Privacy Policy

Counsel(“Counsel”, “we”) helps you study for the LSAT. This policy explains what we collect, why, and the control you have over it. We keep it short and plain because you deserve to actually understand it.

What we collect

• Account details. If you create an account, we store your email address and (for email/password sign-up) a securely hashed password. If you use “Continue with Google,” we receive your name and email from Google — nothing else.
• Study data. Your practice history — questions attempted, answers, timing, weak spots, and settings — so the app can adapt to you and sync across your devices. Without an account this lives only in your browser.
• Limited technical data. To prevent abuse of our AI features we keep a short-lived, one-way hashed form of your IP address and per-day request counts. We do not store your raw IP for this purpose.
• How you found us. When you create an account we record, once, how you arrived: the site or ad that referred you, any campaign tags (UTM) in the link you clicked, the page you landed on, your coarse device/browser type, and your country — derived from your IP address, which we then discard. We never store your IP address for analytics. We use this only in aggregate, to understand which channels bring learners who succeed.
• Product usage. Which features you use and key milestones (such as your first practice question), tied to your account, so we can see what’s working and improve it. We keep the detailed events for 90 days and only long-lived summary counts after that.
• AI tutoring content (only once the AI features are turned on). When you use the AI tutor or writing coach, the question and your messages/essay are sent to our AI provider to generate a response. At launch the AI features are off, so nothing is sent.

What we do NOT do

We do not sell your data, we do not run third-party advertising or ad trackers, and we do not use your study content to train public AI models. We do not store your IP address for analytics, use fingerprinting, or record your keystrokes, mouse movement, or screen.

Who processes your data

We use a small set of reputable providers strictly to run the service:

• Supabase — accounts and database (your email, password hash, and synced study data), and the sign-in and password-reset email that goes with them.
• Google — only if you choose “Continue with Google,” for sign-in.
• Vercel — hosting and delivery of the website.
• Anthropic — the AI provider, used only when the AI features are enabled and only for the content of a tutoring request. It does not use your content to train its models.
• Stripe — payment processing, only if you buy a paid plan. Stripe handles your card details directly; we receive only a token and billing status, never your full card number.
• Resend — sends account and payment email (welcome message, payment receipts). No marketing email without your consent.

These providers process data on our behalf to run the service and may store it on servers in the United States. We don’t sell your data to anyone.

Cookies and local storage

We use only the storage needed to run Counsel: a secure sign-in session and your settings/progress saved in your browser. Your analytics-consent choice is also remembered in your browser so we can honor it, and visitors in the EU/UK are asked before any non-essential analytics runs. We don’t use advertising cookies or third-party trackers.

How we protect your data

Data is encrypted in transit, passwords are stored only as secure hashes, and access to our systems is limited. No method is perfectly secure, but we take reasonable measures to protect your information.

How long we keep it

We keep your account and study data for as long as your account exists. Abuse-prevention counters reset continuously and are not retained long-term. Detailed product-analytics events are kept for 90 days; only aggregate summary counts are kept after that. When you delete your account we remove your account and associated study data from our systems.

Your choices

• Delete your account and data any time from Settings → Your account, or by emailing us.
• Use the app without an account — your data then stays only on your device, and signing out clears it from that device.
• Ask what we hold or request a copy, correction, or export by emailing us.

Depending on where you live (for example under GDPR or the CCPA), you may have rights to access, correct, delete, export, or object to our use of your data, and to not be discriminated against for exercising them. We honor these requests — just email us and we’ll verify and respond. Because we don’t sell data or serve targeted ads, there’s nothing to opt out of on that front.

Children

Counsel is intended for prospective law students; you must be at least 16to use it (see our Terms). It is not directed to children under 13, and we don’t knowingly collect their data — if you believe a child under 13 has given us information, email us and we’ll delete it.

Contact

Questions, requests, or concerns: support@counselprep.online.