Privacy Policy

TrySAT collects the minimum data needed to provide an adaptive SAT prep experience. We don’t sell your data. We don’t serve advertising. We use a small set of service providers (Supabase, Stripe, Anthropic, OpenAI) to run the product. You can export or delete your data at any time. Questions: privacy@trysat.com.

Account data — your email address, optionally a username, optionally a target SAT score and target test date, and authentication data (managed by Supabase Auth).

Practice data — your responses to diagnostic and practice questions, time spent per question, confidence ratings, and the topics you’ve covered. This is the core data that powers your personalized coaching.

Subscription data — if you subscribe to Pro, your billing details are processed and stored by Stripe; TrySAT receives only a customer ID and subscription status (not your card number).

Technical data — basic request metadata (IP address, browser, timestamps) for security and abuse prevention. We don’t use advertising trackers or third-party analytics SDKs.

• To provide the Service (account creation, login, diagnostics, practice, coaching);
• To personalize your study plan based on your performance;
• To send essential transactional emails (sign-in links, billing receipts, account notices);
• To process subscription payments via Stripe;
• To improve the Service in aggregate (e.g., identifying which topics are commonly missed) — but never to advertise to you;
• To respond to your support requests.

We use a small set of trusted vendors to run TrySAT. Each is bound by a data processing agreement and only receives the minimum data needed for its function.

• Supabase (database, authentication) — stores account, practice, and subscription data. Hosted in the United States.
• Stripe (payments) — processes credit-card and other payment data. Hosted in the United States.
• Anthropic (Claude API) — generates coaching messages and explanations. Your practice context (recent answers, current topic) is sent so the AI can personalize. Anthropic does not train on this data under our API terms.
• OpenAI (GPT API) — generates your study plan. Same data-minimization and no-training-on-data terms apply.
• Vercel (hosting) — runs the website and API endpoints.
• Resend / SendGrid / equivalent (transactional email) — delivers magic links and receipts.

We do not sell your personal information. We do not share your data with advertisers or data brokers. We share data with the sub-processors listed above only as needed to operate the Service.

We may disclose data if required by law, court order, or to protect the rights, property, or safety of TrySAT, our users, or the public.

If TrySAT is acquired or merged, your data may transfer to the acquiring entity, subject to this Privacy Policy or a successor with at least equivalent protections; we will notify you before any such transfer takes effect.

TrySAT uses a small number of cookies, all essential to the Service:

• Authentication cookies set by Supabase to keep you logged in;
• Session cookies for short-lived state (e.g., diagnostic in progress);
• Preference cookies for things like dark mode.

We do not currently use advertising, retargeting, or third-party analytics cookies. If we add analytics in the future, we will update this Policy and (where required) request your consent.

Regardless of where you live, you have the following rights regarding your data:

• Access — request a copy of the personal data we hold about you;
• Correction — ask us to fix data that is inaccurate or incomplete;
• Deletion — ask us to delete your account and the data associated with it;
• Portability — request an export of your data in a structured, machine-readable format;
• Objection — object to certain processing (e.g., direct marketing — note that we do not currently send marketing emails);
• Withdraw consent — where processing is based on your consent, you may withdraw it at any time.

To exercise any of these rights, email privacy@trysat.com from the address on your TrySAT account, or use the “Delete my account” and “Export my data” options in your account settings. We respond within 30 days.

If you are a California resident, the California Consumer Privacy Act and California Privacy Rights Act give you additional rights:

• The right to know the specific categories and sources of personal information we collect and the purposes for collection (described in Sections 2–5);
• The right to delete your personal information;
• The right to correct inaccurate personal information;
• The right to opt out of the “sale” or “sharing” of personal information for cross-context behavioral advertising;
• The right to limit the use of sensitive personal information;
• The right to non-discrimination for exercising any of these rights.

Do Not Sell or Share My Personal Information. TrySAT does not sell or share your personal information for cross-context behavioral advertising. There is nothing to opt out of, but if you wish to confirm this in writing, email privacy@trysat.com.

TrySAT is intended for users 13 years of age or older. We do not knowingly collect personal information from children under 13. If we learn that we have inadvertently collected such information, we will delete it promptly.

If you believe a child under 13 has provided us with personal information, contact privacy@trysat.com and we will take action to delete it.

If you are a parent or legal guardian of a TrySAT user who is between 13 and the age of majority in your jurisdiction, you may contact us to review, correct, or delete your child’s data.

We retain your account and practice data for as long as your account is active. If you delete your account, we delete or anonymize the associated data within 90 days, except where we are required by law to retain it longer (e.g., financial records for tax purposes).

We use industry-standard safeguards — encryption in transit (TLS), encryption at rest, access controls, and audit logging — to protect your data. No system is perfectly secure; if you discover a vulnerability, please report it to privacy@trysat.com.

TrySAT is operated from the United States. If you access the Service from outside the U.S., your data will be transferred to and processed in the U.S. By using the Service, you consent to this transfer. Where required by law (including for users in the European Economic Area, United Kingdom, and Switzerland), we rely on Standard Contractual Clauses to lawfully transfer data internationally.

We may update this Privacy Policy from time to time. Material changes will be announced via the Service or by email at least 14 days before they take effect. The “Last updated” date at the top reflects the most recent revision.

For privacy questions, requests, or complaints, email privacy@trysat.com.

See also: Terms of Service.