Privacy Policy

Last updated: [DATE]

Ypath ("we," "us") is a Canadian service that helps teens and their parents explore career paths and Ontario post-secondary options. This policy explains what we collect and why.

Who this is for

Ypath accounts are created and controlled by a parent or guardian. Teen profiles are added by the parent within their household account — teens do not create their own login. If you are a teen using Ypath, it's because a parent or guardian set up your profile.

What we collect

• Account info: parent/guardian name, email, phone (optional), province, preferred language.
• Teen profile info: first name, grade level. We do not require a teen's full name, date of birth, or contact info.
• Assessment responses: answers to the career-interest quiz, used to generate results.
• Usage data: pages viewed and app interactions, via Google Analytics (GA4), to understand how the app is used and improve it.
• Optional feedback: if you rate how accurate a career match felt, or tell us what happened later (applied/accepted/etc.), we store that against the relevant profile. This is always optional and skippable.
• Payment info: handled entirely by Stripe. We do not store credit card numbers ourselves — we store only that a payment was made, for which profile, and the school year it covers.

How we use it

• To generate quiz results and matched schools/scholarships.
• To manage household accounts and unlock purchased profiles.
• To improve the app (aggregated, anonymized usage patterns).
• We do not sell personal information to third parties.
• We do not use teen assessment data for advertising or ad targeting.

Where data is stored

Data is stored with Supabase (hosted on AWS infrastructure) and Stripe for payments. [CONFIRM REGION — check Supabase dashboard → Project Settings → General → Region, and state it here, e.g. "hosted in [region]." Not a legal blocker, but should be accurate.]

Sharing

We don't share personal data with third parties except the service providers needed to run Ypath (Supabase for data storage, Stripe for payments, Google Analytics for usage analytics). We don't share data with school boards or third-party advertisers.

Your rights

Parents/guardians can request a copy of their household's data, request correction, or request deletion of an account and all associated teen profiles, by contacting [CONTACT EMAIL]. We'll respond within a reasonable time and delete data within [X days] of a verified request, except where we're required to retain records (e.g., payment records for tax/accounting purposes).

Children's privacy

Ypath is designed to be used by teens under a parent's account, not directly marketed to or independently signed up by children. If you believe a child has provided us data without appropriate parental involvement, contact us at [CONTACT EMAIL] and we'll address it.

Changes to this policy

We'll update the "Last updated" date above when this changes, and note material changes on this page.

Contact

[CONTACT EMAIL]