Your private workspace
Account details, school history, grades, essays, saved schools and financial plans are personal data when connected to you. They are stored to provide the planning functions you choose. A pseudonymous record is not automatically anonymous.
Optional uses are separate
Research and optional usage analytics are off by default. The local prototype records your choices but does not export new research records or collect optional analytics. Under-18s cannot opt into these uses here. No student data is sold and no advertising profiles are created.
Sharing you control
A paid guardian dashboard displays only the shortlist/application progress and financial plans you explicitly share. It does not show private grades, essays or connection notes. School sharing exposes progress counts to authorized staff; assigned counselors see only their assigned students. You can revoke sharing.
Documents and models
Essays, CVs and transcripts are private account material. No new third-party LLM processing is enabled by these changes. Any future external processor, international transfer or model-training use requires a separate documented review and appropriate notice and legal basis.
Access and choices
You can edit your profile, download structured data, retrieve original documents and record correction or deletion requests. These requests enter a manual queue; the prototype does not claim deletion has occurred. Withdrawal disables optional uses and sharing immediately.
Retention and launch requirements
A production retention schedule, processor list, lawful bases, rights handling deadlines, security assessment, breach process and international-transfer arrangements must be approved before launch. Until then, use test data locally. Deletion requests and parent inquiries must not become indefinite unattended records.
Children and international users
The simplified local preview asks only for age and routes under-13 students to parent assistance. This setting requires both local debug mode and the membership-preview flag; outside that mode the conservative country-based checks remain. Neither workflow establishes global legal compliance. Use fictional records until launch review is complete. Optional research remains off. Future under-18 purchases require a separate adult-purchaser process, which does not replace registration permission where required.