Privacy

Your personal vault stays on your device

Credentials you add yourself (without an employer) are stored only in this browser or installed app. They are never sent to us. License and ID numbers are never collected as data, by us or by your employer.

To remind you, your device sends us only when to notify it, as random codes and times. Our server never learns what a reminder is about; your device fills in the text when the notification arrives.

Clearing your browser's site data deletes your vault. Use Settings → Export backup to keep a copy.

If your employer uses CertNotifier

Your employer (the organization that invited you) can see your name, email, job title, the credential types they track for you, issuers, dates, status, your upload history and the documents you upload. Your employer controls this data; we process it for them.

Signing in uses a one-time code sent to your email. There are no passwords.

Documents

Uploaded documents go straight from your device to a private, encrypted Microsoft Azure storage account in the US. They never pass through our app servers. Only you and your employer's HR admins can open them, through links that expire within minutes, and every view is recorded in an audit log your employer can see.

Deleted documents can be recovered for 14 days (for mistakes) and are then gone. Your employer sets how long rejected and replaced documents are kept.

Emails and notifications

Reminder emails contain your first name, the credential type and days left, with a link back to the app. They never contain license numbers, documents or other people's dates. Phone notifications show only the credential type, and alerts to HR show counts, not names, because lock screens can be seen by others.

You can turn categories off in Settings. Phone reminders can be turned off on each device.

Who helps us run CertNotifier

• Vercel: hosting
• Neon: database (organizations, people, credential dates, audit log)
• Microsoft Azure: document storage
• Resend: email delivery
• healthchecks.io: checks that our daily reminder job ran (no personal data)
• Apple, Google, Mozilla and Microsoft push services: deliver phone notifications

All personal data is stored in the United States (East).

Health information

CertNotifier holds information about clinicians' licenses, not about patients. It isn't designed to store patient health information, and you shouldn't upload any.

Your choices

You can delete your personal vault at any time from this device. To access, correct or delete work records, contact your employer's HR team, who can update or remove them. For anything else, contact the organization that invited you.