LEGAL

Privacy Policy

Last updated: May 22, 2026

This Privacy Policy explains what personal data admit (“admit”, “we”, “us”) collects when you use admit.kz and the admit SAT preparation platform (the “Service”), how we use it, who we share it with, and what your rights are.

1. Data we collect

We collect only what we need to run the Service:

  • Account data: name, email address, phone number, country. Collected during the onboarding quiz and when you sign in.
  • Onboarding answers: target SAT score, current score, test date, study schedule, dream school, and the qualitative answers you provide while building your plan.
  • Practice data: answers you submit to practice questions, time spent, accuracy, and notes you write in your journal.
  • Payment data: processed by Stripe. We never see your full card number; we only receive an internal customer and subscription identifier from Stripe.
  • Technical data: IP address, browser, device type, referring URL, and marketing parameters (utm_*, fbclid, gclid) when you arrive at the Service.

2. How we use your data

  • To create and authenticate your account;
  • To personalize your study plan based on your quiz answers and practice history;
  • To process payments and manage your subscription;
  • To send transactional emails (sign-in links, payment receipts, important changes);
  • To improve the Service through aggregated analytics;
  • To respond to support requests you send us.

3. Third parties we share data with

admit uses a small number of carefully selected service providers, each bound by a data processing agreement:

  • Stripe — payment processing. Stripe receives your card details directly; admit never stores them. Subject to Stripe's Privacy Policy.
  • Supabase — authentication and database hosting. Supabase Privacy.
  • Vercel — application hosting and content delivery. Vercel Privacy.
  • PostHog — anonymous product analytics. We use this to understand which parts of the Service work for students and which need improvement. PostHog Privacy.
  • Sentry — error monitoring. Helps us notice and fix bugs. Sentry Privacy.
  • Resend — transactional email delivery. Resend Privacy.
  • Cloudflare R2 — static asset hosting (images, PDFs).

We do not sell your personal data and we do not share it with advertising networks beyond the marketing-parameter pass-throughs you arrive with.

4. Cookies and tracking

We use a small number of first-party cookies for authentication and a single anonymous analytics identifier (PostHog). We do not use third-party advertising cookies on the Service itself. The Service stores some preferences and progress in your browser's localStorage to make the experience faster — you can clear it at any time through your browser settings.

5. Data retention

We keep your account data for as long as your account is active. If you delete your account, we delete personal data within 30 days, except for records we are legally required to keep (for example, payment records for tax purposes).

6. Your rights

You can, at any time:

  • Access the data we have about you — email support@admit.kz;
  • Correct inaccurate data — most fields are editable from your account;
  • Delete your account — email support@admit.kz with the subject “Delete my account”;
  • Export your data — we will provide a JSON export within 14 days;
  • Object to processing or withdraw consent — same channel.

7. Children

The Service is intended for students preparing for the SAT, who are typically 14 and older. We do not knowingly collect data from children under 13. If you believe a child under 13 has provided us with personal data, email support@admit.kz and we will delete it.

8. Security

We protect your data with industry-standard practices: TLS for all traffic, encrypted storage at rest, row-level security on user data in Supabase, HMAC-verified webhooks for payment events, and rate-limited authentication endpoints. No system is perfectly secure, but we work to keep yours private.

9. International transfers

Some of our service providers (Stripe, Vercel, PostHog, Sentry, Resend) operate infrastructure in the United States and the European Union. By using the Service you consent to the transfer of your data to those jurisdictions.

10. Changes to this policy

We may update this Privacy Policy from time to time. The current version is always available at admit.kz/privacy and we will notify users of material changes by email.

11. Contact

Questions, requests, or complaints about how we handle your data? support@admit.kz.