Raw incoming text bodies are not retained by Between Shifts. Limited delivery facts and consent records support your choices. Account deletion removes the phone, consent and message records; an opaque suppression hash and anonymous completion totals may remain. Full program terms are at justbetweenshifts.com/sms-terms.
Optional-email engagement
Optional community and learning emails may include a message-specific image receipt and links that record a return to your signed-in account. Our email provider may also report delivery, opens and clicks. We use these signals to measure usefulness and reduce repeated follow-ups. Image loading does not prove that a person read an email, and privacy features can hide or automatically load images. If no engagement is recorded, we may send one follow-up with a different subject and timing, subject to your consent and frequency limits. Our image-receipt feature stores the message identifier and first recorded-open time, not an IP address or device fingerprint. These signals are not used for matching, healthcare verification, or advertising audiences. You can stop optional emails using their unsubscribe link or account Settings.
Career Hub and AI interview practice
Career Hub preferences, interview answers, transcripts and coaching reports stay separate from dating discovery, matching, advertising audiences, and employer or school access. When you choose AI coaching, OpenAI processes your confirmed career context and submitted answers. Voice sessions also send microphone audio while you record an answer. The interviewer uses an AI-generated voice. Between Shifts does not store audio; the session consent notice explains whether a transcript and report will be saved. You can download or delete saved interviews from Interview Studio; account deletion removes them. We keep pseudonymous usage and cost records to enforce allowances and prevent misuse, even after an interview is deleted. We request no Responses API storage. OpenAI does not use API data for training by default, but may retain data for abuse monitoring for up to 30 days. Do not include patient names, identifiers, medical records or confidential employer information. Automated checks can miss identifying details. AI coaching can make mistakes and is communication practice, not clinical assessment, treatment advice, or a prediction of hiring success.
Private healthcare verification
When you submit a badge or professional license document, you authorize OpenAI to read the visible name, role and required professional details for automated eligibility screening. Licensed professionals without a badge may use a license certificate, digital license or official board-result image. Uncertain checks go to an authorized administrator for review. We do not use this process for face recognition, attractiveness ratings, advertising or profile-photo editing. These images never appear on your public profile. Our copy is deleted after an automatic approval. For an inconclusive check, the image and an encrypted copy of the entered identity name are kept privately for manual review, then removed after the decision or when the seven-day review window expires through scheduled cleanup. Interrupted uploads are removed by scheduled cleanup after 24 hours. We request no OpenAI API response storage; provider safety and abuse-monitoring retention may still apply. We retain the verification outcome, limited fraud-prevention fingerprints, and encrypted license details where provided so authorized administrators can perform later board checks. License access and account decisions are logged. The entered identity name is otherwise not retained unless it is also supplied as the encrypted name on a license. A school email is used for requested verification codes; we retain only a masked address, domain, and one-way fingerprints. Regular account messages go to the separately supplied sign-in email, including if you chose a school address for sign-in.
1. Who this policy covers and how to reach us
Between Shifts is the online service operated by NursingNotes through JustBetweenShifts.com. This policy applies to our public website, account sign-up, member tools, Profile Refresh services, events, communications, and related support. For a privacy request or question, use the Contact page and select ‘Privacy request.’ Please do not send government ID, patient information, payment-card details, or another person’s private information through that form.
2. Information we collect
We collect the information you give us: your first name, email address, healthcare role, city, adult-eligibility confirmation, agreement record, profile details, dating preferences, date of birth, selected neighborhood or approximate location, private healthcare affiliation, availability, photos, messages, reports, support requests, booking details, and optional marketing choices. We also collect information generated by your use of the Service, such as account activity, reciprocal matching decisions, safety actions, eligibility and verification status, device and log information, and referral or campaign attribution. For institutional-email verification, we retain the approved domain, a masked address, and one-way fingerprints needed to validate a short-lived code—not the full work or school email address. Payment-card details are entered with Stripe and are not stored by Between Shifts.
3. How we use information
If you request a name-difference review, an authorized reviewer can view your explanation and optional supporting image. Supporting images are not sent to the automated badge checker or included in notification emails. We remove these images and the submitted explanation after a decision or after seven days; we retain the decision and necessary audit record. You may cover unrelated sensitive details before uploading. We use personal information to create and secure accounts; confirm eligibility; operate matching, messaging, events, photography, benefits, billing, and support; apply your privacy settings; investigate misuse; protect members; prevent fraud; comply with law; and improve the Service. We use photos only to provide the features you choose, including private profile display, photography galleries, and automatic safety and quality screening. We may re-encode profile photos to remove embedded metadata and screen for explicit content and accidental patient, badge, schedule, document, screen, or workplace disclosures before display. If you separately choose Advanced Private Photo Review when uploading a profile photo, we may send the re-encoded image—after the safety screen passes—to the configured vision provider for constrained quality signals: lighting, sharpness, framing, source quality, and background distractions. That consent is limited to profile photos uploaded while the setting is on; it does not cover existing photos, verification evidence, rejected photos, later uploads after opt-out, marketing, or a model release. The review does not identify you, infer sensitive traits, rate attractiveness, determine compatibility, or create a marketing or model-release permission. Screening can make mistakes. General marketing and NursingNotes student offers are optional and use separate consent choices.
4. What other members and staff can see
Eligible members can see the first name, age, approved profile content, and selected general details you choose to display. Your email, date of birth, verification evidence, employer records, full availability, private feedback, exact location, and direct messages are not profile fields. Access by staff is role-limited, logged, and limited to operating, supporting, protecting, and enforcing the Service. Authorized safety staff may review reported content and associated account information when needed to investigate a report.
5. Providers and disclosures
We use service providers for hosting, authentication and email, payments, verification, photography operations, fraud and safety controls, and—when configured—automated photo screening. They receive only the information needed for their work and must handle it consistently with their contracts and applicable law. When activated, the public Contact and Share Your Story forms use Cloudflare Turnstile to assess a browser security check and prevent automated abuse; it is not used to build member profiles or advertising audiences. Before new identity or photo analysis, a separate versioned processing notice and affirmative consent are required. Veriff handles government ID and selfie checks; AWS Rekognition handles profile-photo screening. The app retains necessary outcomes and derived crop checks, not raw face geometry, landmarks or embeddings. Deleting a profile photo removes its stored image and associated app review. Provider retention, backup and legal holds follow the applicable provider arrangements and may differ from app deletion; contact Support for a verification-data deletion request. A photo-screening provider receives a private uploaded photo only to return safety and privacy signals; it is not used for advertising or public profiling. When separately opted in, Advanced Private Photo Review sends a private re-encoded profile image that already passed safety screening to OpenAI’s API for fixed quality signals only. We request no API storage; provider safety or abuse retention can still apply in exceptional cases. Identity documents are handled by the verification provider. We may disclose information when required by law, to protect people or the Service, to enforce our Terms, or in connection with a reorganization, acquisition, financing, or sale, subject to applicable law. Referral recovery snapshots are encrypted and removed after 90 days, or when an account deletion removes recovery copies. We retain limited opaque reward accounting and a one-way identity-based duplicate-bonus prevention value when needed to honor benefits, resolve disputes and prevent repeated claims; these are not shared with advertisers. We do not sell private member data for money, and we do not place advertising pixels on private member surfaces.
6. Advertising, referrals, and browser controls
For new adult public signups from October 11, 2026 onward, the notice beside the signup button explains server-side Meta Lead measurement with an easy opt-out. We may send Meta (Facebook/Instagram) a saved-signup signal, its time and deduplication identifier, the public page address without its query string, and genuine existing advertising click or browser identifiers to measure and improve our advertising. This signal does not include names, email addresses, healthcare roles, signup answers, profiles, messages or verification documents. This prospective notice basis is not recorded as consent, and past signups are not replayed. Existing opt-outs and Global Privacy Control are honored before collection and delivery. A functional browser preference cookie and local preference record help remember choices; the cookie lasts up to one year. Known account refusals are not replaced by a new public-signup default. The service is US-focused, but this measurement does not rely on verified visitor geography. Optional browser Meta page views and account-creation measurement still require an affirmative advertising choice. All events remain subject to the approved dataset event policy. Declining has no effect on signup, verification or dating. We do not export profile setup, verification, referrals, likes, matches, messages, dating preferences, employer information, precise location, or other private member activity to advertisers. Private member pages do not load Meta advertising scripts. Public campaign attribution may include a sanitized landing path, campaign identifiers and genuine browser click identifiers; no signup answers are included. With consent, public campaign information is remembered in the current tab for up to 30 minutes, including the first and converting touch. You can withdraw public advertising permission below. Withdrawal stops new sharing; it does not erase data a provider already received. Previously granted private-member advertising permission can be withdrawn in Settings. We do not create new audiences from private member stages. Referral links separately remember the first valid invitation for up to 30 days; invitation codes are validated independently. Inviter reports are aggregate. Google Ads measurement has its own separate choice on public acquisition pages and remains off without that choice. Its signup action records a saved registration, not identity or healthcare verification; enhanced conversions and personalized advertising are disabled for that action. No form answers, verification materials, profiles or messages are sent to Google.
7. Retention and account deletion
We retain information for as long as reasonably necessary to provide the Service, maintain security, meet legal obligations, resolve disputes, and enforce agreements. You can export your account data, pause discovery, or request deletion from Settings. Account deletion removes profile data, photos, availability, likes, photography galleries, and message content attributable to the deleted account, and suppresses future marketing email. We may retain limited records needed for completed payments, fraud prevention, safety investigations, legal obligations, backups, and dispute resolution. We delete manual verification evidence after review unless a longer retention period is required for a specific safety, legal, or dispute purpose.
8. Your privacy rights and choices
Depending on where you live, you may have rights to request access to, correction of, deletion of, or a portable copy of personal information, to appeal a decision where required, and to opt out of certain processing. We will not discriminate against you for exercising an applicable privacy right. To make a request, use the Contact page and select ‘Privacy request’; include the email associated with your account and the right you want to exercise. We may ask for information reasonably necessary to verify an account request and will respond within the time required by applicable law. Marketing choices can also be changed through an unsubscribe link or account settings. A parent or guardian who believes a minor has provided information may contact us through the same form.
9. Security, international processing, and changes
We use reasonable administrative, technical, and organizational measures designed to protect personal information, including restricted access and security controls for private member content. No online service can guarantee absolute security. Our providers may process information in the United States and other locations where they operate, subject to appropriate safeguards where required. We may update this policy when our practices or legal requirements change. For a material change, we will update the effective date and provide additional notice when required. The current version is always available at /privacy.
SMS Terms · Privacy Policy · Optional text consent example
Your privacy choices
New public signup measurement follows the notice shown before signup, unless you opt out or enable Global Privacy Control. Optional browser page views and account-creation measurement still require a separate affirmative choice. Private member pages never load advertising pixels.