Privacy Policy

ACE Preps (“we,” “us”) is a 501(c)(3) nonprofit that provides free MCAT and DAT tutoring. This policy explains what personal information we collect, why we collect it, and the choices you have. If any part of this policy is unclear, email us at acetestpreps@gmail.com.

1. Information we collect

We collect only the information needed to operate the platform:

• Account information. Name, email address, and a password hash — provided when you create an account. Students may optionally add an academic background, target score, study start date, and struggle areas.
• Tutor application information. Tutor applicants provide MCAT or DAT scores, section scores, a bio, motivation, availability, and optionally an uploaded score report (image or PDF). Score reports are used only to verify tutor eligibility and are stored in a private storage bucket accessible only to our admin review team.
• Session and activity data. Booked and attended sessions, office-hours attendance, quiz answers and streaks, and volunteer hours logged by tutors. This data drives the platform features you see (streak tracker, progress cards, tutor-hour totals) and lets our admins review activity for quality.
• Notes. Tutors and students can write private session notes that are visible only to the two parties involved.
• Server logs. Standard request logs (IP address, user agent, timestamp, URL). Used for security and operational debugging.

We do not collect payment information from students — the platform is free. Donations go through Donorbox, which has its own privacy policy.

2. How we use your information

We use the information above to:

• Create and secure your account and let you log in.
• Match students with tutors and let both parties join the sessions they've scheduled.
• Verify tutor eligibility (score cutoffs for MCAT tutors; per-section thresholds for DAT tutors).
• Send transactional emails: email verification, password resets, session confirmations, and booking updates.
• Improve the platform through aggregated, non-identifying analytics.

We do not sell your personal information. We do not use your data for advertising.

3. Who has access to your data

Access is limited to:

• You. You can view and edit your profile from your dashboard at any time.
• The tutor or student you're working with. Only the minimum data needed to run a session: name, session details, and any private notes the two of you share.
• Our admin team. A small number of ACE Preps admins can review tutor applications, moderate accounts, and respond to support requests. Admin actions are logged.
• Service providers acting on our behalf. See section 5.

4. Cookies and local storage

We use browser local storage and cookies for a small number of essential functions:

• Keeping you logged in (Supabase auth session cookies).
• Remembering your dark-mode preference and your last-selected track (MCAT or DAT).
• Dismissing informational banners you've already seen.

We do not use third-party advertising cookies or cross-site trackers.

5. Third-party services

We rely on a small set of vetted providers to run the platform:

• Supabase — hosts our database, authentication, and file storage. All account data and session records are stored here.
• Vercel — hosts the website and serves each page.
• Google Meet— used for live video during office hours and 1-on-1 sessions. Tutors paste a meeting link when they start a session; the call itself happens on Google's infrastructure and is subject to Google's privacy policy.
• Donorbox— processes tax-deductible donations. Any card or billing information is entered on Donorbox's domain, not ours.
• Upstash — powers rate limiting to keep abusive traffic off the platform.

Each provider only receives the minimum data needed for its function.

6. Data retention

We keep account and session data for as long as your account is active. Tutor score reports are retained during your time as a tutor and deleted within a reasonable period after you leave the platform. Server logs are retained for up to 90 days. When you delete your account, we delete the personal information tied to it, though we may retain aggregated or anonymized records for operational reporting.

7. Your rights and choices

You can:

• View and edit your profile from your dashboard.
• Request a copy of the personal data we hold about you.
• Request correction or deletion of your personal data.
• Delete your account at any time by emailing acetestpreps@gmail.com.

We'll respond within 30 days.

8. Children's privacy

ACE Preps is intended for use by individuals aged 16 and older. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal information, please contact us and we will delete it.

9. Security

We use industry-standard measures to protect your data: HTTPS everywhere, hashed passwords, row-level security in our database, and access controls on our admin tools. No online service is 100% secure — you should use a strong, unique password for your account.

10. Changes to this policy

We may update this policy from time to time. Material changes will be announced on this page, and the “Last updated” date at the top will change. Continued use of the platform after an update means you accept the revised policy.

11. Contact

Privacy questions? Email us at acetestpreps@gmail.com or write to:

ACE Test Preps
13357 East Cochise Road
Scottsdale, AZ 85259
United States