Privacy, in plain English.

Beta policy · Updated July 15, 2026

Your life story is private by default. We do not sell it, publish it, or use it for targeted advertising.

What Admit Pilot stores

When you continue with Google, Google provides basic account identity information such as your stable account identifier, email address, name, and profile image when available. When you use an email sign-in link, we receive the email address you submit and verify your control of it through a short-lived, one-time link. We use verified identity information to create and secure your Admit Pilot account. Admit Pilot also stores the academic profile, college preferences, original match estimates, shortlisted schools, stories, essay directions, drafts, review results, and application progress you choose to save.

Guests can explore College Match and draft locally without first creating a durable account record. Guest work is not synced to a student account until the student signs in and chooses to save it. A guest may optionally enter a name or email in the browser to personalize the experience or begin checkout; that information is submitted to Admit Pilot only when the guest asks us to use it for sign-in, checkout, or another clearly labeled action. If a guest asks for the optional three-tip draft preview, the selected draft is sent securely to our AI provider for that request with model-response storage disabled, and is not saved as account work. Other AI coaching and durable cloud saving require sign-in.

To improve college discovery and matching, our private product analytics store search-query length and result counts, canonical catalog college identifiers and names after you make a selection, funnel stage, broad action type, and result counts. We do not copy raw college search terms, names typed into search fields, email addresses, free-form activity descriptions, awards, optional community or support context, essays, or voice transcripts into product analytics. Events are associated with an account when signed in or a pseudonymous browser identifier when signed out. Access is limited to authorized administrators.

Sharing personal context—such as being first-generation, affordability needs, community background, or other parts of your identity—is optional. You may skip it. We use the context you choose to share to tailor guidance and surface relevant support, not to artificially raise an admission estimate. We do not share that context with a parent or purchaser by default.

Eligible creators may enable Creator Mode and use fictional Scenario Packs. Creator Mode preferences and work are stored in a separate creator session, not in the normal student workspace record. The Scenario Packs and their visible “Creator demo data” metrics are illustrative; they are not measurements of a student or predictions of admission.

When you use the contact form, we store the email address, optional name, selected topic, message, submission time, source page, status, and a one-way keyed hash of limited network information used to prevent abuse. Contact submissions are visible only to authorized administrators and are used to review and respond to the request, protect the form, and maintain an appropriate record of privacy or legal requests.

Sign-in and sessions

Google handles its sign-in screen; Admit Pilot does not receive your Google password. Email sign-in links expire after 15 minutes, work once, and are stored only as one-way hashes. After any successful sign-in, Admit Pilot uses an opaque, random session cookie marked Secure and HTTP-only. Browser code cannot read it, and only a one-way hash of the session token is stored. Sessions expire and are revoked when you sign out.

You may revoke Admit Pilot's Google access from your Google Account. Revocation prevents future authorization, but it does not automatically delete work already saved in Admit Pilot. To remove that data, request account deletion using the contact below.

How AI processing works

Text you submit for analysis is sent securely to our AI service provider to perform the feature you requested. We minimize what is sent, disable model-response storage where supported, and do not intentionally include account identifiers in AI prompts.

When you choose voice-to-text, your browser records only after you press the microphone button. After you stop, the audio is sent securely to OpenAI for transcription. Admit Pilot does not save the audio recording; only the transcript you choose to keep becomes part of your saved writing.

When you build a voice profile or run a voice pass, only the writing samples you explicitly select, the derived profile, and the current draft are sent to our AI provider for that request. Selected samples and results are stored with your private workspace so you can revisit or delete them. Admit Pilot does not send your writing to third-party AI-detector or “humanizer” services, and the profile is not used to infer sensitive identity, health, intelligence, or psychological traits.

Creator Workspace's fictional Scenario Packs do not send story text to OpenAI. If you enter your own story, it is sent to OpenAI only when you explicitly choose to build a custom scenario. Admit Pilot requests that OpenAI not store the model response (store: false), and saves the returned scenario in your private creator session so the flow can survive a refresh.

College match estimates

College Match combines the academic and preference information you provide with our college data and admissions model, using added institution-level data when available. We preserve the average admission estimate first shown to you so later application progress does not silently rewrite it. Personal fit, admission outlook, and application readiness are distinct signals; optional identity or community context does not artificially inflate the admission outlook. No estimate is a guarantee or decision from a college.

Payments and subscriptions

Stripe processes subscription checkout, payment methods, invoices, and billing changes. Admit Pilot does not receive or store your full card number. We store Stripe customer and subscription identifiers, plan status, renewal timing, and related billing metadata needed to provide paid access and customer support. If you purchase before creating an account, we also store the email and name you provide, purchase status, invitation delivery status, and encrypted single-use access credentials so the purchase can be securely claimed by the same student.

Creator outreach and access

For our creator program, authorized managers may store a creator email, name, platform and handle, outreach notes, the manager who added the record, offer history, access timing, and related Stripe customer, Promotion Code, Checkout Session, and subscription identifiers. We use this information to coordinate outreach, provide and revoke temporary Pro access, prevent duplicate offers, and maintain an operational audit trail.

Creator records and offer history are retained for audit until they are manually purged under our deletion process. Creator Offer codes are restricted operational credentials: they are not placed in URLs, analytics, or application logs. Creators may request correction or deletion using the contact below, subject to limited legal, security, fraud-prevention, or accounting retention duties.

For a parent purchase, we also store the purchaser's email, the student name and email they provide, invitation delivery status, and encrypted single-use access credentials. The purchaser can manage billing and resend the invitation, but cannot view the student's stories, drafts, feedback, or application workspace.

What we do not do

Your controls

You can edit your work, remove individual content, request an export, sign out to end the current session, revoke Google access if connected, or ask us to delete your Admit Pilot account and saved work. Collaboration links share only the material and permissions you explicitly choose.

Students and age

Admit Pilot is designed for applicants age 13 and older. Users under 18 should review privacy choices with a parent, guardian, or trusted counselor.

Contact

Send questions, access requests, correction requests, or deletion requests through the Admit Pilot contact form and choose “Privacy or data request.”