Privacy Policy

PrepToDone collects information you provide directly, as well as data generated through your use of the Service.

• Profile data: GPA, test scores, extracurricular activities, grade level, and academic history.
• Usage data: pages visited, features used, session duration, and interaction logs.
• Purchases without an account: for the Early Decision call we collect the email address you give at checkout, the school list you enter, your SAT or ACT score, and the household income bracket you select. No account is created.
• Payment data: processed securely by Paddle. PrepToDone does not store card numbers.
• Outcome feedback: application results you voluntarily share with explicit consent.

We use the information we collect to provide, maintain, and improve the Service:

• Deliver personalized Profile Strength scores, school matches, and action plans.
• Issue and re-issue the Early Decision call, and deliver its link to the email address you gave at checkout.
• Improve the accuracy of our prediction models using anonymized data — only with your consent.
• Send transactional emails (account activity, billing receipts).
• Respond to support inquiries and user feedback.
• Comply with legal obligations.

We do not sell personal information, and we do not share it with advertising networks or data brokers.

We share data only with service providers that operate the Service on our behalf — hosting and database providers, a payment processor, an email delivery provider, and analytics providers. They process data only for the purposes we specify and may not use it for their own purposes. We never receive or store your card details; payment information is submitted directly to our payment processor.

We may also disclose information where required by law or valid legal process, or in connection with a merger or sale of assets.

We take data security seriously and implement industry-standard safeguards:

• All data is encrypted in transit using TLS/HTTPS.
• Data at rest is encrypted using Supabase-managed encryption.
• Access to production data is restricted to authorized personnel only.
• We conduct regular security reviews of our infrastructure.

You have control over your data and can exercise the following rights at any time:

• Access your data: request a copy of the personal data we hold about you.
• Correct your data: update inaccurate or incomplete information via your profile.
• Delete your account: permanently delete your account and all associated data.
• Withdraw consent: opt out of anonymized data contribution at any time.
• Data portability: request your profile data in a machine-readable format.

If you bought without an account, write to us from the email address you used at checkout, or quote your document link or your Paddle receipt, and we will act on the same rights.

To exercise any of these rights, contact us at hello@preptodone.com.

We use cookies to keep you signed in and to understand how the Service is used.

• Essential — maintain your session. The Service cannot function without them.
• Analytics — Google Analytics 4 measures aggregate usage, such as which pages are viewed and how visitors arrive. Cookies: _ga, _ga_*.
• Session replay — Microsoft Clarity records interaction data such as clicks, scrolling, and cursor movement, so we can find parts of the Service that are unclear or broken. It is configured to mask text you enter, including email addresses and passwords. Cookies: _clck, _clsk.

We do not run advertising or remarketing on the Service.

You can clear or block cookies in your browser, and you may ask us to exclude your sessions from analytics by contacting us.

Analytics data is retained for up to 14 months. Account data is retained while your account is active and for a limited period after deletion, so that a deletion can be reversed if it was made in error.

For a purchase made without an account, we keep the email address you gave at checkout, and the document it unlocks, for at least 90 days from the purchase — the period in which the document can be re-issued — and until we have published in December how that season's calls scored. After that period we may replace the address in our records with a placeholder. The document stays readable at its link; once the address is gone we can no longer re-send the link by email, so keep the link.

Paddle, our Merchant of Record, keeps its own record of your purchase, including your email address, under its own privacy policy. Removing an address from our records does not remove it from Paddle's.

If you ask us to email you a link back to a preview of your Early Decision list, we keep that email address and the list inputs you entered — the schools, your test score and the income bracket you chose — for up to 90 days, so we can send you that one reminder. After that we delete them. You can stop the reminder at any time with the link in the email; no account is created.

PrepToDone is operated from the Republic of Korea, and the account information you submit is stored in a database located there. Parts of the Service are delivered from servers in the United States, and some of our providers process data in the United States and Europe.

Your information may therefore be transferred to, stored in, and accessed from these locations, which may have data protection laws that differ from those of your own country.

Wherever you are located, you may request access to, correction of, or deletion of your personal information, or ask us to stop processing it. Contact us at the address in Section 10.

The Service is not directed to children under 13, and you must be at least 13 years old to create an account. We do not knowingly collect personal information from anyone under 13; if we learn that we have, we will delete it.

If you believe a child under 13 has provided us information, contact us at the address below.

If you have questions, concerns, or requests regarding this Privacy Policy or your data, please contact us at:

hello@preptodone.com