Draft — pending legal review. Version 1.0, effective 2026-10-25. Draft for attorney review; publication requires attorney and owner approval.

Privacy policy

Operator and scope

This Privacy Notice (Version 1.0, effective 2026-10-25) describes how NewNclex (newnclex), an online NCLEX-RN/PN preparation service operated by NewNclex LLC, 10560 NW 27th Street, Unit 101, Doral, FL 33172, collects, uses and protects personal information. NewNclex LLC is the controller of the personal information described here. It covers our account, learning, billing, AI and support features and applies to users in the United States. Florida and federal law apply alongside any mandatory privacy protections in your state; this Notice does not waive them. If your school or organization gives you access, we handle your data under that organization's agreement with us and your consent where required, and your personal work is not shared with the organization merely because you joined.

Information we collect

We collect: account information (email, name, and an optional profile including country, interface language and time zone, plus RN/PN selection, goals and exam date); sign-in records (password hashes, passkey public credentials, multifactor records and Google account identifiers if you use Google sign-in); study activity and results (answers, scores, timing, progress, notes and bookmarks); AI tutor conversations and feedback; support messages; and billing references, subscriptions, invoices and refund records (card details are handled by Stripe and are not stored by us). For security, our sessions record timestamps, a device/browser label derived from your browser's user-agent, and a hashed version of your IP address. The country in your profile is supplied by you; we do not derive it from your IP address. We do not collect or store approximate or precise device or IP-derived location, request device geolocation, or use IP geolocation. A hashed IP address remains security-related personal information, not a claim of anonymity. Your time zone comes from your browser or profile for display and reminders. Please do not provide real patient information or sensitive clinical records.

Why we use information

We use information to authenticate accounts, secure sessions, provide and personalize practice and progress reports, operate the optional AI tutor, process billing, respond to support, handle privacy requests and prevent fraud and abuse. We send study reminder emails only if you opt in; every reminder has a one-click unsubscribe link, and you can change the schedule or turn reminders off in Account. We also send service messages (account verification, password recovery, receipts and trial and billing notices), which are not marketing. Any marketing email will include a clear way to opt out, a valid physical postal address, accurate sender information and identification as advertising where required, as required by the federal CAN-SPAM Act, and we honor opt-outs within 10 business days. We do not sell your personal information, and we do not use it for targeted advertising.

AI disclosure

The AI tutor is optional. When you use it, your questions and relevant study context are sent to third-party AI providers, currently Anthropic Claude models through Amazon Bedrock (the tutor may also run in a test mode that makes no provider call), to generate a response; conversations and feedback can be stored so you can see your history. Our support is assisted by an AI support agent (Grok, provided by xAI) that reads the contents of support tickets and complaints and may reply automatically. Matters involving money, refunds or account changes are always escalated to a human, and you can ask for human review of any AI response by emailing help@newnclex.com. We send providers only the information needed for the feature. AI responses can be wrong and may not have been reviewed by a person. You can view and delete tutor memory in the tutor interface.

We share personal information only as needed to run the service, with: Stripe (payments); Google (only if you choose Google sign-in); AI providers described above (only for AI features you or our support process use); and cloud hosting and email-delivery providers that act on our behalf under their service terms. Authorized staff and our authorized support agent can access the information needed for their roles. We may disclose information when required by law, subpoena or court order, or to protect rights, safety and security, and if our business is sold or merged, information may transfer to the successor, which must honor this Notice. We do not sell personal information, we do not share it for cross-context behavioral advertising.

Cookie notice

We use only the cookies needed to run the service: a session cookie that keeps you signed in and protects requests; a time-zone cookie and an interface-language cookie that remember your display preferences (each lasts one year); and, if you use Google sign-in, a temporary cookie that completes the sign-in. Your browser's session storage also prevents repeated time-zone refreshes. We use no advertising cookies and no advertising or cross-site tracking technologies. Because we do not track you across other sites, there is no tracking for a Do Not Track or similar signal to stop. You can clear or block cookies in your browser; blocking essential cookies may prevent sign-in.

Retention and deletion

We keep account data while your account is active and for up to 24 months after closure, unless you ask us to delete it sooner. Support messages are kept for 24 months. Our proposed billing and tax retention policy is 7 years where needed for tax and accounting, subject to applicable legal requirements; this is a policy period, not a universal statutory minimum. Backups rotate and are overwritten within 35 days. When you request deletion, we delete or de-identify your personal information within 45 days, except records we must keep by law (such as billing records) and security records needed to prevent fraud; copies in backups expire within the 35-day rotation. We may pause deletion while a legal hold applies.

Privacy center and choices

Use Account > Privacy to manage consents, request an export of your data or request account deletion, and to see request status. You may also email help@newnclex.com to ask to access, correct, delete or receive a copy of your personal information, to withdraw consent or to opt out of any sale, targeted advertising or profiling used for decisions with legal or similarly significant effects. We do not sell personal information, use it for targeted advertising, or use profiling for those decisions; ordinary study personalization is described above. We offer access, correction, deletion and portability requests to all users, subject to lawful exceptions, whether or not the controller thresholds of the Florida Digital Bill of Rights (Fla. Stat. §§ 501.701–501.722) apply. Certain sensitive-data sale restrictions can apply below those thresholds; we do not sell sensitive data. Any mandatory statutory rights remain unaffected. To protect your account, we verify your identity by confirming the request comes from your account email (we may ask for additional confirmation if needed). We respond without undue delay, within 45 days after receipt of your request, including any refusal and appeal instructions. Authentication does not restart that clock. If reasonably necessary because of complexity or the number of requests, we may extend once by up to 15 days, telling you why within the initial 45 days. We notify you of completion within 60 days after receipt. Requests are free at least twice annually; any lawful refusal or reasonable fee for a manifestly unfounded, excessive or repetitive request will be explained. If we decline a request, we will explain why, and you may appeal by replying within 60 days; we will answer the appeal within 60 days, and you may also contact the Florida Attorney General. Exports are delivered to your account through the Privacy center or to your account email.

Adults only; children's privacy

The service is only for people aged 18 and older. Do not create an account if you are under 18. The service is not directed to children, and we do not knowingly collect personal information from anyone under 18, including children under 13 (Children's Online Privacy Protection Act, 15 U.S.C. §§ 6501-6506; 16 C.F.R. Part 312). If you believe a child has given us information, email help@newnclex.com and we will promptly investigate and delete it.

Security and limits

We use reasonable administrative, technical and physical safeguards, including encryption in transit, hashed IP addresses and passwords, access controls, optional passkeys and multifactor authentication, session management and audit logs, consistent with Fla. Stat. § 501.171(2). No online service can guarantee absolute security. Protect your credentials, review active sessions, and report suspected compromise to help@newnclex.com. When notice is required by Fla. Stat. § 501.171, we notify affected individuals in Florida as expeditiously as practicable, without unreasonable delay, and no later than 30 days after determining a breach occurred or having reason to believe one occurred, subject only to legally authorized delays or exceptions. We notify the Florida Department of Legal Affairs (Attorney General) as expeditiously as practicable and within that 30-day period for a breach affecting 500 or more individuals in Florida. If notice is required to more than 1,000 individuals at one time, we also notify nationwide consumer reporting agencies without unreasonable delay. We follow any other applicable notification laws, including those of your state.

Changes to this notice

This is Version 1.0, effective 2026-10-25, and the current version and date always appear on this page. If we make a material change, we will notify you by email and by an in-app banner at least 30 days before it takes effect. We will not use your personal information for a materially different purpose without notifying you and, where the law requires, obtaining your consent.

Privacy contact

Controller/operator: NewNclex LLC. Address: 10560 NW 27th Street, Unit 101, Doral, FL 33172. Privacy questions and rights requests: help@newnclex.com. Human support: help@newnclex.com. English and Spanish are intended to have the same meaning; the Spanish version is provided for convenience, and if they differ, the English version controls.

The owner must supply the business details marked in double braces before publication.