Privacy Policy

Last Updated: May 12, 2026

Introduction

David Zapencki, doing business as Online Nurse Training ("we," "our," or "us"), respects your privacy and is committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard information when you use our website, mobile applications, courses, books, email communications, and related services (collectively, the "Services").

By accessing or using any of the Services, you consent to the practices described in this policy. If you do not agree, please do not use the Services.

Scope

This Privacy Policy applies to:

• The Online Nurse Training website at onlinenursetraining.com and related subdomains
• All mobile applications published by Online Nurse Training on the Apple App Store and Google Play Store, current and future, including the Nursing School & NCLEX Preparation Pathway quiz app line
• Email communications, lead magnets, and newsletters sent through our email marketing platform
• Direct-sale courses, bundles, and digital downloads available through the website
• Books and workbooks published under our imprint (data we receive about these sales is limited to whatever Amazon or other retailers share with us)
• Courses hosted on third-party platforms such as Udemy (your data on those platforms is governed primarily by their privacy policies)

Information We Collect

Information You Provide Directly

We collect information you give us when you:

• Subscribe to our email list or download a lead magnet: name and email address
• Create an account in one of our apps: email address, display name, password (stored as a secure hash, never in plain text)
• Purchase a product directly from us: name, email, billing address, and payment information (payment card details are processed by Stripe and never stored on our servers)
• Make an in-app purchase: the App Store or Play Store processes payment; we receive purchase confirmation and entitlement status but not your payment details
• Contact support: your name, email, and message content
• Submit feedback or report errors: whatever information you choose to include

Information Collected Automatically

When you use the Services, we automatically receive:

• Usage data within apps: quiz attempts, scores, progress, category selections, time spent, correct/incorrect answer patterns, and similar study-related performance data
• Website analytics: pages visited, referring URLs, session duration, general geographic region (city/country level, derived from IP), device type, browser, and operating system
• Device information: device model, OS version, unique device identifiers used by the App Store or Play Store
• Diagnostic data: crash reports and performance logs used to fix bugs

Information We Do Not Collect

• Social Security numbers, government IDs, or financial account numbers
• Access to your device's camera, microphone, photo library, or contacts
• Precise GPS location
• Any actual patient health information or clinical data from your work
• Sensitive health information about you beyond your study performance on our materials

How We Use Your Information

We use the information we collect to:

• Provide the Services you've requested (account access, course delivery, quiz tracking, email subscriptions)
• Process purchases and manage entitlements (premium upgrades, course access, bundle deliveries)
• Send transactional emails (purchase confirmations, password resets, account notices)
• Send marketing emails about our products and educational content (only if you opted in; you can unsubscribe at any time)
• Provide customer support and respond to your questions
• Improve our products by analyzing usage patterns and study performance trends (in aggregate, not individually identified)
• Detect, prevent, and respond to fraud, abuse, and security threats
• Comply with legal obligations

Cookies and Similar Technologies

Our website uses cookies and similar technologies for essential functionality (keeping you logged in, remembering preferences) and for analytics (understanding aggregate usage to improve the site). We may use:

• Essential cookies: required for the site to function; cannot be disabled without breaking core features
• Analytics cookies: Vercel Analytics for traffic analysis; we may add Google Analytics in the future
• Functional cookies: remember your preferences and previously visited pages

Most browsers allow you to refuse cookies or alert you when cookies are being sent. Disabling cookies may limit some features of the Services.

Third-Party Service Providers

We use trusted third parties to operate the Services. Each handles certain data on our behalf and is bound to use it only for the purposes we've engaged them for. The current list:

Hosting and Infrastructure

• Vercel â website hosting, deployment, edge delivery, and traffic analytics. Privacy policy
• Cloudflare R2 â file storage and delivery for digital downloads (workbooks, study guides, course materials). Privacy policy

Payment Processing

• Stripe â payment processing for direct website purchases. Stripe handles all payment card data; we never store it. Privacy policy
• Apple App Store â payment processing and subscription management for iOS app purchases. Privacy policy
• Google Play Store â payment processing and subscription management for Android app purchases. Privacy policy
• RevenueCat â in-app purchase and entitlement management across our apps. Privacy policy

Email Marketing and Communication

• Kit (formerly ConvertKit) â email marketing, newsletter delivery, lead magnet automation, and subscriber management. Privacy policy
• Google Workspace â business email at onlinenursetraining.com. Privacy policy

Planned Additions

We are building toward launch of additional services for September 2026. The following providers will be added when these features go live, and this policy will be updated accordingly:

• Clerk â user authentication and account management for direct website logins
• Supabase â database for student accounts and course progress
• Bunny Stream â video hosting and delivery for course content
• Google Analytics â additional website analytics alongside Vercel Analytics

Third-Party Sales Channels

When you purchase our books through Amazon, our courses through Udemy, or our apps through the App Store or Play Store, those platforms collect and process your information under their own privacy policies. We typically receive only aggregated sales reports from these platforms, not individual customer details.

How We Share Information

We do not sell your personal information. We share information only as described below:

• With service providers listed above, only as needed for them to perform services for us, and only under contractual obligations to protect your data
• For legal compliance â when required by valid legal process (subpoenas, court orders), regulatory request, or to enforce our Terms of Service or protect rights, safety, or property
• Business transitions â if the business is sold, merged, or transferred, your information may transfer to the new owner. We will provide notice if your information becomes subject to a materially different privacy policy.
• With your consent â in any other case where you explicitly agree to the sharing

Data Storage and Security

We use commercially reasonable safeguards to protect your information, including:

• Encryption in transit (TLS/HTTPS for all web traffic)
• Encryption at rest on our service providers' infrastructure
• Industry-standard password hashing (we never store passwords as plain text)
• Access controls limiting personal data access to authorized purposes
• Regular security review of our third-party service providers

However, no method of internet transmission or electronic storage is 100% secure. While we take reasonable steps to protect your information, we cannot guarantee absolute security.

Data Retention

We retain information only as long as needed:

• Account data: retained while your account is active; deleted within 30 days of account deletion (longer if required for legal, tax, or accounting purposes)
• Quiz and study history: retained while your account is active so you can see your progress over time
• Purchase records: retained for at least 7 years for tax and accounting purposes (this is a legal requirement, not a discretionary choice)
• Email subscriber data: retained while you are subscribed; deleted from active marketing within 30 days of unsubscribe (some metadata may be retained longer for compliance with anti-spam laws)
• Support correspondence: retained for a reasonable period to support follow-up and quality review

Your Privacy Rights

Depending on where you live, you have rights to your personal information. We honor these rights regardless of your location, to the extent practical:

General Rights

• Access: request a copy of the personal information we hold about you
• Correction: request that we correct inaccurate or incomplete information
• Deletion: request that we delete your information, subject to legal retention obligations
• Portability: request a copy of your information in a structured, machine-readable format
• Marketing opt-out: unsubscribe from marketing emails at any time (transactional emails about your purchases and account are not optional)

California Residents (CCPA / CPRA)

California residents have additional rights under the California Consumer Privacy Act, as amended by the California Privacy Rights Act:

• Right to know what personal information is collected, used, and shared
• Right to delete personal information
• Right to correct inaccurate personal information
• Right to opt out of the sale or sharing of personal information — we do not sell or share your personal information for advertising purposes
• Right to limit use and disclosure of sensitive personal information
• Right to non-discrimination for exercising your rights

EU and UK Residents (GDPR / UK GDPR)

Residents of the European Economic Area, United Kingdom, and Switzerland have rights under GDPR / UK GDPR, including:

• Right of access
• Right to rectification
• Right to erasure ("right to be forgotten")
• Right to restrict processing
• Right to data portability
• Right to object to processing
• Right to withdraw consent (where processing is based on consent)
• Right to lodge a complaint with a supervisory authority

Our legal basis for processing your data is typically one of: performance of a contract (when you purchase or use the Services), consent (for marketing emails), legitimate interest (for analytics and security), or legal obligation (for tax records).

How to Exercise Your Rights

To exercise any of these rights, email support@onlinenursetraining.com from the email address associated with your account. We will respond within 30 days (or as required by applicable law). For your protection, we may need to verify your identity before fulfilling certain requests.

International Data Transfers

We are based in the United States, and our service providers are primarily based in the United States. If you are located outside the United States, your information will be transferred to and processed in the United States, where data protection laws may differ from those in your jurisdiction.

For users in the European Economic Area, United Kingdom, or Switzerland, we rely on appropriate safeguards for international transfers, including Standard Contractual Clauses where required.

Children's Privacy

The Services are intended for adult nursing students and healthcare professionals, age 18 and older. We do not knowingly collect personal information from children under 13 (or under 16 in the EU/UK).

If we learn we have collected personal information from a child under these ages, we will delete it promptly. If you believe a child has provided us information, contact us at support@onlinenursetraining.com.

Educational Content Disclaimer

All Online Nurse Training products are designed as study aids for nursing students and healthcare professionals. They are not a substitute for accredited nursing education, licensed clinical supervision, or professional medical advice. We do not guarantee examination results, licensure outcomes, or clinical performance. See our Terms of Service for the complete educational disclaimer.

Data Breach Notification

In the event of a data breach affecting your personal information, we will:

• Notify affected users without undue delay, generally within 72 hours where required by law
• Describe the nature and scope of the breach
• Explain the steps we are taking in response
• Suggest steps you can take to protect yourself
• Cooperate with regulators as required

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, products, or legal requirements. When we make material changes, we will:

• Update the "Last Updated" date above
• Post the updated policy on this page
• Where appropriate, notify you by email or in-app notification

Your continued use of the Services after changes are posted constitutes acceptance of the updated policy. If you disagree with changes, you should stop using the Services and may close your account.

Contact Us

For questions about this Privacy Policy or to exercise your rights, please contact us:

David Zapencki d/b/a Online Nurse Training
361 Falls Rd #70086
Grafton, WI 53024
United States

Email: support@onlinenursetraining.com
Website: onlinenursetraining.com

We typically respond to inquiries within 2 business days.