Privacy notice

NurseLINK Privacy Policy

This policy explains what information NurseLINK processes, why it is needed, how it is protected, and the choices available to users.

Effective and last updated: August 31, 2026

NurseLINK policy

Privacy topics

This policy covers the NurseLINK web portal, mobile applications, backend services, and related support services.

9 sections
01Information we collect

Information is provided by users or authorized administrators, created through use of NurseLINK features, or collected from a device when required to operate notifications and supported app versions.

Account and profile information

School ID, full name, school email address, optional mobile number, role, assigned level, section, group, profile image, account status, authentication details, and session information.

Academic and duty information

Assigned schedules, clinical sites, duty areas, attendance times and status, manual attendance reasons, progress records, clearances, extension days, appeals, reports, and related approvals or feedback.

Clinical education records

Clinical case type, patient initials and age, diagnosis, procedure details, reflections, instructor feedback, and associated duty information. Users should not submit a patient's full name or unnecessary direct identifiers.

Uploads and user-provided content

Profile images, appeal evidence, clearance attachments, supporting files, notes, reasons, remarks, and other content intentionally submitted through NurseLINK.

Device and notification information

Push-notification token, device platform, installed app version, and build information used to deliver notifications and confirm whether a mobile version is supported.

Usage and security records

Login activity and actions that create, edit, approve, reject, submit, or delete system records. These records support security, accountability, troubleshooting, and audit requirements.

Bluetooth and location:NurseLINK uses Bluetooth Low Energy to support nearby duty attendance. NurseLINK does not collect or store GPS coordinates or track a Clinical Instructor's physical location.
App device code:The mobile app creates an app-scoped code and includes it in audit and attendance records. It helps authorized reviewers notice when the same phone records attendance for different accounts. It is a review note only, does not block Time In or Time Out, is not used for advertising or cross-app tracking, and does not expose the phone's raw platform identifier.
02How information is used

NurseLINK processes information only for legitimate educational, administrative, operational, and security purposes, including to:

  • Authenticate accounts and enforce role-based access.
  • Assign schedules and manage duty attendance, including authorized offline synchronization.
  • Receive, validate, and report clinical cases, progress, clearances, appeals, and extension days.
  • Send account, schedule, attendance, decision, security, and app-update notifications.
  • Maintain audit records, prevent misuse, troubleshoot issues, and protect system integrity.
  • Respond to support requests and comply with applicable institutional or legal obligations.

NurseLINK does not sell personal information, display third-party advertising, share information with data brokers, or use collected information for cross-app tracking.

03Service providers and disclosure

Information is available only to authorized users according to their roles and may be processed by service providers that support NurseLINK. Each provider receives only information reasonably needed for its service.

HostingerHosts the backend services and database environment used to operate NurseLINK.
CloudinaryStores and delivers files or images that users intentionally upload.
BrevoProcesses school email addresses when delivering password-reset messages.
Expo and Apple Push Notification serviceProcess device push tokens and notification payloads to deliver mobile alerts.
VercelHosts the NurseLINK web portal and public information pages.

Service providers are expected to process information only to deliver their contracted services and to maintain protections consistent with this policy. Information may also be disclosed when required by law, to protect users or the service, or as part of an authorized institutional investigation.

04Data retention and deletion

Account, academic, attendance, clinical education, and audit records are retained while needed to provide NurseLINK and to satisfy legitimate academic, administrative, security, dispute-resolution, backup, and legal requirements. Different record types may have different retention periods.

When information is no longer needed, it is deleted or de-identified through authorized procedures. Backup copies may remain until the applicable backup rotation completes. A deletion request may be limited when a record must be preserved for an ongoing academic process, security investigation, legal obligation, or other lawful purpose.

05Security safeguards

NurseLINK uses administrative and technical safeguards designed to protect information, including HTTPS connections, authenticated access, role-based permissions, hashed passwords, session controls, audit logging, database backups, and restricted production operations.

No electronic system is completely risk-free. Users should protect their credentials, keep their devices secured, avoid sharing reset codes, and promptly report suspected unauthorized access.

06Your privacy rights and choices

Subject to applicable law and appropriate identity verification, users may request access to personal information, correction of inaccurate records, objection to or restriction of certain processing, deletion or blocking, and data portability where applicable. Users may also withdraw consent where processing depends on consent, without affecting processing already lawfully completed.

Some academic or administrative records can be corrected only through an authorized institutional process. Users may also raise a privacy concern with the Philippine National Privacy Commission.

07Children and international processing

NurseLINK is an institutional clinical education service and is not directed to children under 13. Accounts are created or managed for authorized users rather than through unrestricted public registration.

Some service providers may process information using infrastructure located outside the Philippines. When this occurs, NurseLINK relies on appropriate service arrangements and safeguards for the information processed.

08Changes to this policy

This policy may be updated when NurseLINK features, service providers, or legal requirements change. The updated date at the top of this page identifies the current version. Material changes may also be communicated through the application or another appropriate channel.

09Contact us

Questions, concerns, and privacy requests may be sent to NurseLINK technical support: