Your privacy.
Our promise.

Plain language summary

(This is a summary only; see the full policy below for all details.)

What we collect: NOTHING. Zero personal data of any kind. Where data is stored: On your iPhone only. Never on our servers. Who we share data with: No one. We have no servers to share from. Do we sell your data: No. We have nothing to sell. Do we track you: No. Zero analytics, ads, or trackers. Do you need an account: No account, no email, no sign-up required. Kids’ data: Not collected. App rated 17+ (nursing students). HIPAA applies: No. We are not a covered entity. No health data. How to delete data: Delete the app. Everything is gone permanently.

Privacy at a glance

NurseQuake is designed with your privacy as a foundational principle. All of your data stays on your device. We do not collect, transmit, store, sell, share, or process any personal information. We have no servers, no databases, no analytics, and no tracking. Your study progress, flashcards, alarms, saved questions, and settings exist only on your iPhone.

Introduction

NurseQuake (“we,” “us,” “our,” or “the App”) is a mobile application designed to help nursing students prepare for the NCLEX-RN and NCLEX-PN examinations through alarm-based study tools, practice quizzes, Next Generation NCLEX (NGN) question practice, ECG/EKG rhythm identification, flashcards, dosage calculators, reference materials, and other educational resources.

This Privacy Policy describes how we handle information when you download, install, access, or use NurseQuake. It explains what data is stored, where it is stored, and what rights you have regarding that data.

By downloading, installing, or using NurseQuake, you acknowledge that you have read, understood, and agree to the practices described in this Privacy Policy. If you do not agree to this Privacy Policy, please do not use the App and delete it from your device.

This Privacy Policy should be read together with our Terms of Use, which govern your use of the App.

Information We Do Not Collect

NurseQuake is an entirely offline application with no backend servers, no cloud infrastructure, and no data collection mechanisms. We want to be explicitly and comprehensively clear about what we do NOT do:

Personal information (name, email, phone, address) – NOT COLLECTED. No registration or account creation required. The optional display name in Settings is stored only on-device and never transmitted.

Location data (GPS, IP-based, Wi-Fi-based) – NOT COLLECTED. No location services used.

Device identifiers (IDFA, IDFV, serial number) – NOT COLLECTED. No device fingerprinting of any kind.

Usage analytics or telemetry – NOT COLLECTED. No analytics SDKs (Google Analytics, Firebase, Mixpanel, Amplitude, Flurry, etc.).

Crash reports – NOT COLLECTED. No crash reporting tools (Crashlytics, Sentry, Bugsnag, etc.).

Advertising data – NOT COLLECTED. No advertising SDKs, ad networks, or tracking pixels. The App contains zero advertisements.

Browsing history or search queries – NOT COLLECTED. Next Gen searches and question bank filtering are processed locally and not transmitted.

Cookies or web tracking – NOT COLLECTED. No cookies, web beacons, tracking pixels, or similar technologies.

Health or biometric data – NOT COLLECTED. No HealthKit, health data, or biometric data collection.

Contacts, calendar, or photos – NOT COLLECTED. No access to contacts, system calendar, camera, or photo library. The in-app calendar is a standalone feature with no system integration.

Microphone or camera data – NOT COLLECTED. No audio or video recording capabilities.

Social media data – NOT COLLECTED. No social media integration or login.

Keyboard or clipboard data – NOT COLLECTED. No custom keyboard, no clipboard monitoring, no keystroke logging.

Pasteboard (clipboard) access – NOT COLLECTED and NOT READ. The App does not read, monitor, or access the iOS system pasteboard or clipboard at any time, except when you explicitly paste content into an App input field.

Alarm sound recordings or microphone data – NOT COLLECTED. Hospital code alarm sounds are pre-synthesized audio files bundled within the App. No microphone access is requested or used.

Accelerometer, gyroscope, or sensor data – NOT COLLECTED. No motion sensor, accelerometer, gyroscope, barometer, or proximity sensor data is accessed or collected.

Bluetooth or NFC data – NOT COLLECTED. The App does not use Bluetooth, NFC, or any wireless protocol other than Apple’s StoreKit for subscription verification.

Network requests to our servers – NOT COLLECTED. We have no servers. Zero API calls are made to any server we own or operate.

AI or machine learning data – NOT COLLECTED. No data is sent to AI services, language models, or machine learning platforms. All content is static and pre-authored.

Data Stored Locally On Your Device

NurseQuake stores the following data exclusively on your device using Apple’s on-device storage frameworks (SwiftData and UserDefaults). This data never leaves your device and is never transmitted to any server, service, or third party.

3.1 User Preferences and Settings

– App settings (appearance preferences, haptic feedback preference, alarm volume settings) – Optional display name (used only for in-app greeting, e.g., “Good morning, Sarah”) – Onboarding completion status – Daily question limit tracking (count of questions answered today, reset date) – Practice quiz session limit tracking (sessions used today, reset date) – Snooze pass usage tracking (passes used this month, month/year of last reset) – Notification permission status and preferences

3.2 Study and Quiz Data

– Quiz answers, scores, and completion records – Practice quiz history and detailed results (including per-question review data) – Endless Quiz session history and statistics – Daily question tracking and answer history – Next Gen hub quiz results across all question types (SATA, Ordering, Matrix, Cloze, ECG, Core NCLEX) – Category-level statistics (questions attempted and correct per category) – NCLEX readiness score calculations and historical data – XP points, level progress, and streak data – Earned badge identifiers and unlock dates (30 possible badges) – Previously answered question IDs (stored for 3 days to reduce repetition)

3.3 Saved Questions

– Question IDs of incorrectly answered questions saved for later review – Source tracking (which quiz type the wrong answer came from: daily, practice, endless, alarm) – Timestamp of when each question was saved – This data is used solely to let you review questions you got wrong — it is never transmitted

3.4 Flashcard Data

– Flashcard decks you create (deck names, descriptions) – Individual flashcard content (front text, back text) – Flashcard study progress and review dates – Prebuilt deck import status (tracking which of the 13 prebuilt decks you have added)

3.5 Alarm Data

– Alarm times, labels, and repeat schedules – Alarm sound preferences and enabled/disabled status – Quiz category, difficulty, and question count settings per alarm – Alarm completion history and snooze records

3.6 Schedule and Planner Data

– Calendar events you create within the App (titles, dates, times, notes, colors) – Medication reminders (medication name, dosage, scheduled time) – Sleep log entries (date, hours slept, quality rating, notes)

3.7 Clinical Skills Data

– Clinical skills checklist completion progress – Skills marked as completed and completion dates

3.8 Next Gen Hub Data

– The Next Gen hub allows you to practice 6 types of Next Generation NCLEX questions (SATA, Ordering, Matrix, Cloze, ECG/EKG, Core NCLEX) – Question selection and quiz sessions are processed entirely on-device in real-time – Quiz results from Next Gen sessions are tracked in your on-device analytics (same as all other quiz types) – No Next Gen activity is logged, transmitted, or stored anywhere outside your device

3.9 Subscription Status

– Your premium subscription status is verified through Apple’s StoreKit framework – We do not store payment information, Apple ID details, or transaction identifiers – Only a boolean premium status flag and purchased product identifiers are cached locally for feature access

Apple Platform Services

NurseQuake uses the following Apple platform services. Each is governed by Apple’s Privacy Policy (https://www.apple.com/legal/privacy/).

4.1 StoreKit 2 (In-App Purchases and Subscriptions)

If you choose to purchase a NurseQuake Premium subscription ($3.99/month or $39.99/year), the transaction is processed entirely by Apple through the App Store. We:

– DO NOT receive, process, see, or store your payment information (credit/ debit card numbers, billing address, Apple Pay details) – DO NOT have access to your Apple ID, name, or email associated with your purchase – DO NOT process refunds — all refund requests must go through Apple at reportaproblem.apple.com – DO NOT receive any personally identifiable information from Apple as part of the transaction

We receive only a cryptographically signed receipt from Apple confirming your subscription entitlement, which is verified on-device using Apple’s StoreKit 2 framework. No receipt data is transmitted to any server we operate.

4.2 UserNotifications Framework (Local Notifications)

The App uses Apple’s UserNotifications framework to deliver alarm reminders, daily question notifications, medication reminders, and follow-up alarm notifications. These notifications are:

– Scheduled and delivered entirely on your device by the iOS operating system – Not processed by any external server or push notification service – Not routed through Apple Push Notification service (APNs) — they are local-only notifications – Subject to iOS notification delivery policies (e.g., Do Not Disturb, Focus modes, Low Power Mode)

You can manage or disable notifications at any time through iOS Settings > NurseQuake > Notifications.

4.3 AlarmKit (iOS 26+)

On supported devices running iOS 26 or later, the App may use Apple’s AlarmKit framework to deliver system-level alarms that can override silent mode. AlarmKit operates entirely on-device through Apple’s system alarm services. No alarm data is transmitted to external servers. AlarmKit alarms are scheduled in parallel with standard local notifications for maximum reliability.

4.4 SwiftData and UserDefaults

All persistent data is stored using Apple’s SwiftData (for structured data like alarms, flashcards, events, progress records) and UserDefaults (for simple preferences, settings, and tracking counters). Both storage mechanisms are:

– Sandboxed to the App’s private container on your device – Protected by iOS’s built-in data protection and encryption – Inaccessible to other apps on your device – Included in your iCloud Backup if you have iCloud Backup enabled (governed by your Apple/iCloud settings)

4.5 UIActivityViewController (Sharing)

When you use the App’s built-in share feature (e.g., sharing quiz results or celebration cards), the content is generated locally on your device and presented through Apple’s standard UIActivityViewController. We have no involvement in, visibility into, or control over what you choose to share or with whom. See Section 5.1 for details.

Data Sharing

We do not share any data with any third party because we do not collect any data. To be explicitly clear:

– We do not sell personal information to any party, for any purpose, under any circumstances. – We do not share data with advertisers or advertising networks. – We do not share data with analytics providers or data analytics companies. – We do not share data with data brokers or data aggregation services. – We do not share data with affiliates, subsidiaries, or business partners. – We do not share data for cross-app or cross-site tracking purposes. – We do not participate in any data marketplace or data exchange. – We do not share data with government agencies (we have no data to share even if legally compelled — we cannot produce what we do not possess). – We do not share data with AI training services or machine learning platforms. – We do not engage in profiling, automated decision-making, or behavioral targeting.

5.1 User-Initiated Sharing

The App includes optional sharing features (e.g., sharing quiz results, celebration cards, practice quiz summaries, or NGN share cards via the iOS share sheet). When you choose to share:

– The shareable content (an image or text) is generated locally on your device using SwiftUI’s ImageRenderer – Sharing is processed through Apple’s standard UIActivityViewController framework – The data is shared only with the app or service you explicitly select (e.g., Messages, Mail, AirDrop, social media apps) – We have no involvement in, visibility into, or control over this sharing activity – Once shared, the content is governed by the privacy policies of the receiving app or service – Share cards may contain your quiz score, question count, and app branding — they do not contain personally identifiable information unless you have set a display name in Settings

Data Security

Because all data is stored exclusively on your device, your data benefits from Apple’s comprehensive device-level security:

– Device Encryption: All modern iOS devices encrypt data at rest using hardware-based encryption (AES-256). Your App data is protected by this encryption.

– Biometric Protection: Your device may be protected by Face ID, Touch ID, or a passcode, which prevents unauthorized physical access to your data.

– App Sandboxing: iOS enforces strict app sandboxing — other apps on your device cannot access NurseQuake’s data.

– Secure Enclave: Sensitive device security features are managed by the Secure Enclave hardware.

– Data Protection Classes: App data files are protected using iOS Data Protection, which ties encryption keys to your device passcode.

– iCloud Backup: If you have iCloud Backup enabled, your App data is included in encrypted backups to iCloud (governed by your Apple/iCloud settings and Apple’s privacy policy).

– No Network Exposure: Because data never travels over a network, there is zero risk of data interception, man-in-the-middle attacks, server breaches, or unauthorized remote access.

– No Cloud Sync: App data does not sync between devices via iCloud Drive or any cloud service — it exists only on the device where the App is installed.

We strongly recommend that you:

– Use a strong device passcode (6+ digits or alphanumeric) – Enable Face ID or Touch ID – Keep your iOS version updated to receive the latest security patches – Enable iCloud Backup to protect against device loss or damage – Enable Find My iPhone to remotely wipe data if your device is lost or stolen – Do not use the App on jailbroken devices, as jailbreaking compromises iOS security protections

Children’S Privacy

NurseQuake is designed for nursing students and healthcare professionals, who are typically adults aged 18 and older. The App is rated 17+ on the App Store.

7.1 COPPA Compliance (United States)

We do not knowingly collect, use, or disclose personal information from children under 13 as defined by the Children’s Online Privacy Protection Act (COPPA). Because the App collects absolutely no data from any user of any age, there is no risk of inadvertent collection of children’s data.

7.2 International Age Restrictions

We also comply with age-related data protection requirements in other jurisdictions:

– European Economic Area (GDPR): No data is collected from users under 16. – South Korea (PIPA): No data is collected from users under 14. – United Kingdom (UK GDPR / Age Appropriate Design Code): No data is collected from users of any age; the App does not use age-estimation techniques, profiling, or nudge techniques. – Other jurisdictions: No data is collected from any user regardless of the applicable minimum age.

The App does not include any features designed to appeal to children under 13. If you believe a child under the applicable minimum age is using the App in a manner that concerns you, please contact us at support@nursequake.com.

International Users And Regulatory Compliance

NurseQuake is available worldwide through the Apple App Store. Because the App does not collect, process, transmit, or store any personal data, the following data protection regulations are addressed inherently by design.

8.1 European Union / European Economic Area (GDPR)

– No personal data is collected or processed within the meaning of the General Data Protection Regulation (EU) 2016/679. – No data controller or data processor relationship exists — NurseQuake does not act as either a data controller or data processor. – No legal basis for processing is required because no processing occurs. – No Data Protection Officer (DPO) appointment is required. – No Data Protection Impact Assessment (DPIA) is required. – No cross-border data transfers occur. – No Standard Contractual Clauses (SCCs) or Binding Corporate Rules (BCRs) are needed. – No records of processing activities are maintained because no processing activities exist.

8.2 United Kingdom (UK GDPR)

– No personal data is processed under the UK General Data Protection Regulation or the Data Protection Act 2018. – No UK representative appointment is required. – Compliant with the Age Appropriate Design Code (Children’s Code) — no data collection, profiling, or geolocation of any users.

8.3 California, USA (CCPA/CPRA)

– No personal information is collected, sold, shared, or disclosed as defined under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA). – No “sale” or “sharing” of personal information occurs. – No sensitive personal information is collected or processed. – NurseQuake qualifies as a business that does not collect personal information and therefore the CCPA/CPRA consumer rights provisions (access, deletion, correction, opt-out) are not applicable — there is no data to access, delete, correct, or opt out of. – No financial incentive programs are offered in exchange for personal information. – No “Do Not Sell or Share My Personal Information” link is required because no selling or sharing occurs.

8.4 Other U.S. State Privacy Laws

– Virginia (VCDPA), Colorado (CPA), Connecticut (CTDPA), Utah (UCPA), Iowa, Indiana, Tennessee, Montana, Texas (TDPSA), Oregon, Delaware, New Hampshire, New Jersey, Nebraska, Minnesota, Maryland, Kentucky, Rhode Island, Vermont, and other states with comprehensive privacy legislation: No personal data is collected, processed, sold, or targeted under any U.S. state comprehensive privacy law. – Illinois (BIPA): No biometric identifiers or biometric information is collected, captured, or stored. – Nevada (SB 220): No covered information is collected for sale. – Washington (My Health My Data Act): No consumer health data is collected, shared, or sold.

8.5 Canada (PIPEDA / CPPA)

– No personal information is collected, used, or disclosed under the Personal Information Protection and Electronic Documents Act or any provincial privacy legislation (including Quebec’s Law 25, Alberta’s PIPA, and British Columbia’s PIPA).

8.6 Brazil (LGPD)

– No personal data is processed under Lei Geral de Protecao de Dados (Law No. 13,709/2018). – No data processing agent (controlador or operador) relationship exists.

8.7 South Africa (POPIA)

– No personal information is processed under the Protection of Personal Information Act (Act 4 of 2013).

8.8 Australia (APP)

– No personal information is collected, used, or disclosed under the Australian Privacy Principles in the Privacy Act 1988.

8.9 Japan (APPI)

– No personal information is handled under the Act on the Protection of Personal Information (Act No. 57 of 2003, as amended).

8.10 South Korea (PIPA)

– No personal information is collected or processed under the Personal Information Protection Act (Act No. 10465).

8.11 India (DPDP Act)

– No digital personal data is processed under the Digital Personal Data Protection Act, 2023.

8.12 China (PIPL)

– No personal information is processed under the Personal Information Protection Law of the People’s Republic of China.

8.13 Singapore (PDPA)

– No personal data is collected, used, or disclosed under the Personal Data Protection Act 2012.

8.14 Philippines (DPA)

– No personal information is processed under the Data Privacy Act of 2012 (Republic Act No. 10173).

8.15 Thailand (PDPA)

– No personal data is collected or processed under the Personal Data Protection Act B.E. 2562 (2019).

Because we hold no data about you, there are no data subject rights to exercise. You do not need to submit access requests, deletion requests, correction requests, portability requests, or opt-out requests because there is no data to act upon. However, if you have any questions about how this applies in your jurisdiction, please contact us at support@nursequake.com.

Data Retention And Deletion

All data is stored on your device only and only for as long as the App is installed. We have no data retention policies because we do not retain any data.

9.1 Automatic Data Management

Certain App data is automatically managed on your device:

– Previously answered question IDs: Automatically cleared after 3 days to reduce repetition while keeping the question pool fresh. – Daily question counters: Automatically reset at the start of each new calendar day. – Practice quiz session counters: Automatically reset at the start of each new calendar day. – Snooze pass counters: Automatically reset at the start of each new calendar month.

9.2 User-Initiated Deletion

You can delete all App data at any time by:

– Using “Reset All Data” in the App’s Settings (this clears all study progress, alarms, flashcards, saved questions, and preferences while keeping the App installed). – Deleting the App from your device (this permanently and irreversibly removes all App data, including all study progress, flashcards, alarms, saved questions, schedules, and settings). – Deleting individual items: You can remove individual alarms, flashcard decks, flashcards, calendar events, medication reminders, and saved questions within the App.

IMPORTANT: We have absolutely no ability to recover, retrieve, restore, or access your data once it is deleted, because we never received or stored it. Please ensure you have backed up your device before deleting the App if you wish to preserve your data.

Your Rights

While NurseQuake does not collect personal data (making most data protection rights inapplicable), we respect your rights and want to be transparent:

– Right to Information: This Privacy Policy provides complete transparency about our data practices (or lack thereof).

– Right to Access: All your data is on your device — you have complete access to it at all times through the App.

– Right to Deletion: You can delete all data at any time by deleting the App or using the in-app reset feature. You can also delete individual saved questions, flashcards, alarms, and calendar events within the App.

– Right to Portability: Your data is stored locally; you can back up your device to preserve it.

– Right to Opt-Out of Sale: We do not sell any data. There is nothing to opt out of.

– Right to Non-Discrimination: We do not discriminate against users who exercise their privacy rights.

– Right to Restrict Processing: No data processing occurs — there is nothing to restrict.

– Right to Object: No processing based on legitimate interests or direct marketing occurs — there is nothing to object to.

– Right to Withdraw Consent: No consent-based processing occurs — there is no consent to withdraw.

– Right to Lodge a Complaint: You may contact your local data protection authority at any time, though no data processing by NurseQuake has occurred.

If you have any questions about your rights or our privacy practices, please contact us at support@nursequake.com.

Third-Party Links And Services

The App may contain links to external websites (such as our Privacy Policy page, Terms of Use page, Apple support pages, or the App Store). These external sites are operated by third parties and are governed by their own privacy policies and terms of service.

We are not responsible for the privacy practices, content, or security of any external websites or services. We encourage you to read the privacy policy of every website you visit.

Links to external sites from within the App do not imply endorsement, sponsorship, or affiliation with those sites.

The only third-party service integration is Apple’s StoreKit 2 for subscription management, as described in Section 4.1.

Medical And Health Data Disclaimer

While NurseQuake relates to healthcare education, it is critical to understand:

– The App does NOT collect, process, or store any health data as defined by HIPAA (Health Insurance Portability and Accountability Act), HITECH Act, or similar healthcare privacy regulations. – The App does NOT access Apple HealthKit or any health-related APIs. – The App is NOT a “covered entity” or “business associate” under HIPAA. – The App is NOT subject to the HIPAA Privacy Rule, Security Rule, or Breach Notification Rule. – Sleep log entries created by users are self-reported preferences, not clinical health records, and are stored only on-device. – Medication reminder entries are user-created scheduling aids, not medical records, prescriptions, or medication administration records (MARs), and are stored only on-device. – Quiz questions and educational content about health topics (including ECG/EKG rhythms, dosage calculations, and lab values) do not constitute personal health information (PHI). – ECG/EKG rhythm representations are computer-generated educational illustrations, not clinical recordings from patients. – The App is NOT a medical device and is not regulated by the FDA, EMA, MHRA, TGA, or any equivalent regulatory body. – The App is NOT intended to diagnose, treat, cure, or prevent any disease or medical condition.

App Store Privacy Nutrition Label

In accordance with Apple’s App Store requirements, NurseQuake’s App Privacy information (privacy “nutrition label”) states:

“Data Not Collected” — NurseQuake does not collect any data from users. This declaration is accurate and reflects our complete privacy practice.

Specifically, for each Apple privacy category:

– Data Used to Track You: None – Data Linked to You: None – Data Not Linked to You: None – Data Not Collected: All categories (Contact Info, Health and Fitness, Financial Info, Location, Sensitive Info, Contacts, User Content, Browsing History, Search History, Identifiers, Usage Data, Diagnostics, Surroundings, Body, Other Data)

Do Not Track And Global Privacy Controls

NurseQuake inherently respects all “Do Not Track” (DNT) browser signals, Global Privacy Control (GPC) signals, and similar opt-out mechanisms because:

– We perform no tracking of any kind. – We make no network requests to any server we operate. – We do not use cookies, pixels, beacons, or fingerprinting. – We do not participate in cross-app or cross-site tracking. – There is no tracking behavior to disable in response to these signals.

No additional action is required on your part to opt out of tracking — there is nothing to opt out of.

Changes To This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or for other operational, legal, or regulatory reasons.

If we make material changes to this Privacy Policy, we will notify you by one or more of the following methods:

– Updating the “Last Updated” date at the top of this page – Displaying a notice within the App – Posting the updated Privacy Policy on our website

Your continued use of the App after any changes constitutes your acceptance of the updated Privacy Policy. We encourage you to review this Privacy Policy periodically.

If a future update to NurseQuake ever introduces any form of data collection (which we currently have no plans to do), we will:

– Provide prominent advance notice within the App before any data collection begins – Explain clearly what data will be collected, why it is being collected, and how it will be used – Obtain your explicit, informed, opt-in consent before any data collection begins – Provide a clear and accessible mechanism to opt out or revoke consent at any time – Update the App Store privacy nutrition label accordingly – Update this Privacy Policy with detailed information about the new data practices – Comply with all applicable data protection regulations in connection with any new data collection

Contact Us

If you have any questions, concerns, requests, or complaints regarding this Privacy Policy or our privacy practices, please contact us:

General Support: support@nursequake.com Privacy Inquiries: support@nursequake.com Website: https://nursequake.com/privacy-policy/ Response Time: We aim to respond within 30 days of receipt.

For App Store privacy-related requests: Apple handles App Store data governance; contact Apple directly at privacy.apple.com for issues related to your App Store account or transaction data.

We will make commercially reasonable efforts to respond to all privacy-related inquiries within 30 days.

If you are located in the European Economic Area and believe your data protection rights have been violated (though no data is collected), you have the right to lodge a complaint with your local data protection supervisory authority. A list of EEA supervisory authorities is available at: https://edpb.europa.eu/about-edpb/about-edpb/members_en

If you are a California resident and wish to exercise rights under CCPA/CPRA (though no personal information is collected), you may contact us at support@nursequake.com or submit a request through our website.