Privacy Policy

BB Nursing Academy, operating BB Nursing Academy, is the data controller for personal data used to provide this service. For privacy questions, contact bbnursingacademy@bbnursingacademy.org.

Data we collect and why

• Account and profile information: name, email, authentication information, optional phone and state, target exam and study preferences, to create and secure your account and personalize your study experience.
• Learning activity: answers, attempts, scores, bookmarks, mock-test results, study plans and timetables, to deliver learning tools and preserve progress and history.
• Support messages, question reports and deletion requests, to respond to you and resolve service or content issues.
• Membership information: selected plan and billing duration, provider customer/subscription identifiers, verified payment status and subscription dates, to manage access, renewals and expiry. Payment credentials are handled by Paddle, not stored by this app.
• Reminder preferences and notification records, to provide reminders you opt into. In-app and device notifications are sent only after you turn them on. SMS is not used. Email reminders go to your account email when session reminders are on.
• Technical information such as IP address, device/browser information, request logs and error diagnostics, to operate the site, investigate failures and prevent fraud or abuse.

We do not ask for Aadhaar numbers, medical records, home addresses or identity documents from students. Do not include sensitive information in support messages. We do not sell personal data.

Legal grounds

We process account, learning, support and membership data to perform our agreement with you; technical and security data for legitimate interests in a reliable, secure service; optional reminders on your consent; and records where necessary to comply with legal obligations. You may withdraw optional consent without affecting earlier lawful processing.

Who receives data

Your learning records are owner-scoped, not public. Authorised staff may process data for support, security and moderation. We use service providers for hosting, authentication, data storage and error diagnostics, including Lovable Cloud and its infrastructure providers. If reminder delivery is enabled later, the relevant delivery provider will process only the information needed for that channel.

Paddle receives relevant information as Merchant of Record to sell the product and manage subscriptions, payments, tax compliance and invoicing. Paddle also processes checkout data under its own Privacy Policy. We may share data with professional legal or accounting advisers and with authorities where required by law.

Retention and international processing

We keep account and learning records while your account remains active so you can access saved history, including after paid membership expires. Support records are kept as needed to resolve requests; security and billing records may be retained where needed for fraud prevention, disputes or legal obligations. When information is no longer necessary, we delete or anonymise it. Deletion requests are processed, not immediate automatic deletion; legally required records may be retained.

Our providers may process data outside your country. Where applicable law requires international transfer safeguards, we use appropriate contractual protections, including standard contractual clauses or recognised adequacy decisions.

Security and browser storage

We use appropriate technical and organisational measures, including encrypted connections and access controls. No online service can guarantee absolute security; keep your credentials confidential.

Essential cookies or local browser storage support sign-in, session continuity and service preferences. We do not currently use optional marketing or analytics cookies in the app. External checkout and linked sites may use their own cookies under their policies. You can manage cookies and site storage in your browser; blocking essential storage may prevent sign-in. If optional tracking is introduced, we will provide the required notice and consent controls.

Your privacy rights

Subject to applicable law, you may request access, correction, deletion, restriction or portability of your data, object to processing and withdraw consent. Where UK/EEA data protection law applies, you may also complain to your supervisory authority; we will respond within one month unless a lawful extension applies. Contact support to exercise your rights; we may need to verify your identity securely.

Account and data deletion

You can request deletion from Account settings → “Request account deletion”, or email bbnursingacademy@bbnursingacademy.org. We will review and process the request subject to applicable retention obligations. We will update this notice when our processing changes.