We do not sell or ad-target your health data.
RN PocketPal is a professional tool for clinicians. We collect only limited health-adjacent professional data (such as your nursing role and specialty), we obtain your consent for it, we never sell it, and we never share it with advertising or behavioral-analytics networks.
Who and what this covers
This policy is published by Charles Enterprises, LLC(“RN PocketPal,” “we”) and applies to any “consumer health data” we process about you through the RN PocketPal website and apps. RN PocketPal is not a HIPAA-covered entity, which is precisely why state consumer-health-data laws such as MHMDA apply to us. Note that RN PocketPal is designed to record a clinician’s professional attributes and workflow — not the user’s own diagnoses, conditions, or treatment — and you are asked never to enter patient information (PHI) into the product.
Consumer health data we collect, and why
- Professional role (e.g., RN, LPN/LVN, CNA, NP, student) — to tailor the default toolkit and reference content to your scope of practice.
- Specialty / practice area (e.g., telemetry, ICU, ED) — to surface relevant tools, brain sheets, and reference material.
- Tool usage you choose to save — content you actively create or store in the app (e.g., a shift brain sheet), kept to provide the feature to you.
We do not ask for, and you should not enter, your own medical conditions, diagnoses, medications, or biometric data, nor any patient PHI. If health-adjacent data is ever entered into a free-text field, we treat it under this policy and our unintended-PHI protocol.
Where it comes from
Directly from you, when you set up your profile or use a feature. We do not buy consumer health data from data brokers and we do not infer it from third-party tracking (our site runs no advertising or behavioral trackers — see our cookie policy).
How we use it, and who we share it with
We use consumer health data only to operate and personalize the service for you, and to keep it secure. On sharing:
- No sale. We do not sell consumer health data under MHMDA’s definition of “sale,” or under any other state’s definition.
- No advertising or behavioral analytics. We never share consumer health data with ad networks, data brokers, or behavioral-analytics providers.
- Limited service providers only. We share it solely with vetted processors that host or secure the service on our behalf, under contracts that bind them to the same restrictions. These are listed in our privacy policy.
- Legal compliance. We may disclose data if required by law, or to protect safety, as described in our privacy policy.
Consent and withdrawal
We obtain your consent before collecting health-adjacent data, and we obtain separate authorizationbefore any sharing that would require it under MHMDA (today, none — we do not share consumer health data beyond the limited service providers above). You may withdraw consent at any time; on withdrawal we delete the consumer health data collected on that basis, subject to any legal-retention obligation. Withdrawing consent never affects your access to the service.
Your rights
- Access / know what consumer health data we hold about you.
- Delete your consumer health data.
- Withdraw consent to its collection and sharing.
- Appeal a denied request — see “How to exercise these rights.”
How to exercise these rights
Email privacy@rnpocketpal.com with the subject [HEALTH DATA], or use the form at /data-requests. We verify the request, respond within 30 days (up to 45 in complex cases, with notice), and never charge you. If we deny a request, you may appeal using the appeals process described on the data-requests page; Washington residents may also contact the Washington State Attorney General.
See also our full privacy policy. Last updated July 7, 2026.
