Privacy Policy

PrepToDone collects information you provide directly, as well as data generated through your use of the Service.

• Profile data: GPA, test scores, extracurricular activities, grade level, and academic history.
• Usage data: pages visited, features used, session duration, and interaction logs.
• Payment data: processed securely by Lemon Squeezy. PrepToDone does not store card numbers.
• Outcome feedback: application results you voluntarily share with explicit consent.

We use the information we collect to provide, maintain, and improve the Service:

• Deliver personalized competitiveness scores, school matches, and action plans.
• Improve the accuracy of our prediction models using anonymized data — only with your consent.
• Send transactional emails (account activity, billing receipts).
• Respond to support inquiries and user feedback.
• Comply with legal obligations.

PrepToDone does not sell, rent, or trade your personal data to third parties.

• We never sell personal data to advertisers, data brokers, or other third parties.
• Anonymized aggregate data may be used to publish general admissions trend reports.
• We use Lemon Squeezy for payment processing. Lemon Squeezy's privacy policy governs their data handling.
• We use Supabase for database and authentication infrastructure.
• We may disclose data if required by law or valid legal process.

We take data security seriously and implement industry-standard safeguards:

• All data is encrypted in transit using TLS/HTTPS.
• Data at rest is encrypted using Supabase-managed encryption.
• Access to production data is restricted to authorized personnel only.
• We conduct regular security reviews of our infrastructure.

You have control over your data and can exercise the following rights at any time:

• Access your data: request a copy of the personal data we hold about you.
• Correct your data: update inaccurate or incomplete information via your profile.
• Delete your account: permanently delete your account and all associated data.
• Withdraw consent: opt out of anonymized data contribution at any time.
• Data portability: request your profile data in a machine-readable format.

To exercise any of these rights, contact us at hello@preptodone.com.

PrepToDone uses a minimal set of cookies necessary to operate the Service:

• Essential cookies: required for authentication sessions and security.
• No advertising cookies or third-party tracking cookies are used.
• No data is shared with advertising networks.
• You may clear cookies through your browser settings at any time.

PrepToDone is operated from the United States. If you access the Service from outside the US, your data may be transferred to and processed in the United States.

• GDPR compliance: EU users have additional rights under the General Data Protection Regulation.
• EU users may request data subject access, erasure, or restriction of processing.
• COPPA compliance: the Service is not directed to children under 13. Users must be at least 13 years old.
• For GDPR inquiries, please contact us at the email address below.

If you have questions, concerns, or requests regarding this Privacy Policy or your data, please contact us at:

hello@preptodone.com