Privacy Policy
This Privacy Policy explains how Casebook ("we," "us," or "our") collects, uses, and protects your information when you use Casebook (the "Service"). By using the Service, you agree to the practices described here. This policy should be read together with our Terms & Conditions.
1. Information We Collect
We collect only what is needed to provide the Service:
- Account information: your email address, an optional name, and a securely hashed version of your password. We never store your password in plain text and cannot see it.
- Content you create: activities, shifts, hours, experience notes, reflections, tags, and similar information you choose to enter.
- Technical information: basic data needed to keep you logged in (session cookies) and to operate and secure the Service.
We ask that you do not enter patient-identifying information or any protected health information into the Service. See our Terms & Conditions for details.
2. How We Use Your Information
- To create and maintain your account and authenticate you;
- To provide, operate, and improve the Service;
- To send you essential account emails, such as password-reset messages (we do not send marketing emails without your consent);
- To protect the security and integrity of the Service;
- To comply with legal obligations.
3. How Your Information Is Stored and Protected
Your data is stored using reputable third-party infrastructure providers located in the United States. Passwords are protected using one-way hashing. Data is encrypted in transit (HTTPS/TLS) and encrypted at rest by our database provider. While we take reasonable measures to protect your information, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.
4. Third-Party Service Providers
We use trusted third parties to operate the Service, including a cloud application host, a managed database provider, and an email-delivery provider for transactional emails. These providers process information only as needed to perform services for us and are subject to their own privacy and security practices. We do not sell your personal information.
5. Cookies
We use a single essential session cookie to keep you signed in. This cookie is required for the Service to function and is not used for advertising or third-party tracking.
6. Data Retention and Deletion
We retain your information for as long as your account is active. You may request deletion of your account and associated data at any time by contacting us at support@joincasebook.com. We will delete or anonymize your data within a reasonable period, except where we are required to retain it by law.
7. Your Rights
Depending on where you live, you may have rights to access, correct, delete, or export your personal information, or to object to or restrict certain processing. To exercise any of these rights, contact us at the email below and we will respond as required by applicable law.
8. Children's Privacy
The Service is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us information, please contact us and we will delete it.
9. Changes to This Policy
We may update this Privacy Policy from time to time. We will indicate changes by updating the "Last updated" date above. Your continued use of the Service after changes become effective constitutes acceptance of the updated policy.
10. Contact
Questions about this Privacy Policy? Contact us at support@joincasebook.com.