Privacy Policy

Who we are

PrepPath is an independent AI consultant that helps families think through the prep school decision. It's operated by Ryan Vohra, a current boarding school student, not a company with a legal or compliance department. We are not affiliated with, endorsed by, or connected to any school. Questions about this policy or your data: support@preppath.com.

What we collect — including about your child

Here's the full list. Nothing beyond this:

• Account info: your email address and password.
• Your child's profile: first name, grade, a maximum tuition budget, boarding-or-day preference, strengths, interests, and any freeform notes you choose to add. This is information about your child that you provide — we don't collect it from your child directly, and we don't collect it from any other source.
• Conversations with Claire: the full text of what you type to Claire and what Claire responds, stored so your conversation has continuity and so you can come back to it later.
• Payment details, if you subscribe: handled entirely by Stripe. PrepPath never sees or stores your card number.

How we use it — and what we don't do with it

Everything we collect exists for one purpose: generating your family's school match and Success Roadmap. Your child's profile shapes which schools Claire discusses with you and what goes into the recap PDF. Your conversation history lets Claire pick up where you left off instead of starting over each time. Your email is used for account and billing messages — not marketing lists you haven't opted into.

• We do not use your data to train AI models.
• We do not share your data with schools, admissions offices, or any third party for their own purposes.
• We do not use your data for advertising, and we don't sell it to ad networks or data brokers.

Conversations are processed by an AI model

When you talk to Claire, your messages are sent to a third-party AI provider (Anthropic's Claude models, with a fallback provider for reliability) to generate the response. That means your conversation content leaves PrepPath's own servers and is processed by that provider's systems in order to produce Claire's reply — the same way any AI chat product works. We don't control those providers' infrastructure, but we don't grant them rights to use your conversations beyond generating that response, and we do not use your conversations to train any model, ours or theirs.

We are not a school, and FERPA does not apply here

PrepPath is not a school, and we are not an "educational agency or institution" under FERPA (the Family Educational Rights and Privacy Act). FERPA governs education records held by schools — it does not extend to an independent tool like this one, even though the information you share is about your child's education decision. We're telling you this directly because it matters: the legal protections and procedures that apply to your child's actual school records are a different framework than what protects the information you give us here. What protects your information here is this policy, plus the technical and access controls described below.

Children's privacy

PrepPath is built for parents and guardians to use, not for children to use directly. The information we hold about your child is what you, the parent or guardian, chose to enter — we do not collect anything directly from a child, and we do not knowingly collect personal information directly from a child under 13. If you believe a child has provided us information directly, contact us and we'll delete it right away.

Data storage and security

Data is stored with Supabase and encrypted in transit over HTTPS. Row-level security means your family's records are only reachable through your own logged-in account — there's no separate admin view where staff casually browse family data outside of what's needed to operate the service or respond to a support request.

How long we keep your data, and how to delete it

We keep your data for as long as your account is active — that's what lets Claire remember your family's context between visits. We don't run any automatic bulk-deletion after a period of inactivity today, so an untouched account isn't automatically purged; deletion happens when you ask for it. When you request deletion, we complete it within 30 days, and it's permanent: your account, your child's profile, and your conversation history are removed from our systems (Stripe retains payment records separately, as required by law for tax and financial reporting).

Cookies

We use cookies only to keep you logged in between visits. No advertising cookies, no cross-site tracking, no third-party analytics that follow you around the web.

Your rights

You can ask to see the data we hold about you, correct anything inaccurate, export it, or delete it, at any time. Email support@preppath.com and we'll respond within 30 days.

Changes to this policy

If this policy changes in a way that matters, we'll email you or show a notice in the app rather than silently updating the date at the top.

Contact

Questions about any of this: support@preppath.com.