Legal
Privacy Policy
This Privacy Policy describes how Nexrara ("we", "us", "our") collects, uses, and protects your information when you use the Aegis mobile app ("the App"). Aegis is a study aid for the NCLEX-RN nursing licensure exam.
Questions? Email support@nexrara.com.
What we collect
We collect only what's needed to run the App and personalize your study plan.
You give us directly
- Email address — for sign-in and account recovery.
- Password — stored as a hash by our authentication provider; we never see your plaintext password.
- First and last name — used to greet you on the Home screen.
- Study plan answers — exam date, daily study minutes, weak areas, and confidence level you select during onboarding.
Created as you use the App
- Question attempts — which questions you answered, whether each was correct, time taken, and the option you selected.
- Session timestamps — when you opened the App and started sessions, used to compute your streak and readiness score.
Subscriptions and purchases
Aegis offers an optional paid plan, Aegis Pro, sold through Apple's In-App Purchase system using Apple StoreKit. We do not use a third-party subscription processor.
- Apple handles all payment information. Your credit card, billing address, and Apple ID password are never sent to or stored by us.
- What we see: whether your Apple ID currently owns an active Aegis Pro entitlement (yes/no), so the app knows which features to unlock. The receipt validation happens on-device via StoreKit 2.
- What we use it for: to unlock Pro features, to support restore-purchases, and to respond to billing-related support requests.
- No advertising or cross-app tracking. Purchase data stays between you, Apple, and the app on your device.
Refund requests go through Apple, not us — visit reportaproblem.apple.com.
What we do not collect
- We do not collect your contacts, location, photos, or microphone data.
- We do not collect or receive your payment card or billing address — Apple handles those.
- We do not track you across other apps or websites.
- We do not use third-party advertising or attribution networks.
- We do not have third-party analytics integrated at this time.
How we use your information
| Purpose | Data used |
|---|---|
| Sign you in and keep your session active | Email, password hash |
| Compute your readiness score and study plan | Answer attempts, profile |
| Personalize the Home screen ("Today's best move") | Profile, recent attempts |
| Maintain your streak and daily progress | Session timestamps |
| Show your performance breakdown in Stats | Answer attempts |
| Respond to your support requests | Email, anything you tell us |
| Determine Aegis Pro entitlement and support restore-purchases | Apple StoreKit transaction state |
We do not sell your personal information. We do not use it for advertising.
Where your data is stored
Your data is stored on infrastructure provided by Supabase, Inc., a service that hosts our authentication and database. Supabase stores data on servers operated by Amazon Web Services in the United States.
Supabase acts as our data processor and may only use your data to provide hosting services to us. See Supabase's own privacy policy at supabase.com/privacy.
Who else can see your data
Only the service providers we explicitly use: Supabase (auth + database hosting) and Apple (App Store billing for Aegis Pro). Each acts as a data processor under our instructions and is contractually limited to using your data only to provide their service. We do not share your personal information with anyone for marketing, advertising, or data-broker purposes. We may disclose information if required by law, court order, or to protect our legal rights.
If we ever add analytics, crash reporting, or other services that touch your data, we will update this policy and the App Store privacy labels before those services go live.
Your rights
Whatever country you live in, you have the right to:
- Access your data. Most of it is visible inside the App. Email us if you want a full export.
- Correct your data. Edit your profile in the App; email us if you can't reach what you need.
- Delete your account and all associated data via Settings → Danger zone → Delete account. Two-step confirmation; permanent removal of profile, study plan, every answer, and the account itself.
- Object to processing, restrict processing, or port your data under GDPR/CCPA where applicable — email us and we'll process the request.
We respond to verified requests within 30 days.
Data retention
We retain your data as long as your account exists. When you delete your account, all data is removed from the database. Backups, if any, age out and are overwritten on Supabase's retention schedule (typically 7–30 days).
Children
NCLEX-RN is a professional nursing licensure exam taken by adults. The App is not directed at children under 13, and we do not knowingly collect data from anyone under 13. If you believe a child has provided us with personal information, email us and we will delete it.
Security
- Passwords are hashed using industry-standard algorithms by our authentication provider — we never store or see your plaintext password.
- All connections to our servers use TLS.
- Database row-level security ensures one user cannot read another user's data.
No system is perfectly secure. If you discover a vulnerability, please email support@nexrara.com so we can fix it.
Changes to this policy
We may update this policy. The "Last updated" date at the top reflects the most recent change. Material changes will be highlighted in-app on next launch. Continued use of the App after changes take effect means you accept the updated policy.
Contact
Nexrara
Email: support@nexrara.com
For privacy-specific requests, put [Privacy] in the subject line.