NoSweats helps families discover elite academic programs, track deadlines, and plan the path to college. We built it privacy-first — with extra care for students. This policy explains what we collect, why, and the choices you have.
1. Information we collect
We collect only what's needed to provide the service:
Account information
- Parent/guardian account: email address, an encrypted password, and (optionally) a mobile phone number used for deadline reminders.
- Subscription status: whether you have an active plan (processed through Apple / RevenueCat — we never receive your full payment card details).
Student profile (provided by the parent/guardian)
- Student first name or nickname, grade level, school, and interests.
- Academic planning data you add: courses and grades, standardized test dates and scores, target colleges, and programs added to the plan.
- Optional profile media: a photo or a short (≤3s) video for the student's avatar.
Device & usage information
- Push token: if you enable notifications, an Expo/Apple push token so we can deliver deadline and program alerts.
- Time zone / country: used to schedule overnight research and reminders in your local time and to tailor content.
- Operational logs: basic technical logs to keep the service running and secure.
2. How we use information
- Match your student to relevant programs and build their plan.
- Track application deadlines and send reminders (push, SMS, and — on eligible plans — phone calls).
- Generate the "Story & Spike" narrative and admissions-readiness insights.
- Run the overnight research agent in your local time zone.
- Provide customer support and keep the service secure and reliable.
3. AI processing
Some features use AI to research programs and generate insights. To do this, relevant profile details (such as interests, grade level, planned programs, and target colleges) are sent to our AI provider (Anthropic) to produce results like program matches and the admissions-readiness read. Our AI provider processes this data to return results and, per its terms, does not use API inputs to train its models. We send only what's needed for the feature and never sell this data.
4. Who we share with (service providers)
We don't sell your information. We share it only with vendors who help us operate the app, under contracts that limit their use of it:
- Cloudflare — hosting, database, and media storage.
- Anthropic — AI processing for program research and insights (see §3).
- Apple & RevenueCat — subscription purchases and entitlement management.
- Twilio — SMS and phone-call reminders (only if you provide a phone number and enable them).
- Expo / Apple Push Notification service — delivering push notifications.
We may also disclose information if required by law or to protect the rights, safety, and security of our users and service.
5. Children's & students' privacy
NoSweats is designed to be set up and controlled by a parent or guardian. Student profiles are created and managed by the parent, who provides the student's information. A student may join on their own device only via an invite code issued by their parent.
The app is not directed to children under 13 for independent account creation, and we do not knowingly collect personal information directly from a child under 13 without verifiable parental consent. Where a parent provides information about their child, they consent to our processing it to provide the service. Parents can review, update, or delete their student's information at any time (see §7). If you believe a child provided us information without parental involvement, contact us and we will delete it.
6. No advertising, no data sales
We do not use third-party advertising networks, we do not use the device advertising identifier (IDFA), we do not track you across other apps or websites, and we do not sell or rent your personal information. Any "Featured" partner content shown in the app is first-party and clearly labeled.
7. Retention & deletion
We keep your information for as long as your account is active or as needed to provide the service. You can delete a student profile in the app at any time. To delete your entire account and associated data, use the in-app option or email [email protected] and we will delete it within 30 days, except where we must retain limited records to comply with legal obligations. Aggregated, de-identified data that cannot reasonably identify you may be retained.
8. Security
Passwords are stored using industry-standard hashing, data is transmitted over encrypted connections (HTTPS/TLS), and access is restricted. No method of transmission or storage is 100% secure, but we work continuously to protect your information.
9. Your rights & choices
- Access & correction: view and edit your account and student profiles in the app.
- Deletion: delete profiles or your whole account (see §7).
- Notifications: turn push, SMS, or call reminders on or off at any time.
- Regional rights: depending on where you live (e.g., under GDPR or CCPA/CPRA), you may have rights to access, correct, delete, or port your data, and to object to certain processing. Contact us to exercise them — we don't discriminate against you for doing so.
10. Changes to this policy
We may update this policy from time to time. We'll change the "Last updated" date above and, for material changes, provide additional notice in the app.
11. Contact
Questions or requests? Email us at [email protected].