Privacy Policy

Counsel(“Counsel”, “we”) helps you study for the LSAT. This policy explains what we collect, why, and the control you have over it. We keep it short and plain because you deserve to actually understand it.

What we collect

• Account details. If you create an account, we store your email address and (for email/password sign-up) a securely hashed password. If you use “Continue with Google,” we receive your name and email from Google — nothing else.
• Study data. Your practice history — questions attempted, answers, timing, weak spots, and settings — so the app can adapt to you and sync across your devices. Without an account this lives only in your browser.
• Limited technical data. To prevent abuse of our AI features we keep a short-lived, one-way hashed form of your IP address and per-day request counts. We do not store your raw IP for this purpose.
• AI tutoring content (only once the AI features are turned on). When you use the AI tutor or writing coach, the question and your messages/essay are sent to our AI provider to generate a response. At launch the AI features are off, so nothing is sent.

What we do NOT do

We do not sell your data, we do not run third-party advertising or ad trackers, and we do not use your study content to train public AI models.

Who processes your data

We use a small set of reputable providers strictly to run the service:

• Supabase — accounts and database (your email, password hash, and synced study data).
• Google — only if you choose “Continue with Google,” for sign-in.
• Vercel — hosting and delivery of the website.
• Anthropic — the AI provider, used only when the AI features are enabled and only for the content of a tutoring request. It does not use your content to train its models.
• Stripe — payment processing, only if you buy a paid plan. Stripe handles your card details directly; we receive only a token and billing status, never your full card number.
• Resend — sends transactional emails (sign-in, password reset, renewal reminders). No marketing email without your consent.

These providers process data on our behalf to run the service and may store it on servers in the United States. We don’t sell your data to anyone.

Cookies and local storage

We use only the storage needed to run Counsel: a secure sign-in session and your settings/progress saved in your browser. We don’t use advertising cookies or third-party trackers.

How we protect your data

Data is encrypted in transit, passwords are stored only as secure hashes, and access to our systems is limited. No method is perfectly secure, but we take reasonable measures to protect your information.

How long we keep it

We keep your account and study data for as long as your account exists. Abuse-prevention counters reset continuously and are not retained long-term. When you delete your account we remove your account and associated study data from our systems.

Your choices

• Delete your account and data any time from Settings → Your account, or by emailing us.
• Use the app without an account — your data then stays only on your device, and signing out clears it from that device.
• Ask what we hold or request a copy, correction, or export by emailing us.

Depending on where you live (for example under GDPR or the CCPA), you may have rights to access, correct, delete, export, or object to our use of your data, and to not be discriminated against for exercising them. We honor these requests — just email us and we’ll verify and respond. Because we don’t sell data or serve targeted ads, there’s nothing to opt out of on that front.

Children

Counsel is intended for prospective law students; you must be at least 16to use it (see our Terms). It is not directed to children under 13, and we don’t knowingly collect their data — if you believe a child under 13 has given us information, email us and we’ll delete it.

Contact

Questions, requests, or concerns: support@counselprep.online.