Skip to content
NextRank
Sign inStart free

Privacy Policy

Last updated: October 16, 2026

This policy explains how Policy Assist LLC (“NextRank,” “we,” “us”) handles information in the NextRank mobile app (the “App”), the NextRank web app at app.nextrank.io (the “web app”), and your NextRank candidate account. Our Website Privacy Policy covers nextrank.io separately, and the Terms of Service govern your use of the App.

We do not sell your personal information, we do not share it for cross-context behavioral advertising, and the App contains no advertising SDKs and no ad trackers. We use one analytics service, PostHog, to understand how NextRank is used and to fix errors — never for advertising.

What we collect

These are the only categories we collect. Each is linked to your account and used to operate and improve the product, not to track you across other companies’ apps or sites.

  • Email address. Used to create your account, sign you in, verify your address, and send service messages such as password resets.
  • Name. Your first and last name, used to identify your account. They are never shown to other candidates.
  • Screen name. The name shown on leaderboards. Every account starts with a randomly generated one (for example, SwiftFalcon22), and you can choose your own. It is the only name any league shows, so you can stay anonymous.
  • Account identifier. The internal id for your account.
  • Purchase history. The App Store transaction identifiers for what you bought, which exam it applies to, and when your access expires. We use these to grant access and to honour restores. We never receive your card number; Apple processes payment.
  • Study activity. The questions and flashcards you answer, whether you were right, and when. This is what produces your readiness score, spaced repetition, streaks, and league standing.
  • Oral Board answers. If you use Oral Board, the text of each answer you give (typed, or transcribed on your device from what you said), with the scores and feedback it received. We use it to score the answer, show you your results and history, and track your progress across answers.
  • Device identifiers. Two, both only so the App works. The push token for the device you signed in on, so we can send the reminders you enable. And, if you use the App without an account, an identifier we generate and store on your device so that one device has one guest trial — on iPhone this is supported by Apple’s DeviceCheck service, which tells us only whether this device has already used its free trial. Neither is an advertising identifier, and neither is used to track you. The analytics service described below also creates a random identifier when the App is installed.
  • Usage and diagnostics. How you use NextRank, so we can see what helps and where people get stuck: the screens and pages you open; the steps of setting up your exam; when you start and finish a study session, with its mode, how many items you answered, how many you got right, and how long it took; that you viewed plans or chose to buy on the web or in the App Store; that you signed up, started a trial, bought, renewed, or cancelled; your App version, device model, and operating system; and crash and error reports. On the web app it also includes the site or campaign link that brought you, an approximate location (city, region, and country) estimated from your IP address, and, for some visits, a session recording of scrolling and clicks in which everything you type and all text on the page are masked. The App does not record sessions or estimate your location for analytics. This is collected by PostHog for us and linked to your account identifier, never to your name or email address.

What we do not collect

  • No audio or voice recordings. When you answer an Oral Board scenario aloud, the App asks for microphone and speech-recognition permission and turns your answer into text on your device. The recording itself is never sent to us and is not kept.
  • No location, no contacts, no photos, no health data, and no browsing history from outside the App.
  • No advertising identifiers and no advertising or ad-tracking SDKs. The only third-party SDK that collects usage data is PostHog, for the analytics and error reports described above.

How we use it

To create and secure your account; to deliver the study features you paid for; to calculate readiness, streaks, badges, and league standing; to grant and restore purchases; to respond to payment disputes and chargebacks, including by sharing records of your purchase and your use of paid content with the payment processor and card issuer; to send service messages and any notifications you turn on; to answer support requests; to understand how NextRank is used and where it falls short, and to find and fix crashes and errors; to detect abuse and protect exam integrity; and to meet legal obligations.

Oral Board answers are scored by artificial intelligence, which can make mistakes. Scores are practice feedback, not a prediction of any official result. No person at NextRank reads your answers to score them.

Your answers are used to teach you. We may use aggregated, de-identified statistics (for example, how often a question is missed) to improve content quality. Those statistics do not identify you.

If your agency licenses NextRank

Where an agency or department buys access for its candidates, administrators from that organization can see who holds a license and each candidate’s progress within that organization’s exam. Nothing you do in a personal state-certification account is shared with an agency. Every league, agency or not, shows your screen name, never your first or last name.

Reports about screen names

If you report a screen name, we store the name you reported, the reason you chose, the exam, and your account id, so our team can review it. The person you report is not told who reported them. If someone reports your screen name, our team sees the report and may change your screen name to a generated one or remove you from leagues under our Terms.

Who we share it with

We share only with service providers who process information on our behalf under contract:

  • Apple. Processes all in-app purchases and tells us that a transaction is valid. Apple handles your payment details under its own privacy policy.
  • Stripe. Processes purchases made on the web app. Stripe collects and handles your payment card details under its own privacy policy; we never receive your full card number.
  • Amazon Web Services. Hosting and storage in the United States.
  • Anthropic and OpenAI. Score Oral Board answers. They receive the text of your answer and the scenario it responds to, not your name or email address, and process it under API terms that do not allow training their models on it.
  • Resend. Delivery of transactional email such as verification and password-reset messages.
  • PostHog. Product analytics, error reports, and web session recordings, stored in the United States. It receives the usage and diagnostics described above, linked to your account identifier, and may use it only to provide its service to us.

We may also disclose information if required by law or valid legal process, or to protect the rights, safety, and integrity of NextRank, our users, or the examinations we support. If we are ever involved in a merger or sale of assets, we will tell you before your information becomes subject to a different policy.

Retention, and what deletion actually does

We keep your account information while your account exists. Usage and diagnostics are kept for up to one year, and web session recordings for up to 30 days. You can delete your account at any time from the App, on the Profile screen.

We want to be precise about what deletion does, because it is not a complete erasure. When you delete your account:

  • Your name, email address, and sign-in credentials are removed from your record, your sessions are revoked everywhere, and you cannot sign back in to that account.
  • Your registered devices and push tokens are deleted, so the account receives no further notifications.
  • Your Oral Board answers, with their scores and feedback, are deleted.
  • Your analytics profile, and the usage and diagnostics linked to it, are deleted from PostHog.
  • Anonymized study and integrity records are retained and are no longer linked to you. We keep them because examination integrity requires a durable record that a given assessment took place, and because purchase records must be retained for tax and audit purposes.
  • Deletion does not cancel an Apple subscription and does not refund a purchase. Cancel a subscription in your Apple Account settings.

Your choices and rights

You can change your screen name (once a day), exam date, pace, and notification preferences in the App, and turn off “Show me in leagues” so you do not appear in standings. To correct your first or last name, contact us. You can delete your account in the App as described above. To turn off analytics in a web browser, use the control on our Website Privacy Policy (it also covers the web app in that browser); if your browser sends Global Privacy Control, the web app does not load analytics at all. To have your usage data deleted without deleting your account, email us.

Depending on where you live, you may have rights to access, correct, delete, or obtain a copy of your personal information, and to be free from discrimination for exercising them. Residents of California and other U.S. states with comprehensive privacy laws have these rights. We do not sell or share personal information for cross-context behavioral advertising, so there is nothing to opt out of, and we do not use sensitive personal information for inferring characteristics. To make a request, email privacy@nextrank.io. We will verify your request through your account email.

Security

Passwords are stored using a modern one-way hash and are never readable by us. Traffic is encrypted in transit, sign-in tokens are held in the device Keychain, and access to production data is restricted. No system is perfectly secure, but we take these obligations seriously and will notify you and any regulator as required if a breach affects you.

Children

The App is for adults preparing for professional examinations. It is not directed to children under 13, and we do not knowingly collect their information. If you believe a child has given us information, email us and we will delete it.

International users

We operate the App from the United States and process information there. If you use the App from outside the United States, you understand that your information is transferred to and processed in the United States, where privacy laws may differ from those in your country.

Changes to this policy

We may update this policy. We will post the updated version here with a new date and, where the change is material, notify you in the App or by email.

Contact us

Policy Assist LLC, operator of NextRank. privacy@nextrank.io.

← Back to nextrank.io