Skip to content

Privacy Policy

Last updated: September 17, 2026

NursePrepWise respects the privacy of people who visit our website, create accounts, use our exam-preparation resources, purchase subscriptions, submit tutoring enquiries, or otherwise interact with our services. This Privacy Policy explains what personal information we collect, why we use it, when we disclose it, how long we keep it, and the choices and rights available to you.

In this Policy, “NursePrepWise,” “we,” “us,” and “our” refer to NursePrepWise. “Service” means NursePrepWise.com and the free or paid products, question banks, practice tests, study resources, cheat sheets, tutoring-related services, account features, and other services we make available.

1. Scope and Who Controls Your Information

This Policy applies to personal information processed through NursePrepWise in connection with our website and services. It applies to visitors, registered users, subscribers, tutoring leads, and other people who communicate with us. Separate notices may apply to employees, contractors, tutors, vendors, or institutional arrangements if we introduce those relationships in the future.

For most activities described in this Policy, NursePrepWise determines why and how personal information is processed and therefore acts as the data controller or equivalent responsible business under applicable privacy law. Certain service providers process information on our behalf, while payment processors and other providers may also process information under their own legal obligations and privacy policies.

2. Information We Collect

2.1 Information you provide directly

Depending on how you use the Service, you may provide:

  • name, email address, account profile information, and login-related information;
  • phone number or other contact details when you submit a tutoring enquiry or contact support;
  • exam interests, study goals, subject interests, tutoring needs, or educational/professional information that you choose to provide;
  • communications, feedback, support requests, error reports, survey responses, or other information you send to us;
  • billing-related information necessary to identify and reconcile your purchase, such as subscription plan, amount, currency, transaction reference, payment status, and payment-provider customer or subscription identifiers; and
  • any other information you voluntarily provide through forms or communications.

Please do not submit information that NursePrepWise does not request, particularly patient-identifiable health information, clinical records, government identification numbers, or other highly sensitive information.

2.2 Account and authentication information

When you create or use an account, authentication infrastructure processes information necessary to verify your identity and maintain your session. We do not have access to your password in plain text. Authentication credentials and session information are handled through our authentication provider and security controls.

2.3 Learning and study information

When you use the QBank, practice tests, bookmarks, saved resources, or progress features, we may collect and store information such as questions attempted, answers selected, scores, test history, incorrect-answer history, bookmarks, saved cheat sheets, subject or topic progress, and timestamps associated with your study activity. This information allows us to provide progress features and maintain your learning history.

2.4 Technical and usage information

When you visit or use the Service, we and our infrastructure providers may automatically process technical information such as IP address, browser type, device type, operating system, referring or requested URLs, timestamps, network information, security events, error logs, and similar diagnostic data. Approximate location may sometimes be inferred from an IP address for security, fraud-prevention, compliance, or infrastructure purposes. We do not currently request precise GPS location for ordinary use of the Service.

2.5 Payment information

Payments are processed through third-party payment processors such as Paystack. Payment-card details are entered into the payment processor’s systems. NursePrepWise does not need to receive or store your full card number or card security code in order to provide subscription access. We may receive payment status, amount, currency, transaction references, customer codes, subscription codes, renewal information, and limited payment-method metadata from the processor.

3. Sources of Personal Information

We may obtain personal information from:

  • you directly, when you create an account, purchase a subscription, use learning features, contact us, or submit a tutoring enquiry;
  • your device or browser through essential cookies, session technologies, server logs, and security tools;
  • our payment processor, to confirm payments, renewals, cancellations, refunds, failures, and subscription status;
  • our authentication, hosting, storage, email, and infrastructure providers as necessary to operate and secure the Service; and
  • public or lawful sources where necessary to prevent fraud, investigate misuse, comply with law, or protect our legal rights.

4. How We Use Personal Information

We use personal information for purposes that include:

  • creating, authenticating, maintaining, and securing user accounts;
  • providing QBank access, practice tests, progress tracking, bookmarks, saved resources, cheat sheets, tutoring-related services, and other requested features;
  • processing subscriptions, reconciling payments, managing renewals and cancellations, issuing billing communications, and maintaining transaction records;
  • sending account verification, password-reset, security, billing, subscription, service, and other transactional communications;
  • responding to support requests, tutoring enquiries, feedback, and complaints;
  • preventing fraud, account sharing, unauthorized access, abuse, scraping, malicious activity, and violations of our Terms of Use;
  • debugging, maintaining, protecting, and improving the Service and developing new educational features;
  • understanding aggregate usage patterns and product performance without using those insights to make high-impact decisions about users;
  • complying with tax, accounting, legal, regulatory, record-keeping, and law-enforcement obligations;
  • establishing, exercising, or defending legal claims; and
  • sending marketing communications only where permitted by law and, where required, with your consent.

What we do not do

NursePrepWise does not use study performance to diagnose medical or psychological conditions, infer protected characteristics, determine intelligence, or make decisions about employment, licensure, admission, credit, insurance, housing, or other similarly significant matters.

Where privacy law requires us to identify a legal basis for processing, the basis depends on the activity. We may rely on:

  • Performance of a contract - to create and manage your account, provide a subscription or requested service, process access rights, and respond to service requests.
  • Legitimate interests - to secure the Service, prevent fraud and abuse, maintain records, improve our products, understand ordinary product usage, and protect our business and users, where those interests are not overridden by your rights.
  • Consent - for optional marketing communications, non-essential cookies or similar technologies where consent is required, and other activities for which we specifically request consent.
  • Legal obligation - to comply with tax, accounting, regulatory, court, law-enforcement, or other legal requirements.
  • Protection of rights and legal claims - where processing is necessary to establish, exercise, or defend legal rights.

Where a particular law provides different or additional lawful grounds, we will process personal information in accordance with that law.

6. Cookies and Similar Technologies

NursePrepWise uses cookies and similar technologies that are necessary for authentication, session management, security, preferences, and core website functionality. Disabling essential cookies may prevent account login or other parts of the Service from working correctly.

As of the date of this Policy, NursePrepWise does not intentionally use third-party advertising cookies for cross-context behavioral advertising. If we later introduce analytics, advertising, remarketing, or other non-essential tracking technologies, we will update this Policy and provide any consent or opt-out controls required by applicable law before using them.

Browser “Do Not Track” signals are not interpreted consistently across the internet. Where a legally recognized opt-out signal such as Global Privacy Control applies to our practices, we will honor it as required by applicable law. Because we do not currently sell or share personal information for cross-context behavioral advertising, there is presently no sale/share opt-out to apply to such activity.

7. Payments and Billing Information

NursePrepWise uses payment processors, to process subscription payments. Payment processors may independently collect and process card details, billing information, fraud-prevention data, device information, and other information required to authorize and settle a transaction. Their handling of that information is governed by their own privacy terms in addition to any contractual obligations they owe to us.

We generally retain payment records that are necessary to verify a transaction, administer your subscription, respond to disputes, reconcile accounting records, and comply with legal obligations. We do not intentionally store full payment-card numbers or CVV/security codes in NursePrepWise application databases.

8. Learning, QBank and Study Activity

NursePrepWise records learning activity so that features such as progress tracking, practice-test history, bookmarks, incorrect-answer review, and saved resources can work. Your question responses and study history are treated as account information and are not publicly displayed.

We may use de-identified or aggregated learning data to understand whether questions are functioning as intended, identify content that may need review, improve educational features, and understand broad usage patterns. We will not attempt to re-identify data that we have deliberately de-identified except where necessary to test the effectiveness of the de-identification process or as permitted by law.

9. Tutoring Enquiries and Communications

You do not need to be a paid subscriber to submit a tutoring enquiry. When you do so, we may collect your name, email address, phone number, exam or subject interest, message, and other information you choose to provide. We use this information to respond to the enquiry, coordinate tutoring-related services, prevent spam or abuse, and maintain reasonable business records.

If you communicate with us by email or another support channel, we may retain the content of the communication and related metadata so that we can respond, maintain support history, resolve disputes, and improve our service.

10. How We Disclose Personal Information

We do not disclose personal information indiscriminately. We may disclose information:

  • to service providers and contractors that help us host, authenticate, store, secure, email, support, or process payments for the Service;
  • when you direct or authorize us to do so;
  • to professional advisers such as lawyers, accountants, auditors, insurers, or consultants where reasonably necessary;
  • when required by law, court order, regulatory process, or a valid governmental request;
  • when reasonably necessary to detect or prevent fraud, security incidents, abuse, or unlawful activity, or to protect the rights, safety, and property of NursePrepWise, our users, or others; and
  • in connection with a merger, financing, acquisition, reorganization, sale of assets, or similar business transaction, subject to appropriate confidentiality and legal protections.

Service providers are authorized to process personal information only for the purposes for which it is provided to them, subject to their contracts, legal obligations, and applicable privacy law.

11. Current Service Providers

The NursePrepWise platform currently relies on the following service providers. Providers may change as the Service develops.

  • Supabase, for our database, user authentication, and private file storage;
  • Railway, for application hosting;
  • Resend, for delivering account emails such as email verification and password-reset messages;
  • Paystack, for subscription payment processing; and
  • Namecheap Private Email, for our business email accounts, including support@nurseprepwise.com and hello@nurseprepwise.com.

12. Sale, Sharing and Targeted Advertising

NursePrepWise does not sell personal information for money. As of the effective date of this Policy, we also do not share personal information for cross-context behavioral advertising as those concepts are defined under California privacy law, and we do not operate a data-broker business.

If our practices change in a way that creates a legal right to opt out of sale, sharing, or targeted advertising, we will update this Policy and provide the required opt-out mechanism before engaging in that activity.

13. International Data Transfers

NursePrepWise is intended to operate from Kenya while serving users in the United States and other countries. Our technology providers may process or store personal information in the United States, Kenya, or other jurisdictions where they maintain infrastructure or personnel.

Where applicable law restricts international transfers, we will use legally recognized transfer mechanisms or safeguards, such as contractual protections, adequacy mechanisms, consent where appropriate, or other lawful grounds. No method of international transfer eliminates all differences between national privacy laws.

14. Data Retention

We keep personal information only for as long as reasonably necessary for the purposes described in this Policy, including providing the Service, maintaining study history, complying with legal and accounting duties, resolving disputes, enforcing agreements, and protecting security. Retention periods may differ by data type.

Data categoryTypical retention approach
Account and profile dataWhile the account remains active and for a reasonable period after closure where needed for recovery, disputes, fraud prevention, or legal obligations.
Learning and QBank activityGenerally while the account remains active and for a reasonable period afterward unless you request deletion and no legal or operational exception applies.
Subscription and transaction recordsFor the period required for accounting, tax, payment disputes, fraud prevention, and other legal record-keeping obligations.
Tutoring and support enquiriesFor a reasonable period after the last interaction so we can respond, maintain context, and resolve disputes or complaints.
Security and technical logsFor a limited period appropriate to security, debugging, abuse prevention, and incident investigation, unless longer retention is required for a specific incident or legal reason.

When information is no longer needed, we may delete it, anonymize it, or securely archive it until deletion is practical. Backup copies may persist for a limited period before being overwritten in the ordinary backup cycle.

15. Security

We use administrative, technical, and organizational safeguards designed to protect personal information against unauthorized access, alteration, disclosure, loss, or misuse. Measures may include access controls, authentication, encryption in transit, restricted storage, role-based permissions, private storage controls, server-side authorization, monitoring, and security testing.

No online service can guarantee absolute security. You are responsible for choosing a strong password, keeping your login credentials confidential, and notifying us promptly if you believe your account has been compromised.

16. Your Choices and Account Controls

  • Account information: You may update certain profile information through your account where the feature is available or by contacting us.
  • Marketing emails: If we send you promotional emails, you may unsubscribe using the unsubscribe mechanism included in those messages or by contacting us. Service, security, billing, and account messages may still be sent while you maintain an account or subscription.
  • Automatic renewal: Subscription renewal settings are governed by the Terms of Use and your account controls. Turning off renewal does not itself delete your personal information.
  • Cookies: Browser settings may allow you to block or delete cookies. Blocking essential cookies may prevent authentication or other core features from functioning.
  • Account deletion: You may request deletion of your account and associated personal information, subject to legal, fraud-prevention, security, record-keeping, and other permitted retention exceptions.

17. Privacy Rights

Depending on where you live and which law applies, you may have rights to request information about our processing, access a copy of your personal information, correct inaccurate information, request deletion or erasure, object to or restrict certain processing, withdraw consent, receive portable data, or appeal/complain about a privacy decision.

To exercise a privacy right, contact support@nurseprepwise.com with enough information for us to identify your account and understand your request. We may need to verify your identity before completing certain requests. We will not discriminate against you for exercising a privacy right provided by applicable law.

Some rights are subject to exceptions. For example, we may retain information where necessary to complete a transaction, maintain security, prevent fraud, comply with law, keep required accounting records, or establish or defend legal claims.

18. Kenya Data Protection Rights

Where the Kenya Data Protection Act, 2019 and related regulations apply, data subjects may have rights including the right to be informed about the use of personal data, access personal data, object to processing, request correction of inaccurate or misleading information, request deletion or erasure in appropriate circumstances, and exercise other rights provided by applicable law.

NursePrepWise will process personal information in accordance with applicable principles of lawfulness, fairness, transparency, purpose limitation, data minimization, accuracy, storage limitation, security, and lawful cross-border transfer.

If you believe your data-protection rights have been violated, you may contact us first so that we can attempt to resolve the issue. Where applicable, you may also have the right to lodge a complaint with the Office of the Data Protection Commissioner of Kenya (ODPC).

19. United States and California Privacy Rights

United States privacy rights vary by state. Where a state privacy law applies to NursePrepWise and to you, we will provide the rights and notices required by that law. These may include rights to access, know, delete, correct, obtain a portable copy of personal information, opt out of certain sales/sharing/targeted advertising, or appeal a denied request.

19.1 California notice

If and to the extent the California Consumer Privacy Act, as amended, applies to NursePrepWise, California residents may have rights to know/access personal information, request deletion, correct inaccurate information, opt out of sale or sharing, limit certain uses of sensitive personal information, and receive equal service and pricing when exercising privacy rights, subject to statutory exceptions.

During the preceding 12 months, the categories of personal information NursePrepWise may collect or process include identifiers; account and customer-record information; commercial/subscription information; internet or network activity; educational or professional information voluntarily provided; approximate location inferred from IP address; and account-login information. We use these categories for the purposes described in this Policy and may disclose them to service providers and other recipients described above.

NursePrepWise does not sell personal information for money and, as of the effective date of this Policy, does not share personal information for cross-context behavioral advertising. We do not knowingly sell or share the personal information of people under 16 for such purposes.

California residents may submit requests through support@nurseprepwise.com. An authorized agent may submit a request where permitted by law, but we may require evidence of the agent’s authority and verification of the consumer’s identity. If applicable law requires a specific “Do Not Sell or Share My Personal Information” mechanism in the future, we will make it available before engaging in covered activity.

20. EEA and United Kingdom Privacy Rights

If you are located in the European Economic Area or United Kingdom and the GDPR or UK GDPR applies, you may have rights to access, rectify, erase, restrict, object to processing, receive portable data, and withdraw consent where processing is based on consent. You may also have the right to lodge a complaint with the data-protection supervisory authority in your country.

Our principal legal bases for processing are described in Section 5. Where we rely on legitimate interests, those interests generally include operating and securing the Service, preventing fraud and abuse, maintaining business records, improving our educational products, and protecting our legal rights. Where required, international transfers will use an appropriate lawful transfer mechanism.

We do not currently use solely automated processing to make decisions that produce legal effects or similarly significant effects concerning users.

21. Children and Minors

NursePrepWise is primarily designed for nursing students, healthcare professionals, and other adult learners. The Service is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If we learn that we have collected personal information from a child under 13 without legally valid authorization, we will take reasonable steps to delete it.

Users between 13 and the age of legal majority should use the Service only with the involvement or permission of a parent or legal guardian where required by applicable law. Parents or guardians who believe a minor has provided personal information improperly may contact support@nurseprepwise.com.

22. Automated Decision-Making and Profiling

NursePrepWise may automatically calculate practice-test scores, progress indicators, question-history summaries, or study metrics based on your activity. These tools are educational features and are not used to make decisions about admission, employment, professional licensure, credit, insurance, housing, or other matters that produce legal or similarly significant effects.

We do not currently create psychological, intelligence, health, or protected-characteristic profiles from your study behavior.

23. Patient and Sensitive Health Information

NursePrepWise is an exam-preparation and educational platform, not a clinical record system. Do not submit identifiable patient information, medical records, protected health information, or confidential clinical documentation through tutoring forms, support messages, QBank features, or other areas of the Service.

The Service is not designed to serve as a HIPAA-regulated electronic health-record system or repository for patient information. If you accidentally submit patient-identifiable information, contact us promptly so we can evaluate appropriate removal or other action.

We may preserve or disclose personal information when we reasonably believe disclosure is required by law, legal process, court order, regulatory requirement, or a valid governmental request, or when necessary to investigate fraud, abuse, security threats, or violations of our Terms of Use.

If NursePrepWise is involved in a merger, acquisition, financing, restructuring, sale of assets, insolvency, or similar transaction, personal information may be disclosed to advisers, potential counterparties, or successors subject to confidentiality, applicable law, and any required notice.

25. Data Breaches

We maintain processes intended to identify and respond to security incidents. If a personal-data breach occurs that triggers a legal notification obligation, we will notify affected individuals, regulators, or other authorities as required by applicable law and within applicable timeframes.

26. Changes to This Policy

We may update this Privacy Policy as NursePrepWise develops, our service providers change, new features are introduced, or legal requirements change. We will post the updated Policy on our website and revise the “Last updated” date. If a change materially affects how we use personal information, we may provide additional notice by email, account notification, or another appropriate method where required by law.

Changes apply from their stated effective date and do not retroactively eliminate rights that arose under applicable law before the change.

27. Contact and Complaints

Name
NursePrepWise
Privacy / support email
support@nurseprepwise.com

If you have a question, privacy request, or complaint, contact us using the details above. Where applicable, you may also lodge a complaint with the privacy or data-protection authority that has jurisdiction over you, including the Office of the Data Protection Commissioner of Kenya or the competent authority in your state or country.