HIYP is operated by HIYP, LLC ("HIYP," "we," "us," or "our"). We respect your privacy. This Privacy Policy explains what information we collect, how we use it, and the choices you have. By using HIYP you agree to the practices described here.

1. Information we collect

Account information: name, email, role (student, parent, admin), account preferences, and a record of your acceptance of our Terms & Privacy Policy (timestamp, version, IP address, and browser user-agent) kept as evidence of consent.
Student record information: the academic, activity, award, reflection, relationship, goal, and document data you choose to enter or upload.
Family linking information: invitations and parent–student relationships you create within the product.
Usage information: basic analytics such as pages visited, feature usage, and error logs to help us operate, secure, and improve the product.
Payment information: billing is processed by our third-party payment processor. We store subscription status and a customer identifier, but we do not store full card numbers on our servers.

2. How we use information

We use the information you provide to:

Operate, maintain, and secure the HIYP product.
Show students and their linked parents the records they're authorized to see.
Send transactional emails (invitations, password resets, account notifications, reminders).
Provide AI-assisted features (essay outlines, college insights, scholarship matches). Prompts and generated content are processed by our AI providers under agreements that prohibit them from using your data to train their public models.
Improve the product and develop new features using aggregated, de-identified data.
Comply with legal obligations and enforce our Terms.

We do not sell your personal information, and we do not use identifiable student records to train third-party AI models.

3. Who can see your data

Students can see all records on their own profile.
Linked parents can see the student record they are linked to. They cannot see any other family's data.
HIYP staff may access data only when strictly necessary for support, security, or legal compliance, and such access is logged in our admin audit log.
Service providers (hosting, email delivery, AI providers, payment processing, analytics) process data on our behalf under contracts that require appropriate confidentiality and security.

4. Text Messaging & Mobile Information

If you choose to receive text reminders from HIYP, we collect your mobile phone number, SMS consent status, and related messaging preferences to provide account-related notifications and reminders. Message frequency varies based on your activity and the reminders associated with your HIYP account. Message and data rates may apply.

We do not sell, rent, or share your mobile phone number or SMS opt-in consent with third parties or affiliates for marketing or promotional purposes. Mobile information may be shared with service providers solely as necessary to deliver and operate our messaging services.

You may opt out of HIYP text messages at any time by replying STOP. You may reply HELP for assistance.

5. Data security & no absolute guarantee

We use commercially reasonable administrative, technical, and organizational security measures, including encrypted transport (TLS), encrypted storage at rest, row-level security in our database, role-based access controls, and least-privilege access for our team. However, no online service is 100% secure. We cannot and do not guarantee absolute security of your information. You are responsible for keeping your account credentials confidential. If we become aware of a data incident that affects your personal information, we will notify affected users and, where required, regulators, consistent with applicable law.

6. Children's privacy (COPPA)

HIYP is intended for high school students (typically ages 14–18) and their parents or legal guardians. We do not knowingly collect personal information from children under 13 without verifiable parental consent. If a parent creates or links an account for a student under 13, the parent represents that they provide such consent. Parents may review, modify, or request deletion of their student's information at any time by contacting privacy@hiyp.app.

7. Data retention & deletion

We retain your data for as long as your account is active or as needed to provide the Service. You may request export or deletion of your account and associated records at any time by emailing privacy@hiyp.app. Some information may be retained in backups or as required by law (e.g., billing records) for a limited period after deletion.

8. Your choices & rights

You can edit or delete your records at any time from within the product.
You can request export or deletion of your account by emailing privacy@hiyp.app.
You can revoke parent access from the Settings page.
You can unsubscribe from non-essential email through the link in any such email.
Depending on where you live (e.g., California, EU/UK), you may have additional rights such as access, correction, portability, deletion, and objection. Contact us to exercise these rights.

9. Cookies & similar technologies

We use a small number of cookies and similar browser storage technologies:

Essential cookies and storage. Required to sign you in, keep your session active, and remember your cookie choice. These cannot be turned off without breaking the Service.
Analytics cookies (optional). Google Analytics 4 helps us understand which pages people visit and where they get stuck, in aggregate. These are only set after you select “Accept” in our cookie banner. Advertising and personalization signals are always denied.

We do not use advertising cookies or sell personal information. You can change your mind at any time by clearing this site’s data in your browser, which brings the cookie banner back, or by using your browser’s cookie controls.

10. Changes to this policy

We may update this Privacy Policy from time to time. We'll post the updated policy here and update the "Last updated" date above. Material changes will be announced in-product or by email and may require you to re-accept before continuing to use the Service.

11. Contact

Questions about this policy or to exercise your rights? Email privacy@hiyp.app. For security incidents, email security@hiyp.app.