Privacy Policy
Last updated: April 21, 2026
CRNA Pathway ("we," "us," or "our") operates the website crnapathway.com and the application at app.crnapathway.com (together, the "Service"). This Privacy Policy explains what information we collect, how we use it, and the choices you have.
By using the Service, you agree to the practices described in this Policy.
Information We Collect
Account information. When you create an account, we collect your email address and any profile information you choose to provide, such as name, GPA, ICU experience, certifications, and educational background.
Application data. When you use our readiness assessment tools, we collect the information you enter, including academic history, clinical experience, and related details you submit to receive scoring and recommendations.
Payment information. When you purchase a paid plan, payment is processed by Stripe. We do not store your credit card number. Stripe provides us with limited information such as transaction status, amount, and the last four digits of your card for receipt purposes. Stripe's privacy practices are described at stripe.com/privacy.
Communications. If you contact us directly or sign up for our emails, we retain your email address and the content of your messages.
Automatically collected data. We and our service providers collect standard technical information when you use the Service, including IP address, browser type, device information, pages visited, and timestamps. This helps us operate and improve the Service.
How We Use Information
We use the information we collect to:
Provide and operate the Service, including generating your readiness score and recommendations
Process payments and manage your account
Send you transactional emails (account confirmations, receipts, service updates)
Send optional product emails if you have opted in, which you can unsubscribe from at any time
Respond to your questions and provide customer support
Improve the Service, including analyzing aggregate, de-identified usage patterns
Detect, prevent, and address technical issues, fraud, or abuse
Comply with legal obligations
How We Share Information
We do not sell your personal information.
We share information only with service providers who help us operate the Service, under contracts that require them to protect your data. These include:
Bubble.io (application hosting)
Framer (marketing site hosting)
Stripe (payment processing)
SendGrid (transactional email delivery)
Google (analytics and search services, where applicable)
We may also disclose information if required by law, to protect our rights, or in connection with a business transfer such as a merger or acquisition.
Data Retention
We retain your account and application data for as long as your account is active. If you delete your account or request deletion, we will delete or de-identify your personal information within a reasonable period, except where we are required to retain it for legal, tax, or fraud-prevention purposes.
Your Choices and Rights
You can:
Access, update, or correct your account information by logging into the Service
Unsubscribe from marketing emails using the link in any such email (transactional emails will continue)
Request deletion of your account and associated data by contacting us at the email below
Depending on where you live, you may have additional rights under laws such as the GDPR (European Economic Area and UK) or CCPA (California), including the right to access, correct, delete, or restrict processing of your personal information. To exercise these rights, contact us at the email below.
Security
We use industry-standard technical and organizational measures to protect your information, including encryption in transit and restricted access to systems storing personal data. No system is perfectly secure, and we cannot guarantee absolute security.
Children's Privacy
The Service is not directed to anyone under 18. We do not knowingly collect personal information from individuals under 18. If you believe a minor has provided us with personal information, contact us and we will delete it.
International Users
The Service is operated from the United States. If you access the Service from outside the United States, your information will be transferred to, stored, and processed in the United States, which may have different data protection laws than your country.
Changes to This Policy
We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date at the top and, where appropriate, notify you by email or through the Service.
Contact Us
For questions about this Privacy Policy or your data, contact us at:
CRNA Pathway