Your data is yours.

01 · What we collect

When you make an account, we collect what you give us: your name, email, school, graduation year, and (optionally) parent contact. When you use the product, we record what you do inside it — questions answered, words learned, drafts written, majors saved. This is the data that makes the platform useful: without it, Nova can't personalize, the planner can't plan, and the admissions odds engine can't calculate your chances.

We don't track you across the web. We don't load third-party advertising trackers. We use one product-analytics tool (PostHog, self-hosted) to count page views and feature usage; that's it.

02 · What we don't collect

• We don't sell student data, ever.
• We don't share content of your chats with Nova with parents, counselors, schools, or anyone outside our team — except to train safety filters, with all identifying information stripped first.
• We don't use your data to train public AI models. Period.
• We don't load Google Analytics, Facebook Pixel, or any ad-tech.

03 · How we use what we have

Your data powers four things: personalization (your drills, your majors, your plan), your dashboard (XP, streaks, history), your reports (what gets surfaced to you and — only if you opt in — to parents or counselors), and aggregate product improvement (we look at how thousands of students use a feature, never at how one student does).

04 · Artificial intelligence & Nova

Choose and Rise uses AI to power Nova, your study coach. Here's exactly what that means for your data:

• We use AI. Nova is powered by large language model APIs (currently Groq and Google Gemini via OpenRouter). Your messages are sent to these services to generate responses.
• What gets sent. Your chat messages and a system prompt describing Nova's role are transmitted to the AI provider. We do not send your name, email, or account details to these providers — only the conversation content needed to answer your question.
• AI providers' data practices. Groq and Google Gemini have their own privacy policies governing how they handle API inputs. We use API access only; your data is not used by these providers to train their public models under our agreements.
• No AI training on your data. We do not use your Nova chats, essays, or any personal content to train or fine-tune any AI model, ours or anyone else's.
• AI-generated content. Nova's responses are generated by AI and may occasionally be inaccurate. Always verify important information, especially college statistics and deadlines, from official sources.
• Safety. Nova is configured to redirect any messages involving self-harm, mental health crises, or emergencies to professional resources. It is not a substitute for counseling or emergency services.

05 · Third-party processors

We work with the following third-party services to operate Choose and Rise. Each handles data only as necessary to provide their service:

• Clerk — authentication and account management. Handles your email, password (hashed), and session tokens. Clerk Privacy Policy →
• Supabase — database and file storage. Stores your profile, planner data, and any files you upload. Data is encrypted at rest. Supabase Privacy Policy →
• Cloudflare — hosting, CDN, and serverless functions. All traffic routes through Cloudflare's global edge network. Cloudflare Privacy Policy →
• Google Analytics (gtag.js) — page view and session analytics. We collect aggregate usage data (pages visited, session duration). No advertising features are enabled. Google Privacy Policy →
• Groq — AI inference for Nova responses. Receives conversation content only; no personal identifiers. Groq Privacy Policy →
• Google Gemini / OpenRouter — fallback AI inference for Nova. Same data minimization as above. Google Privacy Policy →

We do not sell data to any of these providers, and none of them are permitted to use your data for their own marketing or advertising purposes.

06 · Who can see what

• You see everything you've ever produced inside Choose and Rise.
• Your parents see only what you've shared with them. Default is a weekly digest: streak, score trend, big milestones. They never see Nova chats, written drafts, or specific drill answers.
• Your counselor sees what you've shared with them, only if you connect your account to a school plan they administer.
• Your school sees aggregate data (how many students are on track, etc.) — never individual records unless you opt in.
• Our team only accesses your individual data with your written permission or when investigating a safety report.

07 · Your rights & data deletion

You can export every byte of your data, delete your account, and revoke any sharing connection from your settings page — any time, no email required. Account deletion is permanent and immediate: your profile, planner, chats, and any uploaded files are removed from our active database and from Supabase storage. We keep nothing in cold storage after you ask us to delete.

If you're under 13, a parent or guardian must consent before you sign up. We follow COPPA. If you're between 13 and 18, you control your own account; we still notify parents on signup if their email is on file.

08 · Security

Data is encrypted in transit (TLS 1.3) and at rest (AES-256). Authentication is handled by Clerk; we never see or store your password. File storage is private by default — no uploaded file is publicly accessible without an authenticated signed URL. Our infrastructure runs on Cloudflare's global edge network. If you find a security issue, write to abhinavallani02@gmail.com.

09 · Changes to this policy

If we change this policy in a way that materially affects what we do with your data, we'll email you at least 30 days before the change takes effect. We'll never quietly broaden it.

10 · Reach us

General	abhinavallani02@gmail.com
Privacy / data	abhinavallani02@gmail.com
Security report	abhinavallani02@gmail.com
Parents / schools	abhinavallani02@gmail.com