This Privacy Policy describes how Standard Form Inc. (“Standard Form,” “we,” “our,” or “us”) collects, uses, and protects information when you use our products and services, including our AI-powered physician scheduling platform and the Puffin mobile application (together, the “Service”). By using the Service, you agree to the practices described in this Privacy Policy.
This single policy covers both:
- The Standard Form platform — our web-based scheduling product for hospitals and residency programs.
- Puffin — our companion mobile app that helps individual physicians and shift workers understand and manage their own work schedules.
Puffin manages your personal work schedule. It does not access, collect, or store patient data, clinical notes, or Protected Health Information (PHI).
1. Information We Collect
We collect the following categories of information to operate and improve the Service:
1.1 Account Information
When you create an account, we collect basic details such as your name, email address, and (where applicable) your organization. Puffin uses email-based sign-in: we send a secure sign-in link to your email address, and you use that link to log in. We use your email address for authentication, account management, and communication.
1.2 Calendar Integrations
To provide scheduling functionality, we may request access to third-party calendars such as Google Calendar or Microsoft Outlook. With your permission, we may access:
- Calendar availability and event metadata (e.g., time, title, participants)
- Basic profile information (e.g., email address, display name)
We do not access or store patient data, clinical notes, or Protected Health Information (PHI).
1.3 Scheduling Data
When you use the Service, we collect information related to physician schedules, staffing assignments, shift and on-call patterns, and availability preferences. In Puffin, this is your own work schedule and the preferences you set. This data is used solely to generate, display, and manage schedules and reminders for you.
1.4 Payment Information
We use Stripe as our third-party payment processor. Standard Form does not directly collect or store your payment card details. When you provide payment information, it is handled by Stripe and subject to Stripe’s own Privacy Policy. (Note: the Puffin app is currently free and does not collect payment information.)
1.5 Mobile App Information
When you use the Puffin mobile app, we may also collect or process:
- Push notification tokens, so we can send you schedule reminders and nudges such as post-call days, duty-hour warnings, and call nights — you can disable these any time in your device settings.
- Mobile device information (device model, operating system version, app version) used for compatibility, support, and troubleshooting.
1.6 Automatically Collected Information
When you access the Service, we may automatically collect:
- Log data (IP address, browser or app type, access times)
- Device identifiers
- Cookies, local storage, or similar device storage used for authentication and preferences
- App diagnostic and crash data used to identify and fix problems
2. How We Use Information
We use collected information only for Service-related purposes:
2.1 Service Operation. To provide, maintain, and improve the scheduling platform and the Puffin app, including generating schedules and delivering reminders and nudges.
2.2 Authentication and Security. To verify identity, secure accounts, and prevent misuse.
2.3 Service Improvement. To understand usage patterns and optimize features.
2.4 Communication. To send administrative messages, service updates, push notifications you’ve enabled, and (with your consent) product announcements.
We do not sell or rent your data. We do not use your data to track you across apps or websites owned by other companies, and we do not use it for third-party advertising.
3. Data Storage and Security
3.1 Storage. Data is stored on secure servers in the United States, managed by established cloud providers.
3.2 Encryption. We use encryption to protect data in transit and at rest.
3.3 Retention. We retain information as long as necessary to operate the Service. When your account is deleted, we remove or anonymize your data except as required by law (see Section 5).
4. Information Sharing
We only share information in limited circumstances:
- Service Providers. With trusted vendors who help operate the Service (e.g., cloud hosting, payment processors, analytics and crash-reporting providers), under confidentiality obligations.
- Calendar Providers. With Google or Microsoft to enable calendar integrations, according to their APIs and terms.
- Platform Providers. With Apple or Google as necessary to deliver the app and push notifications through their platforms, according to their terms.
- Legal Requirements. When required by law, regulation, or valid legal request.
We do not share data with advertisers or third parties for marketing purposes.
5. Your Rights and Choices
Depending on your jurisdiction, you may have the right to:
- Access a copy of your personal information
- Request correction or deletion of your information
- Export your data
- Withdraw consent for certain data uses
Deleting your account
You can delete your account and associated personal data at any time:
- In the Puffin app: go to Settings → Account → Delete. This permanently deletes your account and personal data from the Service, except information we are required to retain by law.
- On the Standard Form platform or for any other request: contact us at founders@heystandard.com.
6. Cookies and Tracking Technologies
We use cookies, local storage, and similar technologies to:
- Keep you signed in
- Save scheduling preferences
- Improve Service functionality
You can disable cookies in your browser, but some features may not work properly. We do not use these technologies to track you across other companies’ apps or websites.
7. International Data Transfers
Our Service is hosted in the United States. If you access the Service from outside the U.S., your information may be transferred to and processed in the U.S.
8. AI Features
The Service uses AI to generate scheduling suggestions. AI outputs are based on the data you provide. We do not use your data to train external AI models. Final scheduling decisions remain your responsibility.
9. Marketing Communications
By creating an account, you may receive product and feature updates. You can opt out at any time by:
- Clicking the “unsubscribe” link in emails, or
- Contacting us at founders@heystandard.com
10. Children’s Privacy
The Service is intended for working professionals and is not directed to children. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, contact us and we will delete it.
11. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. Material changes will be communicated by email or through the Service. Continued use of the Service after changes indicates acceptance.
12. Contact Us
For questions about this Privacy Policy, contact us at:
Email: founders@heystandard.com
Company: Standard Form Inc.
Location: United States of America