Privacy Policy

Last updated: May 19, 2026

1. Who we are

BridgeNurse is a product of Bluedove Technology and Integrated Services Limited ("Bluedove", "we", "us"). Bluedove is the data controller for personal information collected through BridgeNurse.

2. Information we collect

• Account information: name, email, password, programme/speciality, and OAuth profile data when you sign in with Google or Apple.
• Usage data: practice attempts, scores, time spent and feature interactions used to power leaderboards and progress.
• Support data: messages you send us and metadata about that contact.
• Billing data: processed by Paddle, our Merchant of Record. We receive subscription status, country and limited card metadata; we do not store full payment details.
• Technical data: IP address, browser, device and cookies for security, analytics and session management.

3. How we use information and legal bases

• Provide the Service (authentication, content delivery, scoring) — contract performance.
• Process payments and manage subscriptions via Paddle — contract performance and legal obligation.
• Improve features, fix bugs, measure performance — legitimate interests.
• Security, fraud and abuse prevention — legitimate interests and legal obligation.
• Service communications — contract performance.
• Marketing emails — consent (you can unsubscribe at any time).

4. Sharing

We share data only with the following categories of recipients:

• Service providers / subprocessors: Supabase (database and authentication), Cloudflare (hosting and security), and email/analytics providers used to operate the Service.
• Merchant of Record: Paddle, for sale of the product, subscription management, payments, tax compliance and invoicing.
• Professional advisers: legal, accounting and similar advisers where necessary.
• Authorities: where required by law, regulation, court order or to protect our rights.

We do not sell your personal data.

5. International transfers

Our processors may store and process data outside your country, including in the EEA, UK and United States. Where required we rely on adequacy decisions and standard contractual clauses or equivalent safeguards.

6. Retention

We keep account data while your account is active and for a reasonable period afterwards to comply with legal, tax and accounting obligations. When data is no longer needed it is deleted or anonymised.

7. Your rights

Depending on your jurisdiction, you may have rights to access, rectify, erase, restrict or object to processing, port your data, and withdraw consent. UK/EEA users also have the right to lodge a complaint with their supervisory authority. We aim to respond within one month. Contact support@bridgenurse.com to exercise these rights; you can also delete your account from the in-app settings.

8. Security

We use appropriate technical and organisational measures including encryption in transit, access controls and least-privilege database policies to protect your data.

9. Cookies

We use essential cookies for authentication and session management, and limited analytics cookies to understand usage. You can control non-essential cookies through your browser settings.

10. Children

The Service is intended for users aged 16 and over. We do not knowingly collect personal data from children under that age.

11. Changes and contact

We may update this policy and will notify you of material changes. Controller: Bluedove Technology and Integrated Services Limited — contact support@bridgenurse.com.