Privacy Policy

TL;DR: We collect only what we need to provide our service. We never sell your data. We’re FERPA compliant. You can request your data or delete your account anytime.

Introduction

Scrub Campus, LLC (“we,” “our,” or “us”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the NurseHQ platform, including our website, applications, and related services (collectively, the “Service”).

We understand that educational data requires special protection. NurseHQ serves nursing students, educators, and healthcare institutions, and we take our responsibility to protect your information seriously.

By using our Service, you agree to the collection and use of information in accordance with this policy.

Information We Collect

Information You Provide

Data Type	Examples	Purpose
Account Info	Name, email, phone number (optional), password	Authentication & communication
Educational Info	Institution, courses, progress	Service delivery
User Content	Quiz responses, notes	Learning features
Communications	Support requests, feedback	Customer support
Payment Info	Billing address, payment method	Transaction processing

Information Collected Automatically

Data Type	Examples	Purpose
Device Info	Browser, OS, screen size	Compatibility & optimization
Log Data	IP address, access times, pages	Security & analytics
Usage Data	Features used, completion rates	Product improvement
Performance	Response times, errors	Reliability monitoring

For detailed information about cookies, see our Cookie Policy.

How We Use Your Information

Service Delivery

Provide, maintain, and improve our educational platform
Personalize your learning experience based on your progress
Enable multiplayer quiz features and real-time interactions
Process transactions and send related information

Educational Analytics

Generate progress reports and performance analytics
Identify areas for improvement and provide recommendations
Create aggregated, anonymized insights about learning patterns
Support institutional reporting requirements

Communication

Send service-related notices, including updates and security alerts
Respond to your comments, questions, and support requests
Send promotional communications (with your consent)

Electronic Communications

We communicate with you via email and, with your consent, SMS text messages. This section describes what communications you may receive, how to manage your preferences, and your rights under US law (CAN-SPAM Act and TCPA).

Email Notifications

When you create an account, you agree to receive certain emails from us. We send two types:

Transactional Emails (Cannot Opt Out)

These are essential account and security-related emails required to operate the service:

Email Type	Examples	Why You Can’t Opt Out
Account Management	Email verification, password reset confirmation, account deletion confirmation	Required for account security
Security Alerts	Suspicious login attempts, break glass emergency notifications, MFA changes	Required for account protection
Service Status	Critical outages, emergency maintenance, data breach notifications	Legal obligation to inform you
Transactional	Order confirmations, receipts, refund notices	Required for financial transactions

These are promotional communications you can opt out of anytime:

Email Type	Examples	Frequency
Product Updates	New features, product announcements	~2-4 per month
Educational Content	Study tips, nursing education resources	~1-2 per month
Promotional Offers	Discounts, special offers, referral bonuses	~1 per month
Newsletter	Community updates, success stories	Monthly

Default: Marketing emails are opt-in (you must check a box to receive them).

Email Technical Details

Detail	Information
Sender Addresses	`noreply@nursehq.com`, `support@nursehq.com`, `notifications@nursehq.com`
Email Provider	AWS SES (Simple Email Service)
Physical Address	Scrub Campus, LLC, 1397 Seneca Blvd, Broadview Heights, OH 44147, United States
Reply-To	`support@nursehq.com` (we monitor this inbox)

How to Opt Out of Marketing Emails

Method	How
Unsubscribe Link	Click “Unsubscribe” at the bottom of any marketing email
Account Settings	Update your preferences at app.nursehq.com/account/notifications
Email Request	Email `privacy@nursehq.com` with “Unsubscribe” in the subject line

We honor all opt-out requests within 10 business days as required by the CAN-SPAM Act. You cannot opt out of transactional emails (account security, service status) as they are essential to your use of the platform.

SMS Text Notifications

SMS is entirely optional. You can use all NurseHQ features without providing a phone number or consenting to SMS. We will only send SMS messages if you explicitly opt in.

If you choose to provide your phone number and consent to SMS notifications, we will send only transactional messages:

Message Type	Examples	Frequency
Security Alerts	Account compromise, suspicious activity	As needed (rare)
Verification Codes	Phone verification, password reset codes	As needed (when you request)
Account Notifications	Enrollment confirmations, deadline reminders	1-3 per month
Service Updates	Critical maintenance, urgent policy changes	Rare (1-2 per year)

We never send marketing or promotional SMS.

Detail	Information
Sender Number	`+1-888-997-7390` (toll-free)
SMS Provider	Twilio Inc. (for message delivery only)
Message Timing	8:00 AM - 9:00 PM in your local time zone
Carrier Rates	Message and data rates may apply

Topic	Details
Consent	By providing your phone number and checking “I consent to receive SMS notifications,” you authorize Scrub Campus, LLC to send automated text messages to the number provided. Consent is not required to purchase or use NurseHQ services.
Opt-Out	Reply `STOP` to any message, or toggle off SMS in your account settings. Reply `HELP` for support, or contact `support@nursehq.com` / `(216) 777-7390`.
Privacy	We never sell or share your phone number with third parties. Twilio Inc. receives your number solely for message delivery.

We maintain timestamped consent records including date, method, and IP address for TCPA compliance.

Managing Your Communication Preferences

Account Settings: app.nursehq.com/account/notifications

You control:

✅ Marketing email opt-in/opt-out
✅ Email tracking opt-in/opt-out (controls whether we track email opens)
✅ SMS notifications opt-in/opt-out
⚠️ Transactional emails (cannot disable security/account emails)

Support: Email support@nursehq.com or call (216) 777-7390 for assistance with notification preferences.

Safety and Compliance

Detect, prevent, and address fraud, abuse, and security issues
Enforce our Terms of Service and other policies
Comply with applicable laws and regulations

We do not sell your personal information.

Recipient	What We Share	Why
Your Institution	Educational records, progress	If you access via an institution
Service Providers	Data needed for their service	Cloud hosting, payments, analytics
Legal Authorities	As required by law	Compliance with legal processes
Business Transfers	All data (with notice)	Mergers, acquisitions

Service Providers We Use

Provider	Service	What We Share	Safeguards
AWS	Cloud hosting, infrastructure	Application data, user activity	SOC 2 compliant, encrypted at rest and transit
AWS SES	Transactional email delivery	Email addresses, email content	GDPR/HIPAA eligible, no data retention by SES
Twilio Inc.	Transactional SMS delivery	Phone numbers (with consent), SMS content	SOC 2 Type II, ISO 27001, GDPR/CCPA compliant
Stripe	Payment processing	Billing address, tokenized payment method	PCI DSS Level 1, we never see full card numbers
Google Analytics	Website analytics	Anonymous usage data	Privacy-focused config, IP anonymization

Important:

All providers are contractually obligated to protect your information (Data Processing Agreements in place)
Providers use data only to provide services to us, not for their own purposes
We vet all providers for security, compliance, and privacy practices
Twilio receives phone numbers ONLY if you consent to SMS notifications

Data Retention

Data Type	Retention Period	Reason
Account Data	Active + 3 years	Service continuity
Educational Records	7 years	Regulatory requirements
Usage Data	2 years (then anonymized)	Product improvement
Payment Records	7 years	Tax/accounting requirements
Support Communications	3 years	Quality assurance

You may request deletion at any time, subject to legal retention requirements.

Your Rights

Rights for All Users

Access: Receive a copy of your personal information
Correct: Fix inaccurate or incomplete information
Delete: Remove your account and associated data
Object: Restrict certain processing activities
Withdraw Consent: Where processing is based on consent

Regional Rights

GDPR Rights (European Users)

If you are in the EEA, UK, or Switzerland, you have additional rights:

Data Portability: Receive data in a portable format
Restriction: Limit processing in certain situations
Object to Profiling: Opt out of automated decision-making

Contact: privacy@nursehq.com (response within 30 days)

CCPA Rights (California Residents)

California residents have specific rights under CCPA:

Right to Know: Disclosure of data collected, used, and shared
Right to Delete: Request deletion of personal information
Right to Opt-Out: We do not sell personal information
Non-Discrimination: Equal service regardless of privacy choices

Contact: privacy@nursehq.com

FERPA Compliance

For users accessing NurseHQ through an educational institution, we act as a “school official” under FERPA:

Requirement	How We Comply
Educational Records	Handled per FERPA requirements
Legitimate Interest	Only used for educational purposes
Direct Control	Institutions maintain control
No Re-Disclosure	Never disclosed without consent
Parent/Student Rights	Exercised through institution

Our agreements with institutions include FERPA school official exception requirements.

Children’s Privacy

Our Service is for post-secondary nursing education and is not intended for children under 13.

We do not knowingly collect data from children under 13
If discovered, we will promptly delete such information
For users 13-18, we encourage parental involvement

Security

Measure	Implementation
Encryption	TLS 1.3 (transit), AES-256 (at rest)
Access Controls	Role-based access, MFA, audit logging
Infrastructure	SOC 2 compliant hosting
Training	Regular security awareness for staff
Incident Response	Documented detection and response procedures

See our Security & Compliance page for more details.

Changes to This Policy

When we make material changes:

We update the “Last Updated” date
We notify you by email (if you have an account)
For significant changes, we request consent where required

Continued use after changes take effect constitutes acceptance.

Contact Us

Purpose	Contact	Response Time
Privacy Inquiries	privacy@nursehq.com	5 business days
Data Protection Officer	dpo@nursehq.com	30 days (GDPR)
General Legal	legal@nursehq.com	10 business days
SMS Opt-Out Support	Text STOP or call (216) 777-7390	Immediate (STOP), 1 business day (phone)
Email Opt-Out Support	Click unsubscribe or email privacy@nursehq.com	10 business days (CAN-SPAM)

Physical Address:

Scrub Campus, LLC 1397 Seneca Blvd Broadview Heights, OH 44147 United States

For GDPR-related inquiries, you may also lodge a complaint with your local data protection authority.

Version History

Version	Effective Date	Summary of Changes
1.1	2026-01-27	Added electronic communications section (email/SMS). Added CAN-SPAM and TCPA compliance language.
1.0	2026-01-03	Initial privacy policy publication

How We Notify You of Changes

When we make material changes to this Privacy Policy:

We update the “Last Updated” date at the top
We send an email notification to the primary address on your account
For significant changes, we provide 30 days advance notice before they take effect
We maintain this version history for transparency

Continued use of NurseHQ after the effective date constitutes acceptance of the updated policy.