Privacy Policy
Last updated: 12 July 2026
Beyond The Visa (“the App”, “we”, “us”) helps internationally relocating nurses and midwives organise professional registration, learning, relocation and career preparation. This notice explains the information used by the current web preview and the additional processing that applies when optional online services are connected.
1. Who is responsible
The service operator for Beyond The Visa is the data controller. Before commercial or app-store launch, the operator must add its full legal name, registered address and monitored privacy email here. Until then, privacy enquiries can be submitted through Contact Us → Privacy or data request.
2. Information used
- Account details: name, email and authentication information managed by Supabase.
- Professional profile: profession, specialty, qualification country, destination, registration stage, job status, dependants, profile photo and optional goals.
- Uploaded files: certificates, passport or identity copies, visa documents, CVs and images that the user chooses to place in the private document vault.
- Journey and learning: checklist progress, deadlines, notes, budgets, CBT/NCLEX answers, scores, topics and streaks.
- Career and service requests: saved job searches, coaching or CV requests and contact messages.
- Community and feedback: posts, replies, likes, ratings, bug reports and feature requests.
- AI conversations: questions, recent conversation and relevant saved context sent only when a secure Zibur endpoint is configured.
- Technical context: app version and browser information included with a bug report when the user submits it.
3. Storage
Some preferences and progress remain in browser local storage. Account information and optional user uploads use Supabase. Uploaded files are placed in a private bucket under a folder belonging to the signed-in user. The App requests short-lived signed links when a user opens a private file. Clearing browser storage does not delete cloud files.
4. Online services and sharing
Supabase provides authentication, database and private file-storage infrastructure. When the secure Zibur backend is used, a question, recent conversation and limited relevant journey context are sent over HTTPS to Google Gemini to generate an answer. Questions that require current regulatory or immigration information may use Google Search grounding and return supporting source links. Sensitive context fields are excluded by the Zibur service, and users should not enter patient-identifiable, passport, payment or authentication information. External links—including regulators, governments, Trac and trusted support sites—have their own privacy practices. We do not sell personal information.
5. Why information is used
Information is used to create and protect an account, personalise the selected country pathway, save progress, calculate estimates, provide learning feedback, enable requested community and support functions, answer Zibur questions, improve reliability and meet legal obligations. Before production launch, the operator must document the applicable lawful basis for each activity, including contract, legitimate interests, consent and legal obligation where relevant.
6. Health and immigration information
The App provides education and planning support. It is not a medical record, diagnostic service, immigration adviser, tax adviser or emergency service. Users may store their own immigration documents in the vault, but must not upload identifiable patient information, payment-card details, documents belonging to another person without authority or confidential employer records.
7. Retention and deletion
Local information remains until browser data is cleared or Delete account and local data is used. Cloud files remain until the user deletes them individually in My documents or submits a verified account-deletion request. The local deletion control does not by itself delete cloud files. Formal production retention periods and a complete verified account-erasure process must be published before commercial launch.
8. Security
Uploaded files use a private Supabase bucket with access rules restricting each signed-in user to their own folder. File links are short-lived. We use HTTPS and avoid placing private service keys in the browser. No service is completely secure, so users should upload only files needed for the stated purpose and delete them when no longer required.
9. International processing
Connected providers may process information in countries outside the user’s country. Before launch, the operator must document providers, locations and appropriate safeguards.
10. Children
The App is intended for adults preparing for professional nursing or midwifery careers and is not directed to children.
11. Your rights
Depending on location, users may have rights to access, correct, erase, restrict or object to processing, receive a portable copy, withdraw consent and complain to a regulator. The in-app export and deletion controls cover local preview data; production requests will require identity verification.
12. Changes and contact
Material changes will be dated and presented clearly. Submit questions through Contact Us and choose “Privacy or data request”.