Privacy Policy

Sky Nurses operates a medical escort and patient repatriation platform that connects healthcare professionals, client organizations (such as hospitals, insurers, and travel assistance companies), and patients requiring medical transport on commercial flights. If you have questions about this policy, contact us through the contact information published on our website.

We collect different information depending on how you use the platform:

• Account information: your name, email address, password (stored only as a secure hash), phone number, display name, and role.
• Clinician profile information: profession, licensure and credentials (including uploaded licenses, certifications, passports, visas, insurance policies, and resumes), career history, availability, home airport, and travel documents.
• Protected health information (PHI): when you are a patient on a Sky Nurses mission, we collect medical information necessary to arrange and document your transport, including medical history and physicals, assessments, flight-segment clinical records, medication records, vital signs, physician letters, and related clinical documentation created by the clinicians caring for you.
• Client organization information: organization details, contacts, billing preferences, payment account credentials, quotes, invoices, and mission requests your organization submits.
• Payment information: invoices and payments are processed through PCI-compliant payment gateways. Card numbers and bank details are handled by the gateway — Sky Nurses stores only payment references and status.
• Usage information: records of messages sent within the platform, mission requests, chart activity logs (including audit trails of who accessed or edited clinical records), and standard technical data such as IP address, device, and browser type.

• To verify clinician credentials before allowing them to care for patients.
• To plan, coordinate, and document medical escort missions, including building itineraries and patient charts.
• To communicate with you about missions, requests, messages, and account activity, including email and mobile notifications.
• To bill client organizations and process payments for services.
• To maintain the security, integrity, and auditability of medical records, as required for healthcare operations.
• To comply with legal, regulatory, and accreditation obligations.

We do not sell personal information, and we do not use PHI for advertising or marketing.

Sky Nurses maintains administrative, technical, and physical safeguards designed to protect the privacy and security of PHI, consistent with the standards of the Health Insurance Portability and Accountability Act (HIPAA). Access to patient charts and clinical documents is restricted to the internal staff and assigned clinicians involved in a specific case (plus authorized client organization users), and all access is logged. PHI is disclosed outside these groups only as necessary for treatment, payment, healthcare operations, or when required by law.

Because medical escort missions are international by nature, information we collect — including patient and clinician information — may be transferred to and stored in countries other than your own, including the United States. Where required, we apply safeguards such as contractual commitments with our service providers to protect information transferred internationally.

We share information only as needed to operate the platform, including with:

• Assigned clinicians and authorized client organization staff involved in a case.
• Payment processors and accounting providers used for invoicing and payment.
• Cloud hosting, email delivery, and related service providers, under agreements restricting their use of your information.
• Government authorities, when required by law, regulation, or valid legal process.

Uploaded credentials and clinical documents are stored in access-controlled private storage; documents are served only through short-lived, signed links. We retain information for as long as your account is active, as needed to provide services, and as required by medical-record retention laws and other legal obligations.

• You may review and update your profile information and uploaded documents at any time.
• You may request deletion of your account; certain records — notably medical charts and billing records — are retained as legally required.
• Depending on your location, you may have rights to access, correct, or delete your personal information and to object to certain processing. Contact us to exercise these rights.

We use encryption in transit, role-based access controls, audit logging on clinical records, and strict per-record permission rules. No method of transmission or storage is perfectly secure, but we work to protect your information using safeguards appropriate to its sensitivity.

The platform is intended for adults and is not directed to children under 18, except in the context of a minor patient's transport, where information is managed through their parent or legal guardian.

We may update this Privacy Policy as the platform evolves. Material changes will be announced in the app, and the “Last updated” date above will reflect the current version.