Legal
Privacy policy
Last updated 26 July 2026
This policy explains what BeNurse.ca collects and why. It is written to be read rather than to be defensible, so it is short and specific.
What we collect
- Account information
- Your name, email address and a hashed password. Passwords are hashed with bcrypt and are never stored or transmitted in a readable form, which means we cannot tell you what your password is, only help you set a new one.
- Study activity
- The items you answer, what you answered, how long you spent, and the resulting ability estimates. This is the product: without it there is no progress tracking and no readiness estimate.
- Payment information
- Handled entirely by Stripe. Card numbers never reach our servers. We store a customer reference and a subscription status, nothing more.
- Technical logs
- Standard server logs including IP address and user agent, retained for a short period for security and debugging.
What we do not do
- We do not sell personal information.
- We do not share your study data with employers, schools or regulators.
- We do not run third-party advertising trackers on study pages.
Where your data lives
Application data is stored on servers located in Canada. Some processors, including Stripe for payments, operate internationally and may process data outside Canada, where it can be subject to the laws of the jurisdiction it is held in.
Your rights
Under Canadian federal and provincial privacy law you can ask to see the personal information we hold about you, correct it, or have it deleted. Deleting an account removes your account record and study history permanently and cannot be undone. Write to us through the contact page and we will respond within thirty days.
Cookies
One cookie holds your session so you stay signed in. It is httpOnly, meaning page scripts cannot read it. Analytics, where used, is configured without cross-site tracking.
Changes
If this policy changes materially we will say so on this page and, for anything that affects how study data is used, by email.