Trust and safety

Privacy

Effective July 21, 2026

ScrubHub is a nursing-education product, not a patient-care system. We collect the information needed to personalize study, sync an account, run community features, and provide optional AI, tutor-memory, and live-media tools. ScrubHub is not designed to receive protected health information (PHI). Do not enter patient identifiers or PHI anywhere in the service.

Information you choose to provide

• Study profile: nursing program or certification, current course, goal date, focus areas, schedule, school, and study preferences.
• Study activity: lesson progress, quiz answers, mistakes, notes, test history, saved sessions, mastery estimates, tutor-memory choices, and text extracted in your browser from study material you select.
• Account information: name, email, sign-in credentials, subscription entitlement, and referral activity.
• Community information: profile details you elect to share, posts, room messages, classmate connections, study goals, reports, and moderation records.
• Optional media: microphone, camera, or screen-capture data when you deliberately use a live room or attach media to feedback. Other room participants may receive media you publish. When you deliberately begin an AI voice or video session, the selected provider receives the audio and any video you choose to share. Your camera is never required. A transcript can be saved to ScrubHub notes only when you select that option; ScrubHub discards the callback transcript instead if its safety screen detects likely identifiers, secure-exam content, or restricted bulk copying.

Information stored on your device

ScrubHub can be used before creating an account. Your browser may store your profile, progress, notes, sessions, test history, preferences, and a device identifier. This information stays in that browser until you clear it, reset the relevant feature, or browser settings remove it. Signing out or deleting an account does not clear that browser storage.

When you select a PDF, Word document, or text file in Study Sessions or Notes, the file is read in your browser. ScrubHub saves the extracted text and source filename, not the original document, on that device. If you sign in, the supported session or note containing that extracted text can sync to your account. Feedback attachments are different: an image or short video you explicitly attach is uploaded with the report.

Operational information

ScrubHub records limited technical information needed to meter Free or paid usage, prevent duplicate requests, diagnose generation failures, measure whether beta features work, and protect accounts. Depending on the event, this can include a pseudonymous account or device hash, event name, route, timestamps, duration, error code, and browser or device information. A network address can contribute to a hashed rate-limit identifier. Product analytics use an allowlist and are not intended to contain note text, prompts, passwords, email addresses, or payment details.

How we use information

• Build and rank your study path and remember your preferences.
• Deliver lessons, practice, review, visual learning, study rooms, and body doubling.
• Sync progress across devices and operate Free or Pro limits.
• Protect the community, investigate reports, prevent abuse, and troubleshoot problems.
• Process purchases, referrals, and account access.
• Improve reliability, accessibility, safety language, and product design.

Second Brain and learner memory

ScrubHub’s Second Brain separates reviewed educational knowledge from private learner personalization. Only a versioned claim in the published review state can be returned as established Second Brain knowledge. A learner’s statement, note, conversation, performance, or memory is not automatically treated as clinical truth and is not automatically used to train or fine-tune a global model.

Long-term tutor memory is off until a signed-in learner turns it on. If enabled, ScrubHub can privately remember study goals, confirmed preferences, questions, explanation feedback, and mastery estimates for that account. It labels tutor inferences separately from learner-confirmed information. A “Do not remember” session is excluded from new long-term memory. Private memory is stored under the authenticated account and is not placed in the global clinical knowledge index.

Interactions can create de-identified, aggregated quality signals, such as a frequently missed concept or a weak explanation. ScrubHub screens those signals for likely identifying, secure-exam, and restricted content and sends eligible signals to a review queue. They do not become published clinical knowledge without evidence and attributable human review. Automated screening is a guardrail and may not identify every sensitive detail.

Service providers

We use specialized providers to host the app and data, process payments, send transactional email, deliver AI-generated educational features, support account sign-in, and power optional live audio/video. The provider involved depends on the feature you choose, and it receives the information needed to perform that feature under its own terms. When you request an AI lesson, quiz, test, memory aid, or coaching response, the topic, relevant study profile, recent conversation, reviewed source excerpts, and study text you choose for that request can be sent to the AI provider. Stripe processes payment details; ScrubHub does not store full card numbers.

ScrubHub preserves a legacy LiveAvatar video integration, but new legacy sessions remain unavailable while its external provider identity and safety context are being reverified. A limited, authorized pilot may use Tavus as the audio/video interface. Tavus is not ScrubHub’s clinical source of truth or canonical learner-memory store. ScrubHub does not request Tavus cross-conversation memory or recording during the first pilot. Permanent provider credentials stay on the server; a browser receives only the information needed to join the session it deliberately started. ScrubHub screens the complete text conversation and constructed tutor context before a custom language-model request and refuses detected identifying, secure-exam, or restricted content locally.

We do not sell personal information. We may disclose information when required by law, to protect users or the service, or as part of a business transaction with appropriate safeguards.

Your controls

• Community school, program, and cohort sharing is off by default and can be changed in your community profile.
• Invite-only study-room details, member lists, messages, and shared study items require membership in that room. The signed-in focus hall is a shared presence space: current participants can see the names and study goals of other current participants.
• Body doubling starts camera-off unless you choose camera access. Microphones remain muted in the focus hall.
• You can deny microphone or camera permission in your browser.
• You can delete individual study sessions, posts, AI-coach notes, and other content where the product offers that control.
• A signed-in learner can open What ScrubHub Remembers to view, correct, or remove individual memories; clear conversation memory or all personalization; turn long-term memory off; choose whether a session is remembered; and see separate mastery estimates. Turning memory off prevents new long-term retention but does not by itself erase existing memories, so use the clear or delete controls when erasure is intended.
• You can sign out without deleting on-device study data.
• A signed-in learner can use Account settings to download an authenticated JSON export of the main account, synced study, community-profile and post, classmate, feedback-metadata, subscription, private Second Brain memory, mastery, retrieval-audit, and avatar-session summary data available to the export. Provider join links, provider credentials, raw password records, and other users’ information are excluded.
• A signed-in learner can use Account settings to delete the account after identity confirmation. An active paid subscription must be canceled first. For a known Tavus pilot conversation, ScrubHub requires provider-side deletion to be confirmed before local account deletion continues. The legacy LiveAvatar integration does not expose a verified hard-delete operation in this application; ScrubHub removes its own session bindings and reports that provider limitation. Account deletion removes the supported associated ScrubHub records, invalidates sessions, and does not clear study information stored in the browser. Limited payment, fraud, security, moderation, or incident records may remain when reasonably necessary.
• Use in-app Feedback for a correction request or privacy question. We may need to verify your identity before acting.

Retention and security

On-device information remains until it is cleared. Account and synced study information, community profiles, group and membership records, classmate connections, and beta records do not have an automatic expiry in the current service and are generally kept while the account is active or until an applicable deletion action is completed. The following server-side records have code-enforced expiry windows:

• Feedback attachments: up to 30 days; feedback report metadata: up to 180 days.
• Community posts and likes: up to 180 days; community abuse reports: up to 90 days.
• Study-room messages and shared study items: up to 60 days; focus-hall presence check-ins: about 2 minutes.
• Allowlisted product analytics: up to 180 days; generation reliability events: up to 90 days.
• Cached generation state and generated output: up to 14 days.
• Requests between registered classmates: up to 60 days. Classmate invitation links can be used for 14 days; invite records expire after up to 90 days.
• Daily usage counters: about 2 days; monthly usage counters: about 40 days.
• Private retrieval audits and per-session “Do not remember” choices: up to 180 days.
• Private tutor memories include a review/expiry date and a matching automatic storage expiry. Temporary context uses one day, tutor inferences use 30 days, and confirmed or learner-entered memory ordinarily uses 365 days unless a supported shorter or longer review period is chosen. You can erase an item sooner with the delete, clear-personalization, or account-deletion control. A content-free deletion marker can remain for up to 180 days.
• Private avatar connection records and provider bindings: up to 45 days. Provider-usage summaries and provider-deletion audit results: up to 400 days. A signed-in account’s sanitized avatar-session summary has no automatic expiry. An individual provider-data deletion keeps the summary and deletion result but removes saved provider transcript/session access data where supported; account deletion removes the account summary.

Password-reset records expire after one hour. A signed-in session can last up to 90 days but stops working earlier after account deletion, a password reset, or another session-version change. De-identified candidate learning insights and their clinical-review history have no automatic expiry because they are separated from the learner account; quarantined content and screening are still subject to review and deletion procedures. Safety, fraud, payment, moderation, beta-administration, and incident records that have no automatic expiry may be retained longer when reasonably necessary. We use practical safeguards, but no online system can promise absolute security.

Children and changes

ScrubHub is not intended for children under 13. We may update this notice as the product changes and will revise the effective date when we do.

Contact

Open ScrubHub and choose Feedback from the navigation for privacy questions or requests.