1. Introduction

Boost CRNA (“we,” “us,” or “our”) operates boostcrna.com (the “Platform”), a subscription-based educational resource for registered nurses pursuing Certified Registered Nurse Anesthetist (CRNA) program admission. This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you use our Platform.

By accessing or using Boost CRNA, you agree to the terms of this Privacy Policy. If you do not agree, please do not use the Platform.

2. Information We Collect

Information You Provide Directly

• Account information: name, email address, username, and password when you register
• Profile information: GPA, ICU experience (months), target programs, and other application-related data you choose to enter
• Payment information: processed securely through Stripe; we do not store your credit card number
• Communications: messages you send to support@boostcrna.com or through contact forms

Information Collected Automatically

• Usage data: pages visited, features used, time spent on the Platform
• Device information: browser type, operating system, IP address
• Cookies and tracking: session cookies for login, analytics cookies via Plausible Analytics — privacy-friendly, no personal data shared with third parties

Information from Third Parties

• Google OAuth: if you sign in with Google, we receive your name and email address from Google
• Stripe: payment confirmation and subscription status

3. How We Use Your Information

We use your information to:

• Create and manage your account
• Process subscription payments and send receipts
• Provide access to platform features based on your membership tier
• Send transactional emails (receipts, password resets, account notices)
• Send marketing emails if you have opted in (you may unsubscribe at any time)
• Improve platform features and user experience
• Respond to support requests
• Enforce our Terms of Service and protect against fraud

4. Data Sharing

We share your information only with:

• Stripe — payment processing (governed by Stripe’s Privacy Policy)
• Supabase — secure database hosting for platform data
• Cloudflare — infrastructure and AI proxy services
• Fluent CRM — email automation (data stored on our own servers)
• Google — only if you use Google OAuth login
• Law enforcement — if required by law, court order, or to protect our legal rights

We do not share your data with advertisers, data brokers, or any third party for marketing purposes.

5. Cookies

We use the following cookies:

• Session cookies — required for login and platform functionality
• Analytics cookies — Plausible Analytics, which is privacy-friendly and does not use personal identifiers or share data with ad networks

You may disable cookies in your browser settings. Disabling session cookies will prevent you from logging in.

6. Data Retention

We retain your account data for as long as your account is active. If you delete your account, we will delete your personal data within 30 days, except where retention is required by law (e.g., financial records required for tax purposes, which are retained for 7 years).

7. Your Rights

Depending on your location, you may have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Delete your account and associated data
• Export your data in a portable format
• Opt out of marketing emails at any time

To exercise any of these rights, email us at support@boostcrna.com. We will respond within 30 days.

California residents (CCPA): You have the right to know what personal information we collect and to request deletion. We do not sell personal information.

International users: If you are located outside the United States, please be aware that your data is processed and stored in the United States. By using the Platform, you consent to this transfer.

8. Security

We implement industry-standard security measures including:

• SSL/TLS encryption for all data in transit
• Encrypted password storage
• Row-level security on our database
• API keys stored as encrypted secrets, never exposed to the browser

No system is completely secure. If you believe your account has been compromised, contact us immediately at support@boostcrna.com.

9. Children’s Privacy

Boost CRNA is intended for registered nurses and healthcare professionals. We do not knowingly collect personal information from anyone under the age of 18. If we learn that a minor has provided us with personal information, we will delete it promptly.

10. Intellectual Property

All content on the Boost CRNA platform — including but not limited to program data, tool designs, written content, AI-generated feedback, course materials, and platform code — is the exclusive intellectual property of Boost CRNA and is protected by United States copyright law.

You may not:

• Reproduce, copy, or republish any platform content without prior written permission
• Scrape, crawl, or use automated tools to extract data from the platform
• Resell, sublicense, or commercially exploit any platform content
• Use platform data to train machine learning models or AI systems

11. Third-Party Links

The Platform may contain links to external websites (e.g., CRNA program websites). We are not responsible for the privacy practices of those sites. We encourage you to review their privacy policies before providing any personal information.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or by posting a notice on the Platform. Your continued use of the Platform after changes are posted constitutes your acceptance of the updated policy.

13. Contact Us

If you have questions about this Privacy Policy or your personal data, please contact us: