After Bedside

After Bedside

Your privacy, in plain language.

No jargon, no fine-print traps. Here is exactly what we keep, why, and how to take it back.

After Bedside is a career app for nurses: a 14-day free trial, then $199 for a one-year pass. It is not a medical or health service. The information here is ordinary personal data, not protected health information, and we treat it under California’s privacy law (CCPA/CPRA) and standard PII-security practice.

This one page covers all of afterbedside.com: the landing page, with Find my fit, the free calculator and the blog, and the app you sign in to.

Your detailed, line-item finances never leave your device. The calculator runs in your browser; only the derived summary (how many months of runway you have, and a safe / tight / unworkable read on each path) is ever saved to your account. We never see your rent, your savings, or your paycheck.

We do not sell or share your personal information, and we never have. We don’t sell or hand your email to employers, recruiters, schools, advertisers, or anyone else. We don’t take placement commissions, and we’re not a job board. There is no advertising exchange and no data broker in the picture, so there is nothing to opt out of, but you have that right all the same.

Your account
Your email and password, so you can sign back in to your saved plan. These are held by our authentication provider, not in our own tables.
Your derived aggregates
Runway months and per-path verdicts computed from the calculator — the summary that survives sign-up. Never the raw dollar amounts behind them.
Coarse profile facts
A metro or region label (e.g. “Phoenix metro”) and which of the three starting intents you picked, so recommendations fit your situation. Never a precise location.
Your Find my fit answers
The choices you made in Find my fit, so your paths are ranked from them and are there on every device you sign in on (see Your Find my fit answers, below).
Your plan
The living plan you build — your chosen path and the actions you check off — so your progress is here when you come back.
Your pass, if you buy one
For each pass you buy: Stripe’s reference for the payment, the date, the amount and, if it was refunded, when. Your card details go to Stripe and never reach us (see Payments, below).
Your LinkedIn profile, if you add it
Your headline, your roles, and your skills, read from the PDF on your device. The PDF itself is never uploaded: we never received it. Your headline and roles are encrypted at rest; your skills are not, because they are competencies with nothing identifying in them.

On the landing page, before you have an account

The landing page gives Find my fit and the calculator away free, with no account. The line items you enter in the calculator stay in your browser and are never sent to us. What can reach us is a summary of your result, as follows.

If you give us your email
We store your email address with a short summary of your result: your monthly total and your runway with the path you were planning, or the three paths Find my fit matched you with. We also note which door you came through, and the campaign link that brought you, if there was one. It is never the line items you entered (rent, savings, debt and the rest).
What we send you
One email: your plan, or your three paths. The occasional letter as the project grows comes only if you ticked the box on the form, at most a few a month, and never spam.
If you reserved a feature
Before the app opened, the landing page let you reserve a feature. We kept which one with your email, and we’ll write once to say it’s in the app.
An anonymous calculator row
When you use the calculator, we may record an anonymous summary row: your monthly total, your runway, and the safe / tight / unworkable flag for the path you looked at. No email, no IP address, no identifying details. If you then give us your email, we link that row to it. It tells us whether the tool is useful, and we only ever look at these rows ourselves.

Find my fit asks a handful of questions, each answered with a click: choices about the work you want, never a figure.

On the landing page, your answers are kept in your browser, so they are still there when you come back, and we don’t store them: if you ask for your three paths by email, we keep the paths, not the answers.

If you make an account while your browser holds a finished run, the answers go with your sign-up. Until you confirm your email they wait with your sign-up at our authentication provider; once you confirm, they are kept on your account and that copy is cleared. A run you finish inside the app is kept on your account too, replacing the one before, so the devices you sign in on all see the same paths. In the app, signing out or deleting your account clears them from that browser.

They are in your export, and they are deleted with your account. Inside the app, they never reach our analytics, which learn only which question you reached and, when you finish, which paths you matched. On the landing page, our analytics record the buttons you click, so a choice you click there can appear in them (see What our analytics see, below).

To keep the worst-case exposure small, some data simply has no place in this app: no Social Security number, no bank or card credentials, no precise geolocation, no citizenship or immigration status, and no patient data or other clinical information: this is a career and personal-finance planning tool, not a medical record. There is no field for any of it, so it can’t be collected even by accident. The same goes for the contact details on a LinkedIn export — email, phone, licence number — which the reader drops before anything is sent.

Encryption at rest reduces what a database-only exposure (a dump, a leaked backup, a misconfigured policy) can reveal. It does not protect against a compromise of the application itself, which holds both the data and the key. It is not end-to-end encryption, and we won’t describe it as such.

Both halves report to one PostHog analytics project, so we can see how many people go from the landing page into the app. They record different amounts.

On the landing page, PostHog records which pages and buttons get used, and replays of visits with what you type and your calculator figures hidden. Vercel counts visits and measures page speed.

Inside the app, PostHog receives only a handful of named steps, such as starting a job search or finishing Find my fit. While you’re signed in they are tied to your account id, never your email, and signing out ends that. There is no session replay, no record of your clicks or scrolling, and no page text, so your calculator figures and everything else on your screen stay on your device. Every web address it sees is cut to the page itself, so nothing in a link’s query string (a sign-in code, an unsubscribe token) reaches it.

Because the two halves share one project, once you sign in on the same browser your earlier landing-page visits and your account can be joined into one record there. When something breaks on our servers, the error report goes to PostHog too, and it carries no account id, no email and no IP address.

Supabase
Our database and sign-in: your account, everything it holds, and the landing page’s email rows.
Stripe
Takes payment for the pass (see Payments, below).
Resend
Sends our email, such as your plan or your three paths from the landing page, and the app’s plan check-ins and notices about your trial and pass.
PostHog
Product analytics and error reports (see What our analytics see, above).
Vercel
Hosts the landing page and the app, and on the landing page counts visits and measures page speed.
Anthropic
Its Claude models, reached through Vercel’s AI Gateway, write your plan and the coach’s suggestions from what you’ve told the app. They never get your finances: a plan is written from your runway in months, never a dollar figure.
TheirStack
Where job listings come from. We send it job titles and a metro, never anything about you.
Cloudflare
Routes any email you send to hello@afterbedside.com to our inbox.

Each provider has its own privacy practices. We picked them because they’re reasonable on this front. We’re not aware of any third-party tracking pixels or advertising networks on the site beyond what these services require to function.

Payments are processed by Stripe. You pay on Stripe’s own checkout page, so your card number goes to Stripe and never reaches us, and nothing is kept on file to charge you again. Stripe sends your receipt.

Stripe keeps its own record of each payment (the amount, the date and your email) after you delete your account, because tax law requires it.

California’s privacy law lets a business keep what it must keep to meet a legal obligation, even after a deletion request, and this record is that. Stripe handles it under its own privacy policy. Everything your account holds is deleted with it.

The landing page’s letters carry an unsubscribe link, and so do the app’s plan emails (the check-ins on your plan) and its offers to buy or renew the pass. Each link stops only its own kind, and it works without signing in.

A few emails are about your own account and carry no way to turn them off: confirming your email, resetting your password, the notice that your trial ends in two days, and Stripe’s receipt. Replies to anything we send reach hello@afterbedside.com.

On the landing page, a session identifier in your browser links your anonymous calculator runs together. It doesn’t identify you and isn’t shared with any third party. Find my fit keeps your answers in your browser, and the calculator keeps your figures there, so they are still there when you come back.

In the app, a sign-in cookie keeps you signed in. On the landing page and in the app, PostHog keeps an anonymous identifier in a cookie and in your browser’s storage, so it can tell one visit from the next. We don’t use advertising cookies.

We keep your account and plan for as long as your account exists. When you delete your account, your data is removed right away (see below). We don’t hold a shadow copy. The one record that outlives it is Stripe’s record of any payment, which tax law requires Stripe to keep.

The landing page’s email row, if you gave us your email there, isn’t part of your account, so deleting your account leaves it. We keep it until you ask us to remove it (see below).

Last updated October 2026. If we change this policy meaningfully, we’ll note it here with a new “last updated” date.

This is a plain-language summary, not the final legal text — it’s under review before launch.