English for Nurses
Privacy Policy
This policy explains how English for Nurses uses personal data. For the rules of using the app, see our Terms of Service.
1. Who we are
English for Nurses is provided by LightCraft Software, LLC, a Michigan limited liability company in the United States. We decide how the app's data is used (the “controller”).
2. At a glance
- Most learning data stays only on your phone. It is not backed up by us, so it is lost if you uninstall the app or change phones.
- Creating an account is optional. It is needed for friends and referrals, and lets you use Premium on any phone you sign in on.
- Analytics, crash reports, marketing email, offer notifications and personalised ads are optional. You can change your choices in the app at any time.
- Outside the EEA, UK and Switzerland, the free app may use Pangle (ByteDance) ads. Pangle receives some device and advertising data for both generic and personalised ads. Premium users do not receive ads.
- We do not sell personal data.
3. Information we use
Using the app
To run the app, we use device information and app identifiers. They help us remember your Terms acceptance and privacy choices, configure and protect the app, prevent fraud, and show in-app promotional offers. We also use a device identifier and your IP address, and check that requests come from the genuine app on a genuine device, to keep the app secure and prevent fraud.
Optional analytics and crash reports
You choose these separately in Settings > About your data. They are off unless you turn them on.
| Choice | Provider | Information | Why we use it |
|---|---|---|---|
| Usage analytics | Google Firebase Analytics | Device and app identifiers, app activity, and approximate location based on IP address. | To understand and improve the app. |
| Crash reports | Firebase Crashlytics | Crash and error diagnostics, plus device and operating-system details. | To find and fix problems. |
You can turn analytics and crash reporting off at any time. This stops future collection; information already collected is handled under How long we keep data and Your choices and rights below.
Account, friends and Premium
You can use the app without an account. If you create one, we use your email address and a one-time code to sign you in. We don't use passwords.
Your account includes your profile, friends and referrals, Premium status, the devices you have signed in on (as hashed identifiers, at most 10), and information needed to send friend notifications. Friends are added by invitation and must be accepted before anything is shared. You can remove a friend or refresh your friend code at any time. Accepted friends can see your name, avatar and selected progress information, including total XP, Premium status, completed topics and units, and current or recent activity. They never see your email address.
If you allow notifications, Google Firebase gives this phone a push token, even if you don't sign in. We store it with your account after you sign in, to deliver friend notifications. If you turn on offer notifications, we also store it with this phone's install ID to send you offers and news, until you turn it off.
When you buy Premium through Apple or Google, we receive a purchase record, not your card or payment details: the store transaction ID or purchase token, the product, dates, the store country and whether the purchase was refunded. If you are signed in, we link the record to your account. We check purchases and refunds with Apple and Google. We use this information to provide Premium, check purchases and refunds, and keep required financial records.
Ads
Outside the European Economic Area, the United Kingdom and Switzerland, the app can show ads from Pangle unless you have Premium. Pangle may receive device, advertising and network information, approximate location, ad interactions and diagnostics to deliver, measure and protect advertising. We do not load Pangle ads for users in the EEA, UK or Switzerland. The Pangle SDK is not initialized in these locations.
Outside those locations, ads are generic by default. You can choose personalised ads in Settings > Ad Preferences, and can reset or delete your Android advertising ID in Android settings. On iPhone, Apple's tracking permission is requested only if you choose personalised ads.
Reports, email and speaking exercises
If you report a card or exercise, we receive the content you reported, the reason and any comment you add. Please don't include personal or sensitive information in report comments. We use reports to correct content.
We send marketing email only when you opt in. Our email provider holds your email address, subscription choices and basic app context. Every message has an unsubscribe link. After you unsubscribe, we remove your email address and learning-profile data from our mailing list. We keep a limited pseudonymous record of your subscription status and dates to document your choice and recognise it if you later choose to subscribe again.
Speaking exercises use your device's speech-recognition service. We do not record, keep or receive audio. Your device provider may process audio under its own terms.
What stays on your phone
Your detailed learning progress, settings and unsynchronised profile stay on your phone. They are not backed up by us. If you add friends, the profile and progress summary described above is shared through our servers.
4. Legal bases
Where data-protection law requires a legal basis, we use these:
| Purpose | Legal basis |
|---|---|
| Running the app, accounts and Premium | Contract |
| Security and fraud prevention | Legitimate interests |
| Correcting content reports | Legitimate interests |
| Terms acceptance, privacy-choice and financial records | Legal requirements |
| Analytics, crash reports, marketing email, offer notifications and personalised ads | Consent |
| Delivering, measuring and protecting advertising outside the EEA, UK and Switzerland | Legitimate interests where permitted by law. |
5. Who receives data
We use service providers to operate the app:
| Provider | Service |
|---|---|
| Google Firebase Google's Privacy Policy Firebase privacy information |
App backend, sign-in, analytics, crash reporting, notifications and app integrity checks |
| Brevo Brevo's Privacy Policy |
Sign-in and email |
| Pangle Pangle's Privacy Policy |
Advertising for eligible free users outside the EEA, UK and Switzerland |
| Apple App Store and Google Play Apple's Privacy Policy Google's Privacy Policy |
App distribution and payments, checking purchases and refunds, and app integrity checks |
They process the information described above for their services. Pangle also uses data for advertising under its own privacy practices.
We may also disclose data when required by law or to protect people, our rights or the app's security. If the app or its business is transferred, data may transfer with it; we will notify you where the law requires it.
6. International transfers
We and our service providers may process data in Indonesia, the United States and other countries. We use provider contractual data-protection commitments and other safeguards required by applicable law for international transfers. Data is encrypted in transit.
7. How long we keep data
| Information | Retention period |
|---|---|
| Account data | Until you delete the account, unless a longer period is required by law. |
| Terms acceptance and privacy-choice records | Up to six years. |
| Purchase records (store transaction ID or purchase token, product, dates, store country, whether refunded, and the linked app account) | Seven years, for accounting and to check purchases and refunds with Apple and Google. If you delete your account, the link to it is removed and the record is kept. |
| Audit and fraud-prevention records, including device identifiers | Up to 2 years, including after you delete your account. |
| Devices an account has signed in on (hashed identifiers, at most 10) | Until you delete the account. |
| Sign-in security records | Deleted automatically within 24 hours. |
| Google Analytics data | 14 months for user-level and event-level data. Aggregated reports may remain available longer. |
| Crash reports | 90 days, then removal from live and backup systems begins. |
| Offer notifications (push token and install ID) | Until you turn offer notifications off, or the token stops working. |
| Marketing subscription | Until you unsubscribe; we then retain a limited pseudonymous record of your subscription status and dates. |
| Content reports | Until resolved, then deleted, and no later than 2 years after submission. While you have an account, reports may retain the account or install identifier used when submitted. |
When you delete an account, we delete the account, profile, friends, referrals and referral days, the devices it signed in on, notifications, and the link between the account and your purchases. Paid Premium stays with the Apple or Google account that bought it and comes back with Restore purchases. We keep purchase records (no longer linked to the account), audit and fraud-prevention records, and content reports, which are no longer tied to you. Deleting the account does not unsubscribe you from marketing email; use an unsubscribe link to end it. Your offer notifications choice stays with this phone; turn it off in Settings.
8. Your choices, rights and age
You can turn analytics and crash reporting on or off, choose personalised or generic ads where ads are available, unsubscribe from marketing email, turn offer notifications on or off, and decline microphone access.
You can delete an account in Settings > About your data > Delete account. See Delete your account if you cannot open the app.
We do not make decisions about you solely through automated processing.
Depending on where you live, you may have rights to access, correct, delete, restrict or object to our use of your data; withdraw consent; receive portable data; complain to a data-protection authority; and seek compensation where the law allows.
Age
English for Nurses is intended for adults aged 18 and over.
For questions, requests, or if you believe a child has provided us with personal data, email support@lightcraft.io from the address linked to your account or subscription. We may ask for information needed to verify your request and locate relevant records. We respond within the timeframes required by applicable law.
9. Security and changes
We use encryption in transit and restrict access to data. If a personal-data breach requires notice, we will notify affected people and authorities within the time required by applicable law.
We may update this policy. We will notify you of changes where required.
This document is published in English and may be translated into other languages. We intend each translation to convey the same meaning. If there is a difference, the English version prevails to the extent permitted by applicable law.