Privacy Policy

Last updated: March 21, 2026

Overview

Rebel Forecaster is operated by Rebel Anesthesia LLC ("we," "us," or "our"). We respect your privacy and are committed to being transparent about what data we collect, how we use it, and how we protect it. This policy applies to all users of the Rebel Forecaster application at app.rebelanesthesia.com.

What We Collect

When you use Rebel Forecaster, we collect only what is necessary to provide the Service:

Account information — Your email address and an encrypted password for authentication.

Location settings — Facility names, keywords, hourly rates, and shift lengths that you enter.

Calendar data — Shift and event information retrieved via your iCal URL. We access your calendar through a read-only subscribe link. We cannot modify, delete, or write to your calendar, and we do not have access to your calendar account credentials.

Dashboard preferences — Settings such as burnout thresholds, tax rate estimates, income goals, and display preferences.

What We Do NOT Collect

No Social Security numbers or government IDs

No bank account or credit card information

No protected health information (PHI)

No calendar account passwords or credentials

No location tracking or device fingerprinting

How We Use Your Data

Your data is used solely to provide the Service — calculating income projections, tracking hours, monitoring burnout thresholds, and displaying your personalized dashboard. We do not use your data for advertising, marketing to third parties, or any purpose beyond operating the Service for you.

How We Protect Your Data

🔒

Encrypted authentication — Passwords are hashed using industry-standard algorithms and never stored in plain text.

🔒

HTTPS/TLS encryption — All data transmitted between your browser and our servers is encrypted in transit.

🔒

Row-level security (RLS) — Your data is isolated at the database level. No user can query, view, or access another user's data.

🔒

Strong password requirements — Accounts require passwords of at least 8 characters with uppercase, lowercase, and numeric characters.

🔒

Enterprise-grade infrastructure — The application is hosted on Vercel with a Supabase database backend, both widely used production platforms.

Data Sharing

We do not sell, rent, trade, or share your personal data with any third party. Period. Your data stays between you and the Service. The only third-party services involved in operating the platform are:

Supabase — Database and authentication provider.

Vercel — Application hosting provider.

Both are established platforms with their own security and privacy practices. We encourage you to review their policies if you have questions about infrastructure-level data handling.

Cookies

We use only essential cookies required for authentication and session management. We do not use advertising cookies, tracking cookies, or any third-party analytics that track individual users.

Data Retention & Deletion

Your data is retained as long as you maintain an active account. If you wish to delete your account and all associated data, contact us at adam@rebelanesthesia.com and we will remove your data within a reasonable timeframe.

Children's Privacy

The Service is designed for working healthcare professionals and is not directed at individuals under 18 years of age. We do not knowingly collect data from minors.

Changes to This Policy

We may update this Privacy Policy as the Service evolves. The "Last updated" date at the top reflects the most recent revision. Continued use of the Service after updates constitutes acceptance of the revised policy.

Contact

Questions or concerns about your privacy? Reach out at adam@rebelanesthesia.com