Privacy Policy

Last updated: April 14, 2026

prevvu ("we," "us," or "our") is committed to protecting the privacy and security of the information you entrust to us. This policy describes what data we collect, how we use it, how we protect it, and your rights as a user.

1. Who Uses prevvu — The Parent as School Administrator

prevvu is a tool for homeschool families. In a homeschool context, the parent or legal guardian is the school: they set the curriculum, maintain academic records, and issue the student's high school transcript. prevvu provides software to do this efficiently — we are a planning and record-keeping tool, not a school and not a credentialing authority.

This means the academic data you enter into prevvu belongs to you. You created it. You are responsible for its accuracy. We store and process it on your behalf, at your direction. When you generate a transcript in prevvu, that transcript is issued by you as the homeschool administrator, not by prevvu.

2. Information We Collect

When you use prevvu, we collect:

Account information — email address, name, and password (stored encrypted)
Student profile data — student name, date of birth, grade level, graduation year, and academic plan type (for example High School or Dual Credit)
Academic records — courses, grades, credit hours, school and provider names, GPA calculations, degree plan data, transcript exports, and related academic information you enter into the app
Achievements and activities — any extracurricular, volunteer, or achievement information you choose to record
Usage data — how you interact with the app, features accessed, and session information used for security and service improvement
Payment information — processed by Stripe; prevvu does not store credit card numbers

3. How We Use Your Information

We use your information to:

Provide, operate, and improve our academic planning and transcript services
Generate transcripts, degree plan reports, and tuition savings calculations on your behalf
Deliver transcripts to institutions you explicitly authorize, including via the Parchment network
Power AI-assisted planning and import features (see Section 8 for details on what data is involved)
Communicate with you about your account, subscription, and service updates
Ensure the security and integrity of your academic records
Prevent fraud and unauthorized access

We do not sell your personal information or academic data to third parties. We do not use your academic records for advertising purposes.

4. FERPA — What It Covers and What It Doesn't in Your Situation

The Family Educational Rights and Privacy Act (FERPA), 20 U.S.C. § 1232g, governs "education records" held by educational agencies and institutions that receive federal funding. Most private homeschools do not receive federal funding and are not subject to FERPA as issuing institutions. The high school transcript you create in prevvu is your record as the homeschool administrator — FERPA does not directly govern prevvu's handling of it, because you are the school.

This does not mean your student's records are unprotected. We apply the same substantive protections regardless of FERPA's technical applicability:

Access controls — academic records are accessible only to the account holder
Authorized disclosure only — transcript data is transmitted to institutions only upon your explicit, per-recipient approval
No unauthorized sharing — we do not share your student's records with any third party without your authorization, except as required by law
Audit trail — all transcript sends are logged with timestamps so you always know what was sent, to whom, and when
Secure storage — all data is encrypted in transit and at rest

A note on dual enrollment college records: If your student is also taking courses at a college or university through dual enrollment, that institution holds its own FERPA-covered records — college transcripts, enrollment records, and grades issued by the college. Those records are the college's responsibility under FERPA. prevvu does not have access to your student's records at any postsecondary institution. prevvu only stores the information you enter into the app directly.

5. Children's Privacy and Parental Consent (COPPA)

prevvu is designed for use by parents and guardians as the account holders. All student data — including data about children under 13 — is entered by the parent or guardian, not by the student.

All accounts are created and controlled by a parent or legal guardian
By creating a prevvu account and entering your student's information, you — as the parent or guardian — are providing consent for the collection and use of that data as described in this policy
We do not solicit or knowingly collect personal information directly from children under 13
Parents may review, correct, or delete their student's data at any time through account settings or by contacting us at the address below

6. Data Storage and Security

Your data is stored in Supabase, which maintains SOC 2 Type II certification and encrypts data at rest and in transit using industry-standard protocols. All data is stored in the United States. Our application is hosted on Cloudflare, which provides additional security, DDoS protection, and content delivery.

Access to your account is protected by your credentials. We support Google OAuth as a secure login option and recommend it. If using a password, use a strong, unique one.

prevvu does not store full credit card numbers. All payment processing is handled by Stripe, which is PCI-DSS compliant.

In the event of a data breach that affects your personal information, we will notify you promptly by email as required by applicable law.

7. Data Retention

We retain your account data and academic records for as long as your account is active. If you delete your account, your data is removed from our active systems within 30 days. Backup copies may persist for up to 90 additional days before permanent deletion. Transcript send logs (recipient, date, and delivery confirmation) are retained for 7 years to support record-keeping and dispute resolution.

8. Third-Party Services

We use the following third-party services to operate prevvu. Each is contractually restricted to using your data only to provide services to prevvu — not for their own marketing, analytics, or unrelated purposes.

Supabase — Database storage and user authentication (SOC 2 Type II certified; data stored in the United States)
Stripe — Subscription billing and payment processing (PCI-DSS compliant; does not receive academic data)
Cloudflare — Application hosting, CDN, and security (does not store or process academic records beyond standard network routing)
Anthropic — AI-powered document import features (see important note below)

Important — what data goes to Anthropic: Certain optional AI features — specifically the transcript import and degree plan import tools — send the content of documents you upload (which may include student name, student ID numbers, course names, grades, and credit information) to Anthropic's API to parse and extract structured data. This only happens when you actively trigger an import. It does not happen during transcript generation, GPA calculation, degree planning, or any other standard app function. Per Anthropic's API data use policy, API inputs are not used to train their models and are not retained beyond completing the immediate request. You can review Anthropic's privacy policy at anthropic.com/privacy.

9. Transcript Delivery via Parchment

prevvu delivers electronic transcripts through the Parchment network, the same credential exchange network used by thousands of high schools, colleges, and universities nationwide. This allows homeschool families using prevvu to send transcripts electronically to colleges the same way traditional schools do.

When you request an electronic transcript send through prevvu:

You authorize each individual send — prevvu does not transmit transcripts without your explicit per-recipient approval
Your student's transcript data is transmitted to Parchment's network for delivery to the institution you select
The transmission is governed by Parchment's data handling standards, which include encryption in transit and access controls consistent with their role as a credential network operator
The receiving institution becomes a recipient of your student's academic records upon delivery and is responsible for handling those records under their own applicable policies

prevvu's participation in the Parchment network is governed by a member agreement with Parchment. We do not authorize Parchment to use your transcript data for any purpose other than delivering it to your designated recipient.

10. Your Rights

You have the right to:

Access — view all data we hold about you and your student
Correction — update or correct inaccurate information at any time within the app
Deletion — delete your account and all associated data
Export — download your academic data and transcripts in a portable format
Opt out — unsubscribe from marketing communications at any time

To exercise any of these rights, contact us at the address below.

11. Changes to This Policy

We may update this privacy policy as our services evolve. We will notify you of any material changes by email and by updating the "Last updated" date above. Continued use of prevvu after notification constitutes acceptance of the updated policy.

12. Contact Us

If you have questions about this privacy policy or your data rights, please contact us:

Privacy inquiries: [email protected]
Support: [email protected]
General: [email protected]
prevvu — Homeschool Academic Planning
Knoxville, Tennessee