FindU Privacy Policy

2.1 Information You Provide

For Students:

• Account Information: Name, email address, date of birth, phone number
• Location: Address, city, state, zip code (used for distance-based college matching)
• Education: High school, graduation year, GPA, SAT/ACT scores, current major (if applicable)
• Preferences: Areas of interest, preferred regions, budget, priorities
• Profile: Profile photo, academic profile, career profile, interests profile
• Protected Classifications (Optional): Ethnicity, gender, household income - these are voluntary and used to provide personalized scholarship and financial aid recommendations

For Parents/Guardians:

• Account Information: Name, email address, phone number
• Profile: Profile photo
• Financial Information (Optional): Household income range (for financial aid guidance)

2.2 Information Collected Automatically

• Device Information: Device type, operating system, app version
• Usage Data: Features used, pages viewed, interactions, time spent in app
• Analytics Data: We use PostHog to understand how users interact with our Service and improve the experience
• Push Notification Tokens: To send you notifications about deadlines, matches, and messages

2.3 Information from Third Parties

• Authentication Providers: If you sign in with Apple or Google, we receive your name and email address
• High School Partners: If your school uses FindU, they may provide basic student roster information

4.1 With University Partners (Your Choice)

You control whether colleges can see your profile through the "Allow colleges to connect with me" setting:

• When enabled: Universities may access your profile to reach out about opportunities, scholarships, and admissions
• When disabled: Your profile remains private from university partners
• You can change this setting at any time

This is user-initiated sharing, not a sale of data. Universities that receive your information are contractually required to use it only for recruitment and educational purposes.

4.2 With Linked Accounts (Parent-Student Connections)

Parents and students can link their accounts to share college search progress. Here's how it works:

• Mutual Consent Required: Either party generates a 6-character linking code, and the other party must actively enter that code to complete the connection
• Codes Expire: Linking codes expire after 30 days for security
• What Linked Users See: Parents can view their child's saved schools, preferences, and application progress. Counselors can view students' college lists.
• Either Party Can Unlink: You can disconnect at any time from your settings

4.3 Service Providers

We share information with trusted service providers who help us operate FindU:

• Supabase (hosted on AWS): Database, authentication, and storage
• PostHog: Product analytics to improve the user experience
• Attio: Customer relationship management

All our service providers are SOC 2 compliant and bound by contracts requiring them to protect your data and use it only as we direct.

4.4 Aggregated/De-identified Data

We may share anonymized, aggregated statistics with partners or for research (e.g., "35% of users are interested in engineering programs"). This data cannot identify individual users.

4.5 Legal Requirements

We may disclose information when required by law, court order, or to protect the safety and rights of our users and the public.

4.6 Business Transfers

If FindU is acquired, merged, or sold, your data may transfer to the new owner under the same privacy protections described in this policy.

7.1 All Users

• Access and download your data
• Correct inaccurate information
• Delete your account and data
• Control college sharing preferences
• Manage notification settings
• Unlink from parents, students, or counselors
• Block or report other users

7.2 California Residents (CCPA/CPRA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act:

• Right to Know: You can request details about what personal information we collect, use, and disclose
• Right to Delete: You can request deletion of your personal information
• Right to Correct: You can request correction of inaccurate personal information
• Right to Opt-Out of Sale: We do not sell personal information for money
• Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights

To exercise these rights, contact us at team@joinfindu.com. We will verify your identity and respond within 45 days.

7.3 Other State Privacy Laws

Residents of Virginia, Colorado, Connecticut, Utah, and other states with comprehensive privacy laws may have similar rights. Contact us for more information about exercising your rights.