Privacy Policy

Effective Date: August 5, 2026

1. Who We Are

My College Activities, LLC (“we,” “us”), operator of the platform and related services available at <mycollegeactivities.com> (the “Service”).

2. Who This Applies To and Our Two Roles

The Service is a college application planning and admission support tool for high school students, used in two ways, and our privacy role differs by path:

Institutional path (through a school). When a school provides the Service to its students, we act as a “school official” under FERPA, operating under the school’s direction and using student information only to provide the Service. The school’s agreement with us, governs that student data.

Direct path (student or family signs up independently). The student or family controls the account and the data they enter. This data is generally not a school education record under FERPA, but we protect it under this policy and applicable state student privacy laws.

3. Age (Minimum 14)

The Service requires users to be at least 14 years old. We do not knowingly collect personal information from children under 13. On the direct path we use a date of birth check (not just a checkbox) at signup; on the institutional path, the school’s roster establishes eligibility. We do not engage in targeted advertising to students and do not sell student information.

4. Information We Collect

• Account Information: name, school, and a login identifier (email and password).
• Student Profile: intended major; activities (name, role, years, hours, distinctions); honors; college list; and planned college involvement, entered by the student and/or, on the institutional path, imported from the school’s roster.
• Student-created content: scenarios the student types, drafts, essays, and notes within the Service.
• Payment information (direct subscribers): handled by our third-party payment processor; we do not store full card numbers.
• Usage and device data: limited logs needed to operate and secure the Service (e.g., timestamps, device and browser type, IP address).
• Cookies: see our cookie policy available at <mycollegeactivities.com/Cookies> for details. We use only strictly necessary cookies required to operate the Service. We do not use advertising or tracking cookies on the in-product Service.

5. How We Use Information

• To provide and operate the Service. We use your information to create and maintain your account, operate the platform, and deliver all features of the Service, including your activities list, honors list, brag sheet, resume, and college application dashboard. On the institutional path, your profile and brag sheet are made available to your assigned counselor or advisor.
• To personalize your experience. We use your profile information, including your intended major, activities, honors, and college list, to tailor the Service to your application goals and surface relevant deadlines, requirements, and prompts for the schools on your list.
• To support counselors and advisors. On the institutional path, we make student profile data, brag sheets, and counselor-side notes available to assigned counselors and advisors solely to support recommendation letter writing and college counseling. Counselors may access only the data of students assigned to them.
• To provide AI-assisted features. Where you use the AI feature, we transmit the relevant text to our third-party AI provider solely to provide the applicable feature.
• To process payments. On the direct path, we use your billing information to process subscription payments through our third-party payment processor. We do not store full payment card numbers.
• To communicate with you. We use your contact information to send account confirmations, feature updates, support responses, and legally required notices. You may opt out of non-essential communications at any time; transactional and service messages cannot be opted out of.
• To improve and develop the Service. We may use de-identified or aggregated data to analyze usage patterns, identify bugs, and improve the Service. We do not use individually identifiable student data to improve the Service except as expressly authorized by the applicable school agreement and DPA.
• To ensure security and prevent misuse. We use limited usage and device data, including login timestamps, IP addresses, and device and browser type, to monitor for unauthorized access, detect abuse, and protect the integrity of the Service and its users.
• To comply with legal obligations. We may use and disclose your information as required to comply with applicable law, respond to lawful legal process, enforce our agreements, or protect the rights, property, or safety of the Company, its users, or the public.
• What we do not do. We do not sell student data; use student data for targeted advertising or use individually identifiable student data to train, fine-tune, or benchmark any artificial intelligence or machine learning model.

6. Advertising

We may advertise the Service through social media and other channels. Any such advertising is based on general demographics and platform audience tools only; we do not use visitor data, tracking pixels, or behavioral data collected from users of the Service for advertising purposes. We do not sell or share the personal information of any user including any minors for advertising purposes.

7. How We Share Information

• School and counselors (institutional path): the student’s school can see that student’s information through the counselor dashboard.
• Service providers (subprocessors) that operate the Service under contract. A list of our key processors is provided in Attachment 1 to this Privacy Policy. A current list of subprocessors is available on request at <privacy@mycollegeactivities.com>.
• Payment processor: for subscription billing (direct path).
• Legal and safety: if required by law or to protect rights and safety.

8. Data Security

We protect data with encryption in transit and at rest, role-based access controls, and access limited to personnel who need it to operate the Service. No system is perfectly secure, but we work to protect your information and will notify affected users and schools of a breach as required by applicable law and any applicable agreement.

9. Data Retention and Deletion

Institutional path: we retain student data as specified in the school agreement and delete or return it at the school’s request or on termination within sixty (60) days if not otherwise provided, except where we must keep limited records for legal, security, or billing purposes.

Direct path: we retain data while the account is active and delete it on account closure or request within sixty (60) days, except where we must keep limited records for legal, security, or billing purposes.

10. Your Rights and Choices

• Access, correction, deletion, and export. Students and families (direct path) may access, correct, delete, or export their data by contacting <privacy@mycollegeactivities.com>. On the institutional path, students and parents exercise these rights through their school, and schools may request return or deletion of their students’ data at any time.
• State privacy rights. Depending on where you live, you may have additional rights under applicable state law. We honor applicable student privacy laws and will respond to rights requests submitted to <privacy@mycollegeactivities.com> within the time required by law.
• Communications. You can opt out of non-essential emails at any time; we may still send service and transactional messages.

11. Advertising and Your Opt-Out Choices

We do not use personal information collected from users of the Service for targeted advertising. We do not sell student data. We do not target advertisements to minors.

To the extent any advertising technology used on our public marketing site or checkout constitutes a “sale” or “sharing” of personal information under applicable state law, you may opt out by contacting <privacy@mycollegeactivities.com>.

##INLINE0## The Service does not currently respond to browser Do Not Track signals, as there is no common industry standard for such signals.

##INLINE0##: Because we do not sell or share personal information for targeted advertising purposes, receipt of a GPC signal does not change the way we process your information. If our practices change, we will update this disclosure and implement GPC opt-out functionality as required by applicable law.

12. Changes and Contact

We will post changes to this policy here and update the effective date. For material changes we will provide additional notice where required by applicable law.

Send questions or requests to:

Email: <privacy@mycollegeactivities.com>

Mail: My College Activities, LLC
ATTN: Privacy Request
3343 Peachtree Rd NE, Suite 145
PMB 2093, Atlanta, GA, 30326