Study now

LEGAL

Privacy policy

Last updated 12 August 2026

What SteadyNurse collects, why we collect it, who else sees it, and what you can tell us to do with it.

  1. The short version

    • We collect what it takes to run your account, build your study plan, and take payment.
    • Your card number never reaches our servers. Stripe handles payments.
    • We use Google Analytics and Meta's advertising tools, so some of what you do here is measured by them too.
    • We don't sell your personal information.
    • Email [email protected] to see, correct, or delete what we hold.

  2. What we collect

    • Account data: your email address, a hashed password, and whether the address has been verified.
    • Study data: the questions you answer, whether you got them right, how long your sessions run, your exam date, and the plan built from it.
    • Readiness check data: the answers you give in the free readiness check, and the address you ask for the report at.
    • Payment data: the Stripe customer and subscription identifiers, which plan you are on, and the card's last four digits and country as Stripe reports them. Full card numbers never reach us.
    • Technical data: IP address, browser and device, pages viewed, the site you arrived from, and timestamps.
    • Marketing data: campaign tags in the link you arrived on (utm_source and its siblings), advertising click identifiers such as fbclid and gclid, and the analytics cookie identifiers described below.

  3. Why we use it

    • To run your account and keep you signed in.
    • To build your study plan and adjust it as your results and dates change.
    • To send your readiness report, your receipts, and account email.
    • To take payment, handle renewals, and process refunds.
    • To keep the service secure and spot abuse of it.
    • To measure which pages and which ads bring students here, so we spend on the ones that work.

  4. Analytics and advertising

    The site loads Google Analytics 4 and the Meta pixel. Some events are also reported from our servers rather than your browser, through Meta's Conversions API and GA4's Measurement Protocol, which is how a purchase still gets counted when an ad blocker stops the browser tag.

    Where one of those events carries your email address, it is hashed before it leaves our servers. Meta receives the hash, not the address.

    Under several US state privacy laws this counts as sharing personal information for targeted advertising. You can tell us to stop doing it for your account by emailing [email protected].

  5. Who else sees your data

    We use other companies to run parts of the service. Each gets only what its part needs.

    • Stripe, to take payment and store cards.
    • Our email provider, to send account mail and readiness reports.
    • Our hosting and database provider, to run the site and store your account.
    • Google, for analytics.
    • Meta, for advertising measurement.

    We also disclose data where the law requires it, and to a buyer if the business is ever sold, in which case this policy travels with it.

  6. Cookies

    • Sign-in cookies keep you logged in, and the site can't work without them.
    • Analytics cookies from Google tell us which pages get used.
    • Advertising cookies from Meta measure whether an ad led to a purchase.

    Blocking the second and third groups in your browser settings costs you nothing in the app. Blocking the first will log you out.

  7. How long we keep it

    • Account and study data, while the account exists and for 12 months after you close it.
    • Readiness check leads that never became accounts, for 24 months.
    • Payment and invoice records, for 7 years, because tax law says so.
    • Analytics records, for the retention period set in each provider's console.

  8. Your choices

    • Ask for a copy of what we hold about you.
    • Ask us to correct anything wrong.
    • Ask us to delete your account and its data, apart from the records tax law makes us keep.
    • Unsubscribe from marketing email using the link in it. Account email continues while the account is open.

    In the EU and UK, we rely on your contract with us for running the account, on legitimate interests for security and measurement, and on consent for marketing. You can complain to your national data protection authority.

    In California and other US states with a privacy statute, you can ask what we collect, ask us to delete or correct it, and opt out of sharing for targeted advertising. We won't treat you differently for asking.

  9. Children

    SteadyNurse is for nursing students and graduates, and isn't meant for anyone under 16. If a child's data has ended up here, tell us and we'll delete it.

  10. Security

    Passwords are stored hashed, traffic runs over TLS, and access to production data is limited to the people who need it. No system is perfect. If you find a hole, please write to us before you write about it.

  11. Where your data is processed

    Our servers and most of our providers are in the United States. Using SteadyNurse from elsewhere means your data is transferred there, and handled under this policy and the safeguards in our contracts with those providers.

  12. Changes to this policy

    The date at the top changes whenever this page does. If a change materially affects you, we'll email the address on your account.

  13. Contact

    Privacy questions and requests go to [email protected], or by post to SteadyNurse LLC, 1 Example Street, Suite 100, Wilmington, DE 19801.