Privacy Policy

We collect only what we need to make PreNurse work. We don't sell your data, we don't run analytics or advertising trackers, and we only use cookies the site cannot work without — so there is nothing to accept or refuse. We're a small team building a study tool, not a data company.

PreNurse is run by Philip Polansky, 500 Melville Ave, Palo Alto, CA 94301, United States, who is the controller of your personal data under the EU and UK General Data Protection Regulation (GDPR). Contact:support@prenurse.com or ourcontact form.

• Account info — If you sign in with Google, Facebook, or Microsoft, we receive your name, profile photo, and, where the provider gives us one, your email address. We store these to identify your account. Facebook doesn't supply an email for accounts registered with a phone number; your account works the same either way.
• Quiz activity — We store which questions you answered, whether you got them right, how long you took, and your scores. This powers your history page and study tools.
• Study tool content — Study guides and workbooks we generate for you, and what you type in the Tutor, Simulator and Arena sessions.
• Purchase info — Payments are processed by Stripe. We receive confirmation that a purchase was completed. We never see or store your card number.
• Messages — What you send us through the contact form, with the email address you give us.
• Server logs — Pages requested, timestamps and IP addresses, kept by our hosting provider to keep the site running and detect abuse. We don't use them to profile you.
• Error reports — When something breaks, a report of the error is sent to Sentry: what failed, the page, and your browser and device type. Your IP address may be received in transit. We don't attach your name or email.
• Security and abuse prevention — To enforce the daily practice limit we store a one-way hash of your IP address (or account id) salted with a secret and the current date, together with a count of questions served. The hash cannot be turned back into an address, changes every day, and is deleted after two days.
• Anonymous counts — Daily totals such as "quizzes completed today" or "visits that came from another website". These contain no user id, session id or IP address, and cannot be traced back to you.

• We don't track you across other websites.
• We don't use analytics or advertising trackers (no Google Analytics, Google Ads, Meta Pixel, etc.).
• We don't sell or share your personal data with third parties for marketing.
• We don't collect your NCLEX results, board scores, or school enrollment information.

• Running your account — sign-in, quiz history, bookmarks, study tools and anything you buy. Basis: performing our agreement with you (GDPR Art. 6(1)(b)).
• Payments and purchase records — processing a purchase, and keeping the record of it for tax and accounting. Basis: our agreement with you (Art. 6(1)(b)) and our legal obligations (Art. 6(1)(c)).
• Keeping the site secure and working — server logs, error reports, the daily practice limit and anonymous counts. Basis: our legitimate interest in a site that works and isn't abused (Art. 6(1)(f)). You can object to this; see Your Rights.
• Answering you — replying to contact-form messages, and the one email confirming an account deletion, if your account has an email address. We don't send marketing, newsletters, or notification emails. Basis: legitimate interest (Art. 6(1)(f)).

We don't make decisions about you that have legal or similarly significant effects by automated means. Study guides are generated from your results, but they only teach — they don't decide anything about you.

• Railway (United States) — hosting and database. Everything we store lives here.
• Sentry (United States) — error reports, as described above. Subject to Sentry's Privacy Policy.
• DeepSeek (China) — writes study guides and workbooks, and runs the Tutor, Simulator and Arena sessions. It receives your subject scores, the questions you missed and the answers you picked, and what you type in those sessions. It does not receive your name, email or account id. Please don't type personal details into a session. Subject to DeepSeek's Privacy Policy.
• Stripe (United States) — payment processing. Subject to Stripe's Privacy Policy. We never see your card number.
• Resend (United States) — delivers the emails described above. Subject to Resend's Privacy Policy.
• Google, Facebook (Meta) and Microsoft — only if you choose them to sign in. Subject to Google's, Meta's and Microsoft's privacy policies.

PreNurse is run from the United States, so if you use it from the EU or UK your data is transferred outside it. Transfers to the US providers above rely on the EU–US Data Privacy Framework (and its UK extension) where the provider is certified, and otherwise on the European Commission's Standard Contractual Clauses. What goes to DeepSeek in China carries no name, email or account id; it is sent only when you use a study tool, because generating it is the service you asked for.

• Your account, quiz history and study tools — as long as your account exists. You can delete everything yourself, immediately, from your Account page — no request needed and no waiting period.
• Purchase records — kept after account deletion, without a link to you, for as long as tax and accounting law requires. Stripe keeps its own payment records under its policy.
• Server logs and error reports — deleted automatically by our hosting and error-reporting providers, within 90 days.
• Contact-form messages — only as long as we need them to answer you and deal with what you asked.
• Anonymous counts — may be kept indefinitely; they are not personal data.

If you are in the EU, UK or another place with similar laws, you have the right to:

• Get a copy of your data, in a portable format — instantly, with "Download my data" on your Account page.
• Delete your data — from your Account page. Deletion is permanent and takes effect right away — it removes your quiz history, bookmarks, study guides, and credits. Deleting the account is permanent: the Advanced Tools Pass is forfeited immediately, the one-time payment is not refunded, the pass is not transferable to another account, and it cannot be restored — not by signing up again with the same email address, and not by contacting support. Weekly credits are an allowance rather than a balance you own, so any left unused simply stop.
• Correct inaccurate data, restrict how we use it, or object to processing based on legitimate interest.
• Complain to your data protection authority — for example, where you live or work in the EU, or the Information Commissioner's Office in the UK.

For anything the Account page doesn't do, email support@prenurse.com or use our contact form. We'll respond within 30 days.

We only use cookies that are strictly necessary — to keep you signed in and to protect sign-in from forgery. The settings we keep in your browser (like dark mode or a quiz in progress) are there only for features you are using. None of it tracks you, so the law doesn't require a consent banner, and you won't see one. See Cookies & Storage for the full list.

If we make material changes, we'll update the date at the top of this page and say what changed here.

Questions about this policy? Email support@prenurse.com or use our contact form.