Privacy Policy

Template notice: This is a standard starting-point Privacy Policy, provided as a placeholder so Admitizen has a functioning legal page before launch. It has not been reviewed by an attorney and should be reviewed by qualified legal counsel — including for compliance with COPPA, FERPA, and your state's student-data-privacy laws — before being relied on in production, since this Service is used by families with minors.

1. Information we collect

We collect the following categories of information:

• Account information: name, email address, phone number (optional), and role (parent, student, or teacher/recommender).
• Student academic information: grade level, GPA, standardized test scores, target colleges, major interests, and graduation year, when entered.
• Application content: essays and essay drafts, application tasks and deadlines, and recommendation-letter request details.
• Usage and technical data: log data, IP address, and browser information, used for security (e.g. rate-limiting abusive requests) and diagnosing errors.

2. How we use your information

• To operate core features: timelines, task tracking, and deadline reminders.
• To generate AI-assisted essay feedback and recommendation-request drafts, when you use those features (sent to our AI provider, OpenAI or OpenRouter, solely to generate that response).
• To send account, task, and recommendation-status emails (via our email provider, Resend).
• To detect abuse and protect the Service (e.g. rate-limiting sign-in attempts).
• To monitor and fix errors (via Azure Application Insights, where enabled).

3. Children's privacy

Admitizen is designed for use by families, including students under 18. Student accounts are created and managed under a parent or guardian's family account. We do not knowingly collect personal information directly from a child under 13 outside of this parent-managed structure. Parents may review, update, or request deletion of their student's information at any time by contacting us.

4. How we share your information

We do not sell your personal information. We share data only with:

• Service providers who process data on our behalf: Supabase (database and authentication), OpenAI/OpenRouter (AI feature requests), Resend (email delivery), and Azure Application Insights (error monitoring, where enabled).
• Other family members within your own family account (e.g. a parent can see their student's tasks and application progress by design).
• Recommenders (teachers) you explicitly invite to submit a recommendation letter, who receive only the information needed to respond to that request.
• As required by law, or to protect the rights, safety, or property of Admitizen or its users.

5. Data retention

We retain your information for as long as your account is active. If you delete your account, we delete or anonymize your personal information within a reasonable period, except where retention is required for legal or security purposes.

6. Data security

We use industry-standard safeguards, including encrypted connections (HTTPS), database row-level security so users can only access their own family's data, and rate limiting on authentication endpoints. No system is completely secure, and we cannot guarantee absolute security of information transmitted to the Service.

7. Your rights

Depending on your location, you may have the right to access, correct, export, or delete your personal information. You can manage most of this directly from your account settings, or by contacting us using the information below.

8. Changes to this policy

We may update this Privacy Policy from time to time. We will update the effective date above when changes are made.

9. Contact

Questions about this Privacy Policy, or requests to access or delete your data, can be sent to the contact address provided in your Admitizen account or on our website.