Privacy Policy

What we collect

We collect what you give us in the app and what Veyla needs to work. Here’s each kind and what it’s for.

Your account

• Phone number. It’s how you sign in: we text you a 6-digit code whenever you log in.
• Email address. During setup you add an email by continuing with Apple or Google, so you never type one in. We use it only to help you get back into your account, for example after you change numbers, and to reply when you write to us. If you choose Apple’s Hide My Email, we get a private address that forwards to you.
• What Apple or Google sends us. When you continue with Apple or Google, they send us your email, an account ID and, if you allow it, your name. Apple shares your name only the first time. Google also sends a link to your Google profile picture, which we don’t use. We use the name to fill in your profile, and you can change it.
• Sign-in records. Our sign-in provider keeps records that protect your account, such as when you signed in and from which IP address.

Your profile and where you work

• Name, role and photo. Your first and last name, your role (like RN or CNA) and, if you add one, a profile photo. You can type these in or fill them in by scanning your badge.
• Your workplace. Your hospital and unit, your position and hours there (full-time, part-time or per diem), whether it’s your main job or a second one, and the color you pick for it. We also record how you got onto a unit (an invite, being the first one there, your badge, a small unit, or a coworker confirming you) and who confirmed you.
• Units and invites you make. If you add a unit, we save its name, kind and floor, and that you added it. If you make an invite link, we save which unit it’s for.
• Badge checks. When your badge confirms that you work at a hospital, we keep a short record: the hospital it matched, the name printed on it, whether the photo came from your camera or your photo library, and when. We don’t keep the photo.

Your schedule

• Shifts. The day, day or night, start and end times, whether you’re charge or precepting, low census (VLC), whether you added the shift by hand, scanned it or got it in a swap, and who you traded with.
• Shift notes. Notes you add to a shift. Only you can see them.
• Swaps. The swaps you ask for and answer, the days you’d work instead, and who said yes.
• Settings. Who sees your schedule and how much, your swap limits (like most nights in a row), 12-hour or military time, the day your week starts, your notification and calendar choices, and your name as your unit’s roster spells it.

People

• Groups. Each group’s name, its photo if you add one, and who’s in it. Only you can see your groups.
• Requests. Requests between you and other people to see a schedule, share a phone number or join a unit, and the answers.

Badge and schedule scans

Scanning saves typing. When you scan, the photo goes to our reader, which asks Claude, an AI model made by Anthropic, to read it. What it reads comes back to your phone to fill things in, and you can check and change it.

• Your badge: it reads the name, role, hospital and unit printed on it.
• Your schedule: along with the photo or screenshot, we send today’s date, the month you’re adding and your name, so it can find your row if it’s a unit roster. On a roster, it also sends back the other names on it, so you can pick your own row or invite coworkers who aren’t on Veyla yet. Those names stay on your phone; we don’t save them.

We don’t store your photos. Our reader’s logs say only what kind of details it found, never what they say. Anthropic doesn’t use what we send to train its models, and it deletes it within 30 days unless it has to keep it longer to enforce its usage policies or to comply with the law.

What we don’t collect

• Your location. Veyla never asks where you are.
• Your contacts. Veyla never reads your phone’s contacts. Invites go out from your own Messages app, and Veyla doesn’t text or email anyone for you.
• The rest of your photos. Veyla only gets a photo you take or pick, never the rest of your library.
• How you use the app. We don’t use analytics or advertising tools, and we don’t track you across other companies’ apps and websites.
• Patient information. Veyla is for your schedule, not patient care. Please don’t put patient names or health details in notes, group names or photos.

Some things never leave your phone: photos you add to a coworker’s profile, which only you see, and reflections you write after a shift.

What other people can see

Veyla is built for sharing with the people you work with, so some of your information is visible to them. Here’s exactly what, and to whom.

• Your profile (name, role and photo): people on a unit with you, including people asking to join it, and anyone you have a schedule or phone-number request with, either way. Lists show your first name and last initial; your profile shows your full name.
• When someone is joining your unit: anyone signed in to Veyla who looks at your unit while joining sees the first name, last initial and photo of everyone on it, so they can tell it’s the right one. A unit shows up for others once two people are on it.
• Your place on a unit: coworkers confirmed on that unit see that you’re on it, your position and hours there, whether it’s your main job, and how you got in.
• Asking to join a unit: if you need to be confirmed, everyone already on the unit sees your request and your profile, and any of them can let you in.
• Your schedule: you choose in You → Who sees your schedule.
  • My coworkers (the default): everyone confirmed on your units.
  • Only people I accept: only people you say yes to. Nurses outside your unit can ask too, and see it only if you say yes.
  • People you’ve said yes to can see it whichever you pick.
  • What they see: Shift details (the default: day or night, times, charge or precepting, low census and which unit) or Busy or free (only the days you work and where, without times or roles).
  • Shifts you’ve traded away don’t show.
• Swaps: coworkers you ask see the shift you want to trade and the days you could work instead. When someone says yes, you both see the match.
• Your phone number: hidden. A coworker can ask for it from your profile, and they see it only if you tap Share number. You can stop sharing at any time, though they may have saved it already.
• Invite links: anyone who opens an invite you made sees the unit, its hospital, your first name and how many people from the unit are on Veyla, until the link expires after 30 days.
• Units you add: once two people are on a unit, others see its name, kind and floor.
• Only you: your email, your settings, your shift notes, your groups and your badge checks.

Profile and group photos are stored at web addresses that are hard to guess. Anyone who has a photo’s address can open it, so someone who can see your photo could share it.

How we use your information

• To run Veyla: sign you in, show your calendar, show you your unit’s schedules the way each person chose, and handle swaps, requests and invites.
• To keep Veyla safe: check phone numbers, confirm that people work where they say, and stop abuse and fraud.
• To help you: answer your emails and get you back into your account.
• To fix and improve Veyla, using what you tell us and the reports you choose to send.
• To follow the law and protect the people who use Veyla.

We don’t sell your information, and we don’t use it or share it for advertising. There are no ads in Veyla.

Who we share it with

Other people on Veyla, as described above and as you choose.

Companies that run parts of Veyla for us. Each gets only what it needs for its part, may use it only to provide its service to us, and must protect it at least as well as this policy does.

• Supabase stores our database and photos and runs sign-in.
• Twilio texts your sign-in codes, so it receives your phone number.
• Apple and Google run Sign in with Apple and Google Sign-In when you add your email.
• Vercel runs our badge and schedule readers, which pass your photo to Anthropic.
• Anthropic reads badge and schedule photos with its AI model, Claude.

Pictures from Unsplash and Giphy. Some stock photos and GIFs in the app load straight from Unsplash’s and Giphy’s servers, which see your phone’s IP address, as with any picture on the web. We don’t send them anything else.

TestFlight. If you test Veyla through Apple’s TestFlight, Apple shares with us the feedback, screenshots and crash reports you choose to send.

Not your hospital or manager. We don’t share your information with your hospital or your manager. When you send a swap to management, Veyla writes the message and you send it yourself.

When the law requires it. We share information if we must to comply with the law or a valid legal request, or to protect someone’s safety.

If Veyla changes hands. If Veyla is merged or sold, your information would go to the new owner, who would have to keep the promises in this policy.

Coming later

These features are planned and not live yet. We’ll update this policy before any of them collects anything new.

• Calendar sync. Veyla will keep your shifts in a calendar called Veyla, one way. For Apple Calendar, the app will write to your iPhone’s calendar after you give it permission. For Google Calendar, you’ll agree on Google’s own screen, and our server will keep a key from Google that lets it update your Veyla calendar, even when your phone is off.
• Personal plans. Showing your own Apple or Google Calendar events next to your shifts, to warn you when a plan clashes with a shift.
• Notifications. To send swap replies and reminders, we’ll keep a push token for your phone.
• Changing your number yourself. Getting back into your account by continuing with the Apple or Google account you added, then confirming your new number with a code.
• Community and Jobs. We’ll update this policy before these tabs open.

How long we keep it

• While you have an account, we keep your information so Veyla works.
• Badge and schedule photos: we don’t keep them. Anthropic deletes them within 30 days, as described above.
• Invite links stop working after 30 days.
• When you delete your account, we delete your profile, settings, shifts, notes, groups, unit memberships, requests, invites, badge checks and photos within 30 days. Copies in our database backups are gone within 30 days after that. Units you added stay for the coworkers on them, without your name.
• Emails you send us we keep for as long as we need them to help you.
• Our providers’ logs of sign-ins and requests are kept for limited periods, for security and troubleshooting.

Signing out removes your sign-in from that phone but doesn’t delete anything. Deleting the app doesn’t delete your account.

Deleting your account

Email hello@joinveyla.com and ask us to delete your account. Write from the email on your account, or include the phone number you sign in with. We’ll check that the request is really from you, delete your account and the information listed above within 30 days, and tell you when it’s done.

Your choices and rights

• Who sees your schedule. In You → Who sees your schedule, choose My coworkers or Only people I accept, and Shift details or Busy or free.
• Your number. Share it one person at a time, and stop sharing from their profile whenever you like.
• Your profile and unit. Change your name, role, photo, hospital or unit by going through setup again from You.
• Requests. Answer requests to see your schedule, share your number or join your unit from Requests on People, or leave them unanswered.
• Camera and photos. Turn off Veyla’s access in iPhone Settings at any time. You can type your details instead of scanning.
• Copies, corrections and deletion. Email us to get a copy of your information, correct it or delete it. We’ll answer within 30 days.

You can withdraw your consent at any time by changing these settings, turning off access in iPhone Settings, or deleting your account.

State privacy rights. Depending on where you live, such as California, Colorado or Virginia, you may have the right to know what we collect, get a copy, correct it, delete it, and opt out of its sale, its use for targeted advertising, or profiling. We offer these rights to everyone who uses Veyla. We don’t sell or share your information as those laws define it, and we don’t use it for targeted advertising or for profiling that has legal or similarly significant effects. We won’t treat you differently for using your rights. Someone you authorize can ask for you, and we’ll check it’s really on your behalf. If we turn down a request, you can appeal by replying to our answer.

Security

• The app talks to our servers only over encrypted connections (HTTPS), and our database provider encrypts stored data.
• Rules in our database decide who can see each record, so other people see only what your settings allow. Your phone number is kept apart from your profile.
• Sign-in codes expire after 5 minutes. Only our server can record a badge check, so nobody can fake one from the app.
• No system is perfectly secure. If you find a problem, please tell us at hello@joinveyla.com.

Where your information is stored

Veyla is for people in the United States. Our database and photos are stored in the United States, and the companies that help us run Veyla process your information mainly in the United States.

Children

Veyla is made for nurses and other hospital staff. It isn’t meant for children, and we don’t knowingly collect information from anyone under 18. If you think someone under 18 has an account, email us and we’ll delete it.

Our website

joinveyla.com has no ads, cookies or analytics. Its pages load fonts from Google Fonts, so Google sees your IP address when you visit.

Contact us

For questions about this policy or your information, email hello@joinveyla.com.

Changes to this policy

When we change this policy, we’ll post the new version here with a new effective date. If a change affects how we use your information in a meaningful way, we’ll tell you in the app or by email before it takes effect.