Privacy Policy

Rounds is built on a foundation of trust. This Privacy Policy explains what information we collect, how we use it, and the choices you have. If you have questions, reach out through the app.

Rounds uses Supabase as its data infrastructure provider. All data is stored securely with row-level security policies that enforce access control at the database level.

We collect the following categories of information when you use Rounds:

• Account information: your name, email address, username, and password (stored as a secure hash).
• Verification information: your NPI number and hospital or institutional email address, collected at signup to verify your identity as a healthcare professional. This information is stored securely and is never displayed on your profile or shared with other users.
• Profile information: specialty, subspecialty, PGY year, program name, hospital, and role (resident, fellow, or attending mentor).
• Content you create: posts, vent submissions, pearls, reactions, direct messages, and comments.
• Usage data: which features you use, your filter preferences, and interaction patterns (used only to improve the app).
• Device information: device type and operating system, collected automatically when you use the app.

Your information is used to:

• Operate the platform and display your content to other users according to your privacy settings.
• Personalize your feed — for example, prioritizing posts from residents in your specialty and PGY range.
• Enable community features: reactions, direct messages, and pearl sharing.
• Improve the Rounds experience through aggregate, anonymized usage analytics.
• Communicate important updates about the platform.

The Vent tab is designed to protect your identity. When you post in the Vent tab:

• Your name, username, specialty, and profile information are never displayed in connection with your post.
• You are assigned a randomized anonymous handle that changes every 24 hours, so even your anonymous identity cannot be tracked across sessions.
• Rounds does not link vent posts to your identity for analytics, advertising, or moderation purposes beyond what is required by law.
• Anonymous posts may still be subject to disclosure in response to valid legal process, such as a court order or subpoena.

Rounds gives you meaningful control over your information:

• Profile visibility: you can set your profile to be visible to everyone, or restrict it to residents and fellows only (hiding specialty, PGY year, and program details from attending mentors).
• Online status: you can choose whether others can see when you are active.
• Who can DM you: you can control which users are able to send you direct messages.
• Anonymous posting: the Vent channel is always anonymous — your identity is never attached to vent posts.

Rounds does not sell your personal information to third parties. Ever.

• We do not share your data with advertisers.
• AI Attending feature: When you use the AI Attending feature in the Curbside tab, your conversation content is sent to Anthropic, PBC to generate responses. This transmission is governed by Anthropic's privacy policy and terms of service, which are separate from this policy. Rounds does not use your conversations to train AI models. We strongly recommend never sharing identifiable patient information when using the AI Attending feature.
• We may share aggregate, anonymized data (e.g., "residents in emergency medicine are the most active users") that cannot identify any individual.
• We may disclose data when required by valid legal process, such as a court order or subpoena, and will notify you where permitted by law.
• Supabase, our data infrastructure provider, processes data on our behalf under their data processing terms.

Your data is retained as long as your account is active. When you delete your account, your profile and posts are permanently removed from the platform. Some data may be retained in backups for a limited period (up to 30 days) before permanent deletion.

You have the right to request a copy of your personal data at any time. To request a data export, contact the Rounds team through the app or by email. We will process export requests within 30 days and provide your data in a portable format (JSON or CSV).

Rounds is intended for adults enrolled in medical training programs. We do not knowingly collect information from anyone under 18 years of age.

We may update this Privacy Policy from time to time. We will notify you of material changes through the app. Continued use of Rounds after changes are posted constitutes acceptance of the revised policy.

Questions about this Privacy Policy or how your data is handled? Contact us at privacy@roundsappmd.com or through the app.