Privacy Policy

The short version

• We keep what you enter so we can show it back to you and run the feedback you ask for.
• Your profile is sent to an AI provider (Anthropic) only when you run an evaluation, and we ask your permission before the first time.
• We do not sell your data, show ads, or use it to train models.
• A counselor or tutor sees your data only if you invite them, and you can see a log of what they opened.
• You can export everything, and deleting your account deletes it.

1. What we collect

Your account: email address, a password (stored only as a one-way hash — we cannot read it), optional name and country, and your date of birth, which is used to check the minimum age.

Your profile: what you choose to enter — school, grade level, curriculum, grades and test scores, activities and what you wrote about them, intended subject, career goal, target universities and plans.

What the service produces: evaluations, check-ins, projections and the scores extracted from them, and any report you send us about something the AI wrote.

Billing: if you subscribe on the website, Stripe handles payment; in the app, Apple or Google does. We store the subscription identifiers and the plan status, never your card details. For an in-app purchase we give Apple or Google a random code for your account, so a purchase can be matched to it without either of them learning who you are.

Security records: failed sign-in counts and temporary lockouts on your account, and password-reset tokens (stored hashed, and single-use).

We do not use advertising or analytics trackers. The only cookie we set is the one that keeps you signed in.

2. Third-party AI

Evaluations, check-ins and projections are written by a large language model from Anthropic, PBC. When you run one, the following is sent to Anthropic's API: your profile as described above — grades, scores, activities and what you wrote about them, school, subject interests and target universities — together with earlier evaluations of the same profile.

Your name, email address and date of birth are not sent with a student evaluation. Two features used by the people you invite do send more: a counselor's session prep includes your name and the notes that counselor wrote, and a tutor's progress briefing includes your name so it can be forwarded.

Nothing is sent until you agree to it in the app. You are asked once, before your first AI feature, and you can withdraw that permission from your settings at any time — the AI features stop working for your account until you give it again.

Anthropic processes this data to return the result to us. Under its commercial terms it does not use it to train its models, and keeps it only for a limited period under its own retention policy.

3. Who else processes your data

These services run parts of CourseChart for us and receive only what they need to do that:

• Vercel — hosts the website and app.
• Neon — hosts the database your data is stored in.
• Anthropic — the AI provider, as described above.
• Stripe — payments, if you subscribe on the website.
• Apple and Google — payments, if you subscribe in the iPhone or Android app.
• Resend — sends password-reset emails, and reminder emails you can unsubscribe from in one click.

These providers may process data in countries other than yours, including the United States.

We do not sell your data or share it with anyone else, except where the law requires us to.

4. Counselors and tutors

A counselor or tutor sees a student's data only after the student issues an invite code and both the student and a parent or guardian agree. The student chooses how much they see. Either can end that access at any time, and it ends immediately.

Every time a counselor or tutor opens a student's data, it is recorded, and the student can read that log in their settings.

5. Activity Discovery

If you opt in, your activities can contribute to anonymous summaries of what students with similar interests do. A summary is only shown when it covers at least 10 students, rare activities are left out, and counts are shown as ranges, so no one can be picked out of it. You can opt out at any time and you stop being counted straight away.

6. How long we keep it

Your account and profile are kept until you delete them. To hold less about you over time, older evaluation data is deleted on a schedule:

• The copy of your profile taken at each run: after 60 days.
• The written evaluation: after 30 days on the free plan, 365 days on a paid plan.
• Scores are kept with your account so your progress chart covers your whole time at school.

7. Your choices and rights

You can see and edit everything you entered in the app, export all of it from your settings, and delete your account from your settings. Deleting removes your account, profiles, evaluations and scores from our database and cancels a subscription bought on the website; it is not a hidden or deactivated state. A subscription bought in the App Store or Google Play can only be cancelled there, and the app tells you so before you delete. Stripe, Apple and Google keep their own payment records as the law requires.

Depending on where you live you may have further rights — for example to object to processing or to complain to a data-protection authority. Contact us to exercise any of them.

8. Children

CourseChart is for students aged 13 and over; we ask for a date of birth at signup and refuse accounts below that age. If you believe a younger child has an account, contact us and we will delete it.

9. Security

Data is encrypted in transit, passwords are hashed, and access to the production database is restricted. No system is perfectly secure; if a breach affects your data we will tell you.

10. Changes

If we change this policy in a way that matters — a new kind of data, or a new company we share it with — we will tell you in the app before it takes effect.

11. Contact

Questions or requests about your data can go to the contact address on the CourseChart website.