Start

UpstartPrep / Legal

PrivacyPolicy

This Privacy Policy explains how UpstartPrep collects, uses, shares, retains, and protects personal information when families, students, schools, and visitors use our websites, diagnostics, reports, tutoring workflows, payment pages, and related services.

Effective date

July 13, 2026

No sale or advertising use

We do not sell student data or use student data for advertising.

Parent involvement

A student account that needs parent approval stays unavailable until a parent or guardian uses the emailed link.

Service providers

We use providers for hosting, analytics, communication, security, support, and payment processing.

Notice at collection

The table below summarizes the categories of personal information we collect, examples of each category, why we use it, how long we keep it, and the categories of providers or recipients that may receive it.

Contact and account information

Examples

  • student name
  • parent or guardian name
  • email address
  • phone number
  • login credentials
  • account role

Purposes

  • create and maintain accounts
  • start or resume diagnostic sittings
  • communicate with families
  • provide support
  • protect account access

Retention

Kept while the account is active. If a parent does not approve a pending student account, we delete the pending account and contact details within 30 days. After an account closes, we delete or de-identify ordinary account and contact data within 90 days unless a longer period below applies.

Disclosed to

  • hosting and database providers
  • email and communication providers
  • authentication and security providers
  • support tools

Registration, age, and consent records

Examples

  • account holder type
  • date of birth
  • parent or guardian email
  • parent approval status and timestamp
  • Privacy Policy acceptance
  • Terms acceptance
  • legal version accepted
  • acceptance timestamp
  • diagnostic consent and report delivery preferences

Purposes

  • confirm whether the account is student-created or parent/guardian-created
  • route a student account to parent or guardian approval when required
  • document privacy and terms acceptance
  • document who approved the account and where a report may be sent
  • support parent review, deletion, and consent requests

Retention

Date of birth and parent-approval records are kept while the account is active and for 3 years after it closes so we can document account authorization and answer privacy or safety questions. An unapproved pending account is deleted within 30 days.

Disclosed to

  • hosting and database providers
  • authentication and security providers
  • authorized UpstartPrep personnel
  • professional advisers when needed for legal compliance

Student profile and test-prep context

Examples

  • grade level
  • exam program
  • prior score range
  • target score range
  • testing timeline
  • testing accommodations selection
  • reported struggle areas

Purposes

  • recommend an appropriate diagnostic path
  • adapt timing and module setup
  • prepare parent-facing guidance
  • support tutoring and study planning

Retention

Kept while the account is active and for up to 24 months after the student's last activity so the family can return to its plan. We then delete or de-identify the profile unless the family asks us to delete it sooner or another period in this policy applies.

Disclosed to

  • hosting and database providers
  • authorized UpstartPrep personnel
  • school or tutoring partners only when applicable to the service requested

Diagnostic, practice, and performance data

Examples

  • answers
  • question views and revisits
  • answer changes
  • skipped questions
  • bookmarked questions
  • active question time
  • assessment pause and resume events
  • section progress
  • scores
  • percentiles
  • accuracy
  • pattern analysis results
  • readiness states

Purposes

  • score diagnostic and practice work
  • save progress across modules
  • generate reports and recommendations
  • identify high-yield skill gaps
  • improve instructional quality

Retention

Diagnostic responses, final answers, scores, reports, and Pattern Analysis findings are kept while the account is active and for up to 24 months after the student's last activity. Raw assessment interaction events are generally kept for up to 18 months, then deleted or de-identified. We may retain de-identified aggregate item statistics longer for curriculum and assessment quality improvement.

Disclosed to

  • hosting and database providers
  • authorized UpstartPrep instructors and operators
  • email providers when reports or private links are sent

Tutoring, class, and recording information

Examples

  • tutoring session attendance
  • student name used during a session
  • voice or image if a session is recorded
  • chat or shared workspace content
  • recording links or access controls
  • recording consent or opt-out requests

Purposes

  • provide live tutoring or class sessions
  • make recordings available for review when offered
  • limit participation when recording consent is not available
  • respond to parent or guardian recording requests

Retention

Kept only as long as needed to provide the tutoring or class service, allow family review, resolve support issues, satisfy legal obligations, or honor deletion and opt-out requests.

Disclosed to

  • authorized UpstartPrep instructors and operators
  • video conferencing or recording providers
  • session participants when recordings are shared for review
  • hosting and support providers

Progress, navigation, and activity data

Examples

  • page path
  • button or navigation events
  • resource viewed
  • timestamps
  • diagnostic resume state
  • private sitting-link access time

Purposes

  • operate the product
  • debug user experience issues
  • detect misuse
  • understand which workflows need improvement

Retention

Product activity logs are kept for up to 12 months, then deleted or de-identified unless a specific security investigation requires a longer record.

Disclosed to

  • hosting and database providers
  • analytics providers
  • security and support tools

Consultation and communication data

Examples

  • consultation request details
  • phone number
  • requested exam
  • graduation year
  • discussion topic
  • messages sent to or from UpstartPrep

Purposes

  • respond to inquiries
  • schedule consultations
  • recommend services
  • maintain support records

Retention

Consultation and ordinary support messages are kept while the request is active and for up to 24 months afterward, then deleted unless the messages become part of a billing, safety, or legal record.

Disclosed to

  • communication providers
  • scheduling providers
  • customer support tools
  • authorized UpstartPrep personnel

Payment and billing information

Examples

  • selected plan
  • subscription status
  • transaction identifier
  • coupon or discount
  • amount
  • tax
  • payment-session metadata

Purposes

  • process purchases
  • verify payment status
  • provide receipts and support
  • maintain financial records

Retention

Transaction and invoice records are kept for 7 years for accounting, tax, disputes, and fraud prevention. Payment card details are processed by the payment provider and are not stored directly by UpstartPrep.

Disclosed to

  • payment processors
  • hosting and database providers
  • accounting or professional service providers when needed

Device, browser, and analytics data

Examples

  • IP address
  • browser and device information
  • referring page
  • pages viewed
  • cookie or analytics identifiers
  • general usage events

Purposes

  • measure site performance
  • understand traffic and conversion paths
  • improve content and navigation
  • maintain security

Retention

Website analytics and device records are kept for up to 14 months, subject to shorter browser or provider controls, then deleted or aggregated.

Disclosed to

  • analytics providers
  • hosting providers
  • security and anti-abuse providers

Security, support, and compliance records

Examples

  • server logs
  • rate-limit signals
  • error details
  • support correspondence
  • private diagnostic-link tokens or token hashes
  • verification records

Purposes

  • protect the service
  • investigate bugs or abuse
  • verify requests
  • comply with legal obligations
  • enforce product terms

Retention

Routine security and verification logs are kept for up to 12 months. Records tied to an active fraud, safety, or legal matter are kept until the matter is resolved and any required record period ends.

Disclosed to

  • hosting and security providers
  • support tools
  • professional advisers
  • law enforcement or regulators when legally required

How we use personal information

  • Provide diagnostics, exams, practice tools, reports, tutoring workflows, and progress tracking.
  • Create and maintain accounts, diagnostic sittings, private reports, and support records.
  • Personalize recommendations based on exam program, timing, goals, score ranges, answers, accuracy, pacing, and pattern-analysis evidence.
  • Communicate with students, parents, guardians, schools, and service providers about the services requested.
  • Process payments, verify subscriptions, maintain business records, and respond to billing questions.
  • Debug product issues, protect the service, prevent misuse, enforce terms, and comply with legal obligations.
  • Analyze de-identified or aggregated product usage and performance trends to improve curriculum, diagnostics, and user experience.

How we share personal information

We share personal information with service providers only as needed to operate, secure, support, analyze, bill for, or improve the service.

UpstartPrep does not sell student diagnostic or performance data and does not use student diagnostic responses, scores, or pattern-analysis results for third-party targeted advertising.

  • Hosting, infrastructure, and database providers that help run the platform.
  • Analytics providers, including website analytics tools, to understand traffic and product usage.
  • Payment processors, including Stripe-powered payment workflows, to process purchases and verify payment status.
  • Email, scheduling, communication, anti-abuse, and support providers that help deliver requested services.
  • Authorized instructors, operators, school partners, or tutoring partners when they need access to provide the requested educational service.
  • Professional advisers, regulators, law enforcement, or other parties when required by law, legal process, safety, fraud prevention, or protection of rights.
  • A successor organization if UpstartPrep is involved in a merger, acquisition, financing, reorganization, or sale of business assets, subject to appropriate protections for personal information.

Students, minors, and education records

UpstartPrep serves students and families, including students under 13. We ask for a student's date of birth during account creation. When parent approval is required, the student account stays pending and cannot open a diagnostic until a parent or guardian approves it through the emailed link. Parents and guardians may email our privacy contact to review, correct, or request deletion of a student's information. We verify the requester's identity and relationship to the student before releasing or deleting account data.

  • We collect a student's date of birth once during account creation and use it to determine whether parent or guardian approval is required.
  • When approval is required, the student account remains pending and cannot open a diagnostic until the parent or guardian uses the emailed approval link.
  • The full date of birth is kept in a restricted compliance record and is not shown in ordinary staff account views.
  • Parent or guardian involvement is required before tutoring, billing, long-term saved support relationships, or recorded sessions for minors where required.
  • Parents and guardians may email our privacy contact to ask what student information we hold, request a correction, or request deletion.
  • We do not sell student data or use student contact data, diagnostic responses, scores, reports, or Pattern Analysis findings for advertising.
  • When UpstartPrep provides services through a school or institution, additional school-specific privacy terms may apply.

When UpstartPrep provides services directly to a family, this Privacy Policy governs that relationship. When services are provided under a written school, district, or institutional agreement, additional student privacy terms may apply, and we handle covered student information according to the applicable agreement and law.

Tutoring, classes, and recordings

If UpstartPrep offers recorded tutoring sessions or online classes, recordings may include a student's name, voice, image, chat, or shared workspace content. For children under 13, we require parent or guardian consent before recording voice or image. If recording consent is not available for a session that must be recorded, the student may be limited to viewing or may need a non-recorded alternative when available.

  • Recorded sessions may include student name, voice, image, chat, or shared workspace content.
  • For children under 13, parent or guardian consent is required before recording voice or image.
  • If recording consent is not available for a recorded group class, participation may be limited or a non-recorded alternative may be needed when available.
  • Recordings are intended for review by the family, instructor, authorized UpstartPrep personnel, and session participants when applicable.
  • Parents and guardians may ask to review recordings that include their child or request that recording stop or be deleted, subject to legal and operational limits.

Cookies, analytics, and similar technologies

UpstartPrep uses technologies that help the website and diagnostic workflows function, remember state, measure usage, detect security issues, and improve performance. These may include cookies, local storage, analytics identifiers, server logs, and provider-side telemetry.

The site currently uses Google Analytics on public pages and may log product activity events such as navigation, resources viewed, and timestamps. Browser or device controls may let you block cookies, clear storage, or limit analytics identifiers. Some essential product features may not work correctly if required storage is disabled.

How long we keep student information

We keep each category only for the period needed to provide the service and maintain the records described below. The notice at collection above gives the period for every category.

  • Pending account: deleted within 30 days if a parent or guardian does not approve it.
  • Ordinary closed-account and contact data: deleted or de-identified within 90 days.
  • Student profiles, diagnostic responses, scores, pacing data, reports, and Pattern Analysis findings: kept while the account is active and for up to 24 months after the student's last activity.
  • Date-of-birth and parent-approval records: kept while the account is active and for 3 years after closure.
  • Routine product and security logs: kept for up to 12 months. Website analytics: kept for up to 14 months.
  • Consultation and ordinary support messages: kept for up to 24 months after the request closes. Transaction and invoice records: kept for 7 years.

A parent or guardian may email info@upstartlearn.com with the student's account email and the request. We verify the requester's identity and relationship to the student, then confirm what was deleted or explain any record we must keep and when it will be removed.

Email info@upstartlearn.com to start a parent or guardian access or deletion request.

Your choices and rights

Access

You may ask what personal information we maintain about you or your student.

Correction

You may ask us to correct inaccurate contact, account, student profile, or service records.

Deletion

You may ask us to delete personal information, subject to records we need for security, legal compliance, billing, dispute resolution, or completing requested services.

Marketing opt-out

You may opt out of promotional communications. Service, billing, security, and diagnostic-report messages may still be sent when needed.

Analytics controls

You may use browser controls, device settings, and available provider opt-out tools to limit cookies and analytics identifiers. You may also contact us about privacy choices.

California privacy rights

California residents may have rights to know, access, correct, delete, limit certain uses of sensitive personal information, and opt out of sale or sharing where those rights apply.

Follow-up

If you disagree with our response to a privacy request, you may reply to the same contact channel and ask us to review it again.

To submit a privacy request, email info@upstartlearn.com. We may need to verify your identity or authority to act for a student before completing a request.

Security and retention

We use administrative, technical, and organizational safeguards designed to protect personal information. Examples include:

  • access controls for systems that store student and account information
  • private diagnostic sitting links backed by server-side token validation
  • rate limiting and abuse controls on public diagnostic start endpoints
  • restricted operational access for authorized personnel
  • provider-based protections for payment processing and hosted infrastructure

No website, network, or storage system can be guaranteed to be completely secure. We work to protect personal information, but families should also protect account credentials and private diagnostic links.

The specific retention periods are listed in the notice at collection and the retention section above.

Changes to this policy

We may update this Privacy Policy as the product, vendors, or legal requirements change. The effective date above shows when this version became active. Material updates will be posted on this page, and we may provide additional notice when appropriate.

Contact us

Privacy requests and questions can be sent to info@upstartlearn.com. You may also call (865) 234-4463.

Return to UpstartPrep.

Historic red-brick campus and clock tower framed by mature trees.

Upstart

0

You

0

One quick rally?

First to five. You’re on the right paddle.

Computer 0, visitor 0.
Privacy Policy | UpstartPrep - UpstartPrep