Privacy Policy

Last updated: July 11, 2026

NextGen RN (“we,” “us,” or “our”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and safeguard your information when you use our website and mobile applications (collectively, the “Service”).

1. Information We Collect

Account Information: When you register, we collect your email address and any username or profile information you provide.

Usage Data: We collect information about how you interact with the Service, such as questions answered, quizzes completed, streaks, study plan progress, and feature usage.

Device & Log Data: We may collect IP address, browser type, device identifiers, and operating system for security and analytics purposes.

Payment Information: We do not store your full credit card details. Payment processing is handled by our secure third-party payment provider.

2. How We Use Your Information

We use your information to: provide and personalize the Service; maintain your account and subscription; track learning progress and generate analytics; improve our content and features; communicate with you about updates, offers, and support; and ensure security and prevent fraud.

3. Cookies and Similar Technologies

We use cookies and local storage to remember your preferences (such as dark mode and font size), maintain your session, and analyze usage trends. You can manage cookie preferences through your browser settings.

4. Data Sharing and Disclosure

We do not sell your personal information. We may share data with: (a) trusted service providers who help us operate the Service (e.g., hosting, payment processing, analytics); (b) law enforcement or regulators when required by law; or (c) in connection with a merger, acquisition, or sale of assets.

5. Data Security

We implement industry-standard security measures to protect your data, including encryption in transit (HTTPS/TLS) and access controls. However, no online service is completely secure, and we cannot guarantee absolute security.

6. Data Retention

We retain your account and usage data for as long as your account is active or as needed to provide the Service. You may request deletion of your account and associated data at any time by contacting us.

7. Children's Privacy

The Service is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected such information, please contact us so we can delete it promptly.

8. Your Rights

Regardless of where you live, you may request to access, correct, export (data portability), or permanently delete your account and personal data by emailing us. We will verify your identity before completing the request and will honor it within the timeframes required by applicable law.

8a. Your Rights Under the GDPR (EU/UK/EEA Users)

If you are located in the European Economic Area, the United Kingdom, or Switzerland, you have the following rights under the General Data Protection Regulation (GDPR) and UK GDPR: (a) the right to be informed; (b) the right of access; (c) the right to rectification; (d) the right to erasure (“right to be forgotten”); (e) the right to restrict processing; (f) the right to data portability; (g) the right to object to processing; and (h) rights related to automated decision-making. Our lawful bases for processing include your consent, performance of our contract with you, and our legitimate interests in operating and improving the Service. You may withdraw consent at any time and you have the right to lodge a complaint with your local supervisory authority.

8b. Your Rights Under the CCPA/CPRA (California Users)

If you are a California resident, the California Consumer Privacy Act (as amended by the CPRA) grants you the right to: (a) know what personal information we collect, use, disclose, and retain about you; (b) delete the personal information we have collected from you, subject to limited legal exceptions; (c) correct inaccurate personal information; (d) opt out of the sale or sharing of personal information; (e) limit the use of sensitive personal information; and (f) be free from discrimination for exercising any of these rights. We do not sell your personal information and we do not share it for cross-context behavioral advertising. To exercise these rights, email us at netirahangels@yournurseally.org. You may also designate an authorized agent to submit a request on your behalf.

8c. Payment Security and PCI Compliance

All connections to the Service are encrypted using HTTPS (TLS). We never store raw credit or debit card numbers, CVV codes, or full magnetic-stripe data on our servers. All payments are processed by Stripe, Inc., a PCI-DSS Level 1 certified payment processor. Card details are transmitted directly from your browser to Stripe over an encrypted channel; we only receive a tokenized reference and non-sensitive metadata (e.g., last four digits, card brand, expiration month/year) needed to manage your subscription.

9. Third-Party Links

The Service may contain links to third-party websites or services. We are not responsible for the privacy practices or content of those third parties.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be posted on this page with an updated “Last updated” date. Continued use of the Service after changes constitutes acceptance.

11. Contact Us

If you have questions or concerns about this Privacy Policy, please contact us at netirahangels@yournurseally.org.