Privacy Policy
Last Updated: October 8, 2026 • Effective Date: September 28, 2026
We never sell student data or track you with ads
No advertising SDKs or ad pixels. No selling of student performance records. Device-local study storage, with account and deletion assistance available through support.
1. Introduction
This Privacy Policy explains how Magstone RN ("we," "our," or "us") collects, uses, and safeguards information when you use the Magstone RN mobile application on iOS and Android and our website at magstonern.com.
This policy is written to comply with the Apple App Store Review Guidelines (including Guideline 5.1.1), the Google Play Data Safety requirements, the General Data Protection Regulation (GDPR), and the California Consumer Privacy Act (CCPA).
2. Information We Collect & How We Use It
We only collect data strictly necessary to provide and sync your study experience:
Account Identifiers
When you sign in to the app (Apple, Google, phone number, or email) or to magstonern.com to make a purchase (Apple, Google, phone number, or email), Firebase Authentication gives us your Magstone RN account ID and, depending on the sign-in method, your email address or phone number. We use these only to authenticate you, sync your study data, and link purchases to your account. When you sign in with a phone number on magstonern.com, Firebase sends the code by text message and uses Google reCAPTCHA, which collects information about your browser and device, to block automated abuse.
Study & Spaced Repetition Progress
To schedule reviews, we record card review ratings, quiz attempt scores, and question bookmarks to estimate review intervals. The current card screen records Again through thumbs-down feedback and Good through thumbs up or Next card.
Subscription Status
RevenueCat records which plan you have and whether your access is active. It identifies you by your Magstone RN account ID when you are signed in, or by a random ID when you are not. We never see or store your full card number.
Website Purchases (Stripe)
When you buy on magstonern.com, Stripe processes the payment and receives your payment details, email address, and billing address where needed. We receive your email, plan, and payment and subscription status from Stripe, and we attach your Magstone RN account ID to the purchase so the app can unlock it. Stripe may email you receipts and billing portal sign-in links.
Website Analytics
magstonern.com uses Google Analytics to measure how the website is used: pages viewed, the referring site, device and browser type, and approximate region. It sets first-party cookies. We do not use it to show you ads, and we remove checkout session identifiers from the page addresses it receives.
Support Emails
When you email Magstone RN support or the Magstone RN privacy team, we receive your email address and whatever you include in the message, and use it only to answer you.
Crash Diagnostics & App Health
Anonymous stack traces, device model, and OS version when an unexpected error occurs, utilized strictly to fix bugs and prevent calculation errors.
Cookies and browser storage on magstonern.com
- Google Analytics sets first-party cookies to count visits and sessions.
- Website sign-in keeps your Firebase session only for the current browser tab. It is cleared when you close the tab.
- Checkout happens on Stripe's own pages (checkout.stripe.com), which use Stripe's cookies under Stripe's privacy policy.
Sharing progress with your nursing program
School rosters show your name, email, enrollment date and coarse activity counts. If your cohort enables progress reporting, you can choose to share your enrolled activity, completed quiz and test summaries, topic scores and trends, and flashcard confidence in the app under Settings → Faculty sharing.
Assigned faculty and school administrators can view and download those summaries for your enrollment period. Your answer choices, private notes and item-level responses are not included. Turning sharing off removes access through the portal; it cannot recall reports already downloaded by your school. Your own study history remains saved. Reporting copies are removed when your Firebase account is deleted.
3. Information We Never Collect
We believe in data minimization. Magstone RN does not collect:
- Precise Geolocation: We never request or access GPS coordinates.
- Biometric Data: Face ID / Touch ID authentication is handled locally by iOS/Android; we never receive biometric data.
- Contacts or Photos: We do not request access to your address book or photo roll.
- Protected Health Information (PHI): Magstone RN is an exam simulator. You should never input real patient data into the app.
- Cross-App Advertising Identifiers (IDFA / GAID): We do not track you across other websites or apps.
4. Local-First Architecture & Storage Security
Magstone RN is built on a local-first design:
- Native app builds bundle curriculum content, question catalogs, dose-math methods, and anatomy model assets. Study state uses device-local storage.
- Bundled learning activities can work offline after installation. Account services, purchases, and restoration require a connection.
- When you are signed in and connected, study history, saved assessment checkpoints and results sync through Firebase so you can resume across devices. Faculty reporting uses only the enrolled summaries you choose to share.
- Signed-in services use Firebase. Account and program information may be stored remotely; availability of study synchronization depends on the app build and service configuration. Browser-local data may be cleared by browser settings. Do not enter patient-identifying information.
5. Authorized Third-Party Sub-Processors
We work with trusted infrastructure providers who adhere to strict data security standards:
| Provider | Purpose | Data Shared |
|---|---|---|
| Apple App Store | In-App Purchase & Subscriptions (iOS) | Anonymous receipt validation |
| Google Play Store | In-App Purchase & Subscriptions (Android) | Anonymous purchase token |
| Stripe | Website payments & subscription billing | Payment details, email, billing address where needed, Magstone RN account ID, purchase history |
| RevenueCat | Subscription status across the app and website | Magstone RN account ID (or a random ID when signed out), purchase and entitlement records, including website purchases from Stripe |
| Google Firebase | Sign-in (app and website) & cloud study synchronization | Account ID, sign-in email or phone number, study state records |
| Google Analytics | Website usage measurement (magstonern.com only) | Pages viewed, device and browser type, approximate region, cookie identifiers |
6. Your Rights & Account Deletion
You can contact us to request access to, correction of, or deletion of personal data associated with your Magstone RN account. We confirm ownership before acting on an account request.
Request deletion or data assistance:
- Account support: Email Magstone RN support from your account email. We will explain the deletion scope, device-local storage, and any records that must be retained.
- Via Web Portal: If you uninstalled the app or lost your device, submit a request on our Account Deletion Request Page or email the Magstone RN privacy team.
Deleting your Magstone RN account does not cancel a subscription bought on magstonern.com or through Apple or Google, so cancel it first (see our Terms). Payment and transaction records held by Stripe, Apple, or Google are kept under their own retention rules and legal obligations and are not removed when you delete your Magstone RN account.
7. Children's Privacy (COPPA)
Magstone RN is intended for post-secondary adult nursing students and candidates for professional licensure. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal data, please contact us for immediate removal.
8. Privacy Inquiries & Data Protection Officer
For any questions, data export requests, or concerns regarding your privacy, contact our team:
Magstone RN Privacy Office
Email: Magstone RN privacy team
Website: https://www.magstonern.com/privacy