Privacy Policy

When you create an account we collect your name, email address, and password (stored as a salted hash — we never see or store your plaintext password). If you sign in with Google or Facebook, we receive your name, email, and profile identifier from that provider.

As you use the platform we record study activity: questions attempted, answers selected, scores, time spent, bookmarks, and notes you save. This data powers your progress dashboard and weak-area analytics.

We use your data to operate the service: authenticating you, saving your progress, generating performance analytics, and enforcing plan entitlements. We also use aggregate, de-identified usage data to improve question quality and platform performance.

We send transactional email (receipts, password resets, subscription notices) to all users, and study reminders or product updates only if you opt in. Every marketing email includes a one-click unsubscribe link.

We use strictly necessary cookies to keep you signed in and to protect against cross-site request forgery. We use a small number of analytics cookies to understand which pages and features are used, in aggregate.

We do not run third-party advertising cookies and we do not sell or share your data with ad networks. You can clear or block cookies in your browser settings; the site will work, but you will need to sign in again on each visit.

All payments are processed by Stripe, Inc. Your card number never touches our servers — it is transmitted directly to Stripe over an encrypted connection. We store only a payment reference, the last four digits of your card, and your billing history so we can display invoices and manage your subscription.

Stripe's handling of your payment data is governed by Stripe's own privacy policy, available at stripe.com/privacy.

Your data is stored with Supabase on infrastructure located in the United States, encrypted at rest and in transit (TLS 1.2+). Access to production data is limited to a small number of team members with a need to access it, protected by multi-factor authentication.

Row-level security policies enforce that your study records are only ever readable by you and by administrative tooling. Uploaded and downloadable study materials are served from access-controlled storage with signed, expiring links.

We share data only with the service providers required to run the platform — Supabase (database, authentication, file storage), Stripe (payments), and our transactional email provider. Each processes data solely on our instructions under a data-processing agreement.

We never sell personal data. We may disclose information if required by law, or to protect the rights, safety, or property of NCLEXProHub and its users.

You can view and update your account details at any time from account settings. You may request a copy of your personal data, ask us to correct it, or ask us to delete your account entirely by emailing support@nclexprohub.com.

Account deletion removes your personal information within 30 days; anonymized, aggregate statistics (such as overall question difficulty data) are retained because they no longer identify you. Depending on where you live, you may have additional rights under laws such as the CCPA; we honor verified requests regardless of your state of residence.

We may update this policy as the product evolves. When we make material changes we will update the date at the top of this page and notify active subscribers by email at least 14 days before the changes take effect. Continued use of the service after that date constitutes acceptance of the revised policy.