Privacy Policy

Effective date: June 19, 2026 · Last updated: July 27, 2026

1. About This Policy

This Privacy Policy explains how CNA-Ready collects, uses, and protects your information when you use our Service. By using CNA-Ready, you consent to the practices described in this policy.

2. Information We Collect

Account information: When you create an account, we collect your name and email address through our authentication provider (Clerk). We may also store your subscription tier and account role.

Usage data: We collect information about your activity on the platform, including modules viewed, quiz attempts, scores, flashcards studied, and progress data. This data is used to power your readiness dashboard and track your study progress.

Technical data: We may collect browser type, device type, IP address, and other technical information to maintain Service security and performance.

Payment data: When payment processing is available, it will be handled by a third-party payment processor (Stripe). We do not store your full credit card number or payment details. We may store subscription status, plan tier, and payment processor identifiers for account management purposes.

3. How We Use Your Information

  • To provide and improve the CNA-Ready study platform
  • To personalize your study experience and track progress
  • To manage your account and subscription
  • To communicate important updates, account notifications, or support responses
  • To send you promotional emails about CNA-Ready features, offers, and discounts, and to inform you about other educational products or services we may offer in the future
  • To maintain platform security and prevent fraud
  • To generate aggregated, anonymized analytics to improve our content

We do not sell, rent, or trade your personal information to third parties for marketing purposes.

Opting out of marketing emails: You may opt out of promotional and marketing emails at any time by clicking the "Unsubscribe" link in any marketing email we send, or by contacting us through our Contact page. Opting out of marketing emails will not affect transactional messages related to your account or subscription (such as receipts, password resets, or service notices).

4. Instructor and Cohort Data

If you are enrolled in a cohort managed by an instructor, your study progress, quiz scores, and module completion data may be visible to that instructor within the CNA-Ready Instructor Dashboard. By joining a cohort, you consent to this visibility.

School and Institutional Use (FERPA Notice): When CNA-Ready is used in connection with an accredited school or training program, student progress and quiz score data accessible through the Instructor Dashboard may constitute "education records" as defined under the Family Educational Rights and Privacy Act (FERPA), 20 U.S.C. § 1232g. In such cases, CNA-Ready acts as a "school official" providing services to the institution and handles student data solely for the purpose of delivering the platform's educational functions. Schools that integrate CNA-Ready into their programs are responsible for ensuring their own FERPA compliance when directing students to use the platform. Students enrolled through a school-managed cohort retain their FERPA rights, including the right to access and request correction of their education records. To exercise FERPA rights related to records held by your school, contact your school's registrar or designated FERPA officer directly. For records held by CNA-Ready, contact us via our Contact page.

5. Third-Party Services

We use the following third-party services:

  • Clerk — authentication and user account management
  • Stripe — payment processing for paid subscriptions
  • Replit / Neon — application and database hosting infrastructure
  • OpenAI — AI Tutor responses (your messages are sent to OpenAI to generate answers; your name, email, and account details are not included in those messages)
  • Resend — transactional email delivery (enrollment confirmations, progress notifications, account alerts)

Each of these providers has its own privacy policy governing their handling of your data. We encourage you to review their respective policies. For a full sub-processor list applicable to school and institutional accounts, see our School & Institutional Data Privacy Policy.

6. Data Retention

We retain your account and progress data for as long as your account remains active or as needed to provide the Service. You may request deletion of your account and associated data at any time by visiting our Contact page. Some data may be retained as required by law or for legitimate business purposes.

7. Children's Privacy

CNA-Ready is not intended for users under the age of 18. We do not knowingly collect personal information from minors. If you believe a minor has provided us personal information, please contact us immediately and we will delete it.

8. HIPAA — No Patient Health Information Collected

CNA-Ready is a study preparation platform for nursing assistant students. We do not collect, store, transmit, or process Protected Health Information (PHI) as defined under the Health Insurance Portability and Accountability Act (HIPAA). No actual patient records, clinical data, or patient identifiers are ever entered into or stored by this platform. All practice scenarios, charting exercises, and quiz questions use entirely fictional patient names and data for educational purposes only.

The only personal data stored by CNA-Ready is learner account information (name, email, study progress, and quiz scores) — data that belongs to the learner, not to any patient. As a result, CNA-Ready does not operate as a HIPAA-covered entity or business associate. Schools and training programs may use this platform without HIPAA business associate agreements.

9. Security

CNA-Ready takes reasonable technical and organizational measures to protect your information from unauthorized access, loss, or misuse. However, no transmission over the internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

10. Your Privacy Rights by State

Depending on your state of residence, you may have rights regarding your personal data — including the right to access, correct, delete, or opt out of the sale of your information. To exercise any of these rights, please use our Contact page.

  • California (CCPA/CPRA): Right to know, delete, correct, and opt out of sale or sharing of personal information.
  • Virginia (CDPA), Colorado (CPA), Connecticut (CTDPA), Utah (UCPA): Right to access, delete, correct, and opt out of targeted advertising or sale of personal data.
  • Texas (TDPSA), Florida (FDBR), Montana (MTCDPA), Oregon (OCPA): Right to access, delete, correct, and opt out of sale or sharing of personal data.
  • Iowa, Delaware, New Hampshire, Nebraska (eff. 2025): Right to access, delete, correct, and opt out of sale of personal data.
  • Minnesota, Maryland (eff. 2025–2026): Right to access, delete, correct, opt out of targeted advertising, and data portability.
  • New Jersey (eff. January 2026): Right to access, delete, correct, and opt out of sale or sharing of personal data and targeted advertising.
  • Tennessee, Indiana, Kentucky, and other states with recently enacted consumer privacy laws have similar rights — contact us to exercise any applicable right.

We do not sell personal data. We do not use your data for targeted advertising. These rights apply to personal information we hold about you as a user of CNA-Ready.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted to this page with an updated effective date. Your continued use of the Service constitutes acceptance of the revised policy.

12. Contact Us

For privacy-related questions or requests, please use our Contact page.