Preptrack Inc.

Privacy Policy

Last Updated: February 17, 2026

1. Introduction

Preptrack Inc. (“Preptrack,” “Company,” “we,” “us,” or “our”) is committed to protecting your privacy and handling personal information transparently and responsibly.

This Privacy Policy (“Policy”) explains how we collect, use, disclose, retain, transfer, and safeguard personal information when you access or use:

• https://preptrack.com
• Any affiliated domains or subdomains
• Web or mobile applications
• AI-powered tools
• Practice exams and scoring systems
• Educational content and subscriptions

(collectively, the “Platform”).

This Policy forms part of our Terms of Use. In the event of a conflict, the Terms of Use control regarding dispute resolution and arbitration procedures.

2. Scope

This Policy applies to personal information collected:

• Directly from users
• Automatically through Platform usage
• From third-party service providers
• Through AI system interactions
• Through customer support communications

This Policy does not apply to:

• Employee or applicant data
• Fully anonymized or de-identified data
• Third-party platforms not controlled by Preptrack

PrepTrack is an independent preparation platform and is not affiliated with or endorsed by Acuity Insights or the Association of American Medical Colleges (AAMC).

3. Categories of Personal Information Collected

We collect the following categories of information:

A. Identifiers

• Name
• Email address
• Account username
• IP address
• Device identifiers

B. Commercial Information

• Subscription history
• Payment records (processed by third parties)

C. Internet / Usage Data

• Browser type
• Pages viewed
• Interaction logs
• Login timestamps
• Feature usage metrics

D. Educational & Performance Data

• Practice responses
• Essay submissions
• AI interaction prompts
• AI outputs
• Time-on-task metrics
• Performance analytics

E. Sensitive Personal Information (CPRA)

Where applicable, this may include:

• Account credentials
• Precise geolocation derived from IP (approximate only)

We do not intentionally collect biometric data, health records, or government identifiers.

4. Sources of Information

We collect personal information:

• Directly from you
• Automatically via cookies and tracking technologies
• From payment processors
• From analytics providers
• From customer support interactions

5. Data Category Matrix (Purpose & Legal Basis)

6. How We Use Personal Information

We use personal information to:

• Provide and maintain the Platform
• Process payments
• Deliver educational content
• Generate AI-powered feedback
• Improve scoring models
• Detect fraud or abuse
• Enforce our Terms
• Conduct analytics and research
• Comply with legal obligations
• Facilitate mergers or acquisitions

We do not sell personal information for monetary compensation.

We do not use personal information for automated decision-making that produces legal or similarly significant effects.

7. Artificial Intelligence Transparency

Preptrack uses AI systems to evaluate responses, generate feedback, and improve user experience.

Important disclosures:

• AI outputs may be imperfect or incomplete.
• AI tools are for educational purposes only.
• AI-generated feedback does not guarantee admissions outcomes.
• Users remain responsible for final submissions and decisions.
• AI interaction data may be used to improve internal models in aggregated or de-identified form.

We do not license identifiable user data to third-party AI model providers.

8. Cookies & Tracking Technologies

We use cookies, pixels, and local storage technologies to:

• Authenticate users
• Maintain session security
• Analyze performance
• Personalize experience
• Measure marketing effectiveness

You may control cookies via browser settings.

9. Disclosure of Personal Information

We may disclose information:

• To employees and contractors on a need-to-know basis
• To service providers (hosting, analytics, payment processing)
• To legal authorities when required
• In connection with mergers, acquisitions, or asset sales

We require service providers to use personal information only for contracted purposes.

10. Data Retention Schedule

We retain data according to the following framework:

• Active accounts: retained while account is active
• Inactive accounts: deleted or anonymized after 36 months
• Financial records: retained 7 years
• Security logs: retained 12 months
• Backup archives: overwritten within 180 days

We may retain de-identified data indefinitely.

11. Data Security

We implement administrative, technical, and physical safeguards including:

• Encrypted transmission (TLS)
• Access controls
• Limited internal access
• Security monitoring
• Incident response protocols

No system is completely secure.

12. Security Incidents

In the event of a confirmed data breach involving personal information, we will:

• Investigate promptly
• Notify affected users as required by law
• Notify regulators where required
• Take corrective remediation steps

13. International Transfers

Information may be processed in the United States or other jurisdictions.

Where required, we implement appropriate safeguards, including:

• Standard Contractual Clauses
• Contractual data protection agreements

14. Your Privacy Rights

Depending on your jurisdiction, you may have the right to:

• Access your information
• Correct inaccuracies
• Request deletion
• Restrict processing
• Withdraw consent
• Request portability
• Object to certain processing

To exercise rights, contact: info@preptrack.org

Identity verification may be required.

15. California Privacy Rights (CCPA/CPRA)

California residents have the right to:

• Know categories of information collected
• Request deletion
• Request correction
• Opt-out of sale or sharing (we do not sell personal information)
• Limit use of Sensitive Personal Information
• Non-discrimination for exercising rights

Requests may be submitted to: info@preptrack.org

16. Children’s Privacy

The Platform is intended for individuals 18 years or older.

We do not knowingly collect information from minors.

17. Enterprise & Data Processing Agreements

For institutional or enterprise customers, Preptrack may enter into a separate Data Processing Addendum (DPA) governing controller/processor obligations.

18. Dispute Resolution

Any disputes related to privacy practices are governed by the arbitration and class action waiver provisions contained in our Terms of Use.

19. Changes to This Policy

We may update this Policy periodically.

Material changes will be communicated via:

• Email notification, or
• Notice on the Platform

Continued use after updates constitutes acceptance.

20. Contact Information

Preptrack Inc.
Email: info@preptrack.org
Website: https://www.preptrack.org