Dispo (“Dispo,” “we,” “us”) is a workday and team tool for hospital case-management and utilization-review staff, provided by Half Ordinary Software, LLC. This policy explains what information Dispo collects, how we use and protect it, and the choices you have. It applies to the Dispo iPhone app and the Dispo web apps at dispocm.com, which share one account.
No protected health information (PHI). Dispo is designed as a no-PHI space. We ask users never to enter patient identifiers (names, medical record numbers, dates of birth, room numbers, or similar) anywhere in the app, and the product checks free text for likely identifiers before it is saved. Dispo is a workflow and team-wellbeing tool; it is not a medical record, is not a medical device, and is not used to make patient-care decisions. Half Ordinary Software, LLC is not a HIPAA covered entity, and Dispo is not intended to create, receive, maintain, or transmit PHI.
Contents: What we collect · How we use it · How it’s shared · Retention · Security · Your choices & rights · Children · Changes · Contact
1. Information we collect
- Account information: your name, work email address, organization, and role/discipline. Your organization provisions your account; you sign in with the email your organization invited.
- Contact numbers (optional): a desk or mobile number you choose to add, shown to your organization in team contacts and on your Rally requests so teammates can reach you.
- Work activity you log: counts of the work you record (for example, assessments, discharges, reviews, or authorizations) and self-reported ratings (such as assessment quality or the impact of help you delivered). These build your own workload picture (utilization review counts sync between your phone and the web app) and your team’s shared totals.
- Wellbeing check-ins: your self-reported weekly wellbeing reading, and any private notes or case-weight entries you choose to record. Wellbeing is shown to leadership only as an anonymized, aggregated team picture, never for a group of fewer than five, and never attributed to you individually.
- Messages, requests, and support content: messages you send to your leadership through Dispo, acknowledgements of bulletins, Rally requests you post or answer, and any requests you send for help or support.
- Playbook use: anonymous counts of which Playbook sections are opened and any structured feedback you give on a play. Usage is never linked to your name, and section counts are shown to leaders only above ten sessions.
- Device and technical data: a push-notification token (so we can deliver Dispo alerts to your device), and basic technical information needed to operate and secure the service, such as authentication session data and error logs. Some preferences and caches are kept only on your device.
We do not ask for, and Dispo is not designed to hold, protected health information or sensitive personal identifiers like Social Security numbers or payment-card data. Dispo does not read your phone’s contacts, photos, location, or other device data. A “save contact” button gives you a contact card that your phone asks you to add yourself.
2. How we use information
We use the information above to:
- authenticate you and show you the right organization and workspace;
- display your work and your team’s shared workload;
- deliver notifications you’ve enabled (for example, a bulletin from leadership or a Rally request). A Rally alert shows only the requesting teammate’s name, never their note;
- give leadership an aggregated, de-identified view of workload and team wellbeing so they can spot when a team is stretched;
- operate, maintain, secure, troubleshoot, and improve the service.
We do not sell your information, use it for advertising, or use third-party advertising or tracking technologies.
3. How information is shared
- Within your organization: leaders and administrators see aggregated, de-identified team information. Small groups are suppressed so individuals can’t be singled out. Content you address to leadership (such as a direct message) is visible to that leadership. Your individual check-ins, private notes, case weights, and work counts are not shown to leaders individually. Rally requests show your name and discipline to your organization.
- Service providers: we use trusted vendors to run Dispo: Supabase (database, authentication, and server functions, hosted in the United States), Netlify (web hosting), the Expo push service and Apple (notification delivery to iPhones). They process data only to provide these services to us.
- Half Ordinary personnel: we do not view individual users’ entries. Technical access is limited to support your organization requests, and each access is logged.
- Legal and safety: we may disclose information if required by law, to enforce our terms, or to protect the rights, safety, and security of users and the public.
- Business transfers: if the service is involved in a merger, acquisition, or sale of assets, information may be transferred as part of that transaction, subject to this policy.
4. Data retention
We keep information for as long as your account is active and as needed to provide the service, then retain it only as required to meet legal, security, or legitimate operational needs. Weekly activity and wellbeing entries are retained to show your own trend over time. When your organization’s use of Dispo ends, its data is deleted within 30 days unless it asks for an export, and backup copies age out within seven days after that. When an account is removed, its sign-in and device notification token are deleted. You or your organization can request deletion of your account and associated data (see “Your choices & rights”).
5. Security
Data is stored with our backend provider, Supabase, under access controls that scope each organization’s data to that organization, enforced at the database level. Access requires per-user authentication (with optional multi-factor authentication), connections are encrypted in transit, and stored data is encrypted at rest. No system is perfectly secure, but we work to protect your information using appropriate technical and organizational safeguards, and we ask you to keep your sign-in credentials confidential.
6. Your choices & rights
- Team totals: your work counts appear to others only inside team totals. Where a team board is offered, you can opt out in settings and still see the team total.
- Wellbeing privacy: your wellbeing color is off by default; you choose whether to add it to your team’s group view. Your exact answers and private notes are never shared.
- Notifications: you can turn Dispo notifications on or off from your device settings at any time.
- Access, correction, and deletion: you may request access to, correction of, or deletion of your personal information by contacting us or your organization’s Dispo administrator. Depending on where you live, you may have additional rights under applicable privacy laws; we honor these rights where they apply.
7. Children’s privacy
Dispo is a workplace tool intended for hospital staff and is not directed to children. We do not knowingly collect personal information from anyone under 16. If you believe a minor has provided us information, contact us and we will delete it.
8. Changes to this policy
We may update this policy from time to time. When we do, we’ll revise the “Last updated” date above, and for significant changes we’ll provide a more prominent notice. Your continued use of Dispo after an update means you accept the revised policy.
Questions or requests about this policy or your information? Contact us at support@dispocm.com.