Privacy Policy

• Your email address. It is how you sign in. We do not ask for a password, a phone number, a date of birth or an address.
• What you answer. Which questions you attempted, what you chose, whether it was right, and how long it took. This is what produces your dashboard; without it the product does nothing.
• What you bought. Plan, exam track, dates and the Paddle transaction id. Not your card.
• Technical logs. IP address, browser and timestamps, kept briefly to keep the service up and to spot abuse.

We do not run advertising trackers, we do not sell or share your data with data brokers, and we do not build profiles for anyone else.

Everything you answer here is about hypothetical patients. We do not ask for, and you should never enter, information about real patients or about your own health. Free-text you send to the tutor goes to our AI provider, so keep it clinical rather than personal.

Where UK or EU data protection law applies: we process your email and study history to perform our contract with you; we process technical logs and abuse signals under our legitimate interest in keeping the service secure and available; we process what is needed for tax and accounting to comply with a legal obligation.

Only the processors below, each doing one job on our instructions.

We do not use your answers or your tutor conversations to train anyone’s AI models, and our agreement with our AI provider does not permit them to either.

We are based in Kenya and our processors are mainly in the United States and the United Kingdom, so your data leaves the country you are in. Transfers out of the UK or EEA rely on the standard contractual clauses in our agreements with each processor.

• Your account and study history: until you delete your account.
• Records of what you bought: seven years, because tax law requires it.
• Technical logs: 30 days.
• Tutor conversations: 12 months, then deleted.

Delete your account and everything in the first and last rows goes with it, within 30 days, including from backups as they age out.

Wherever you live, you can ask us for a copy of your data, ask us to correct it, or ask us to delete it, by emailing privacy@boardreadynurse.com. We answer within 30 days and we do not charge for it.

If UK or EU law applies to you, you also have the right to object to or restrict processing, the right to data portability, and the right to complain to your data protection authority — in the UK, the Information Commissioner’s Office.

If you are in California, you have the right to know what we collect, to delete it, and not to be discriminated against for asking. We do not sell or share personal information as those terms are defined by the CCPA, so there is nothing to opt out of.

We set one cookie, which keeps you signed in, and a short-lived identifier that lets someone using the free questions keep their place without an account. That is the lot. No analytics cookies, no advertising cookies, and therefore no consent banner.

Paddle sets its own cookies inside the checkout window; those are covered by Paddle’s privacy notice.

The service is for qualified and student nurses and is not directed at anyone under 16. We do not knowingly collect data from children. If you believe a child has an account here, email us and we will remove it.

If we change this policy in a way that matters, we will email account holders rather than quietly updating the date at the top.

Privacy questions: privacy@boardreadynurse.com. Postal address: TODO — registered business name, TODO — registered address, Kenya.