Who we are
ICU Advantage Rapid Reference ("Rapid Reference," "the app," "we," "us," or "our") is built by ICU Advantage LLC, an Arizona limited liability company. Our mailing and point-of-contact address is 8323 Linville Rd #783, Oak Ridge, NC 27310. This Privacy Policy explains what information we collect when you visit rapidreference.app or use the Rapid Reference mobile app, how we use it, who we share it with, and the choices you have.
By using our site or app, you agree to the practices described here. If you have questions, contact us.
Information we collect
Information you give us directly
- Account information — when you sign up in the app, we collect your email address and the sign-in identifier from your chosen auth provider (Sign in with Apple, Sign in with Google, or email + password).
- Name — first name (required) and last name (optional) when you join the launch waitlist or sign up in the app.
- Purchase information — if you bought during a presale, your name, email, and (optionally) phone number were captured via Stripe Checkout. Payment card details are collected and processed by Stripe, not by us; we never see them.
- Beta testing information — if you're part of the beta program, we collect platform (iOS / Android), device type (phone / tablet), role (nurse, student, etc.), work areas (e.g. MICU, CVICU), years of experience, and any free-text notes you choose to share.
- In-app feedback — when you submit feedback from within the app, we collect the text of your report, an optional screenshot, and the app screen it came from.
- Communications — if you email us or reply to one of our emails, we keep a record of the correspondence.
Information we collect automatically
- Device and usage data — when you use the app, we (via Firebase Analytics, Crashlytics, and Performance Monitoring) collect standard mobile app telemetry: device model, operating system version, app version, crash reports, basic interaction events (screens viewed, features used), and performance metrics. This helps us diagnose problems and improve the app.
- Push notification tokens — when you enable push notifications, your device registers an identifier with us so we can send notifications you've opted into.
- Bookmarks and saved state — content you bookmark in the app is stored so it's available across your devices.
- Website analytics — when you visit rapidreference.app, we collect standard server-side request metadata (IP address, user agent, referring page). We use a self-hosted analytics script; we do not use Google Analytics on the marketing site.
- Email engagement — when we send you an email, we may track whether it was opened and whether any links were clicked, for the limited purpose of understanding whether our emails are reaching you.
How we use it
We use the information we collect to:
- Provide and maintain the app and website, including authentication and syncing your bookmarks and saved content across devices.
- Process purchases and manage subscriptions.
- Communicate with you about your account, product updates, and (if you've opted in) marketing from ICU Advantage.
- Triage bug reports and feedback so we can improve the app.
- Diagnose crashes and performance issues.
- Understand which features are most useful so we can invest in the right places.
- Protect the security and integrity of our services, prevent fraud, and comply with legal obligations.
We do not sell your personal information, and we do not share it for cross-context behavioral advertising.
Who we share information with
We share information only with the service providers we rely on to deliver Rapid Reference. These providers are bound by contract to use your information only for the purposes we specify. Our current providers:
- Supabase — hosts our database (user accounts, bookmarks, device registrations, feedback, waitlist, app content), authentication, and storage for feedback screenshots.
- Google Firebase — provides crash reporting, analytics, and performance monitoring for the app.
- Apple App Store / Google Play Billing — processes subscription purchases and renewals when you subscribe through the mobile app's in-app purchase system.
- RevenueCat — manages subscription status and entitlements across iOS, Android, and direct-from-web subscriptions, so your access stays in sync across devices and platforms regardless of how you subscribed.
- Stripe — processes direct-from-web subscription purchases (for users who subscribe on our website rather than through the app stores), handled presale payments, and stores the associated customer records. We never see or store your card details.
- Gmail / Google Workspace — sends our transactional and marketing emails on our behalf.
- Cloudflare — provides CDN, DNS, and TLS termination for our website; as a result, Cloudflare may see your IP address when you visit.
- AWS Lightsail — hosts our marketing website and purchase webhook.
- Backblaze B2 — stores our encrypted backups.
- Kajabi — if you're an ICU Advantage Academy member, we may verify your membership for Academy-exclusive offers.
We may also disclose information if required by law, to respond to a valid legal process, to protect our rights or the safety of others, or in connection with a business transfer (acquisition, merger, asset sale). If that ever happens, we'll update this policy and let affected users know.
How long we keep it
We keep personal information only as long as we need it for the purposes described above, or as required by law. Specifically:
- Account data — kept for as long as your account is active. If you ask us to delete your account, we'll remove your personal data within 30 days, except where we're legally required to keep it (e.g. tax records on past purchases).
- Purchase records — kept for at least 7 years for tax and accounting compliance.
- Feedback and support correspondence — kept indefinitely so we can improve the app, unless you ask us to delete it.
- Waitlist signups — kept until the app launches, at which point you'll receive launch communication; after that, you'll be on our regular marketing list unless you unsubscribe.
- Usage analytics — retained per Firebase's standard policies (currently 14 months by default).
- Server logs and backups — rotate off within 60 days for logs and up to a year for backups.
Your choices and rights
Regardless of where you live, you can:
- Access a copy of the personal information we have about you.
- Correct inaccurate information.
- Delete your account and personal data.
- Export your data in a machine-readable format.
- Opt out of marketing emails by clicking the unsubscribe link in any marketing email we send, or by replying and asking us to remove you.
- Turn off analytics at the operating-system level (iOS: Settings → Privacy → Tracking or Analytics; Android: Settings → Google → Ads).
To exercise any of these rights, email [email protected]. We'll respond within 30 days.
California residents
If you live in California, you have additional rights under the California Consumer Privacy Act (CCPA/CPRA), including the right to know what categories of personal information we collect, the right to request deletion, and the right to opt out of the sale or sharing of personal information. We do not sell personal information. To exercise CCPA rights, email us at the address above.
European Economic Area, United Kingdom, and Switzerland
If you're in the EEA, UK, or Switzerland, our legal basis for processing your personal information is (a) your consent, where you've given it (e.g. by joining the waitlist); (b) performance of our contract with you (e.g. to deliver app access you've purchased); or (c) our legitimate interest in operating and improving the app, understanding who our users are, and keeping things secure. You have the right to access, correct, delete, or port your data; to withdraw consent; and to lodge a complaint with your local data protection authority.
How we protect it
We take reasonable technical and organizational measures to protect your information, including:
- Row-level security on our database so each user can only access their own data.
- Encryption in transit (TLS) and at rest for stored data and backups.
- Strong authentication for administrative access, with credentials stored in a password manager and short access logs retained.
- Regular backups across multiple providers, with tested restore procedures.
- Principle of least privilege on all service accounts and API keys.
That said, no system is perfect. If we ever learn of a breach that affects your personal information, we'll tell you as required by applicable law.
Children
Rapid Reference is built for nurses and healthcare professionals. It is not directed at children under 13, and we do not knowingly collect personal information from anyone under 13. If you believe we've inadvertently collected information from a child under 13, please contact us and we'll delete it.
International users
ICU Advantage LLC is based in the United States. If you use Rapid Reference from outside the US, your information will be transferred to and processed in the US and in the countries where our service providers operate. By using the app, you consent to that transfer.
Changes to this policy
We may update this policy from time to time as our practices or applicable law evolve. The "Last updated" date at the top will reflect when we last made changes. For material changes, we'll notify you by email or through a prominent notice in the app. If you continue to use the app after an update, you're agreeing to the updated policy.
Questions, concerns, or requests? Email [email protected], or write to:
ICU Advantage LLC
8323 Linville Rd #783
Oak Ridge, NC 27310
United States