Introduction
This Privacy Policy describes how Blueprint collects, uses, and protects your personal information when you use our platform and services.
Blueprint is designed for high school students, including those under 18. We take the privacy of young users seriously and comply with applicable laws governing student data.
Information We Collect
We collect the following types of information:
Account information
- Name, email address, and password
- School name and graduation year
- Account role (student, parent, or counselor)
Academic information
- GPA, test scores, and intended major
- Extracurricular activities and achievements
- Essays and application materials you enter
Usage data
- Pages visited and features used
- Device type, browser, and operating system
- IP address and general location (country/region)
AI interaction data
- Prompts sent to AI features (Essay Coach, College Matchmaker, Activity Studio)
- AI-generated responses and suggestions
How We Use Your Information
- Provide and improve the Blueprint platform
- Personalize college recommendations and essay feedback
- Track your application deadlines and progress
- Communicate service updates, tips, and support responses
- Generate aggregated, anonymized analytics to improve our service
AI and Your Data
Blueprint uses AI to power features like Essay Coach, College Matchmaker, and Activity Studio. These features process your academic data and written content to generate personalized recommendations and feedback.
- We do not sell your data to train third-party AI models.
- Your data is processed solely to deliver and improve Blueprint’s features.
- AI-generated suggestions are advisory. They are not guarantees of admission outcomes.
Data Sharing
We do not sell your personal information. We may share data in these limited circumstances:
- Counselors: If your school uses Blueprint, your assigned counselor can view your progress data.
- Parents: If you grant a parent access, they can view your progress dashboard.
- Service providers: We use third-party services for hosting, AI processing, and email delivery. These providers operate under data processing agreements.
- Legal requirements: We may disclose data if required by law or to protect the safety of our users.
- Business transfers: If Blueprint is acquired, merged, or sells assets, your data may be transferred as part of that transaction. We will notify you before your data becomes subject to a different privacy policy.
FERPA Compliance
When Blueprint is used by schools, student education records are protected under the Family Educational Rights and Privacy Act (FERPA).
- Blueprint acts as a school official with a legitimate educational interest, performing services on behalf of the school under its direct control.
- Schools control access to student education records within Blueprint.
- We use education records only for the authorized purposes specified by the school and do not redisclose student data to third parties without consent.
- Parents and eligible students (18 or older) may request to review or delete education records.
- Schools and districts may request a Data Processing Agreement (DPA) by contacting us at support@applywithblueprint.com. We provide standard DPAs that cover data handling, security measures, and breach notification procedures.
Data Security
Your data is stored and processed in the United States. We take reasonable measures to protect it:
- 256-bit encryption for data in transit (TLS) and at rest
- Role-based access controls and audit logging
- Regular security assessments and vulnerability testing
No system is 100% secure. If we discover a data breach that affects your information, we will notify affected users within 72 hours and report to applicable authorities as required by law.
Data Retention and Deletion
- Account data is retained while your account is active.
- You can request deletion of your account and data at any time.
- Deleted data is purged within 30 days, except where we are required by law to retain it.
- For school-administered accounts, data retention follows the school’s policies.
Children’s Privacy
Blueprint is designed for high school students, typically ages 14 to 18. We do not knowingly collect personal information from children under 13 without parental or school consent.
School-administered accounts may include students under 13. In those cases, the school is responsible for obtaining necessary parental consent under COPPA (Children’s Online Privacy Protection Act).
If we learn that we have collected personal information from a child under 13 without proper consent, we will delete that information promptly.
Your Rights
Depending on your location, you may have the right to:
- Access the personal data we hold about you
- Correct inaccurate or incomplete data
- Request deletion of your data
- Export your data in a portable format
- Opt out of marketing communications
To exercise any of these rights, contact us at support@applywithblueprint.com.
California Privacy Rights (CCPA)
If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):
- Right to know: You may request details about the categories and specific pieces of personal information we have collected about you, the sources of that information, and the purposes for which it is used.
- Right to delete: You may request deletion of your personal information, subject to certain legal exceptions.
- Right to opt out of sale: We do not sell personal information as defined by the CCPA. No opt-out is necessary.
- Right to non-discrimination: We will not discriminate against you for exercising any of your CCPA rights.
To submit a verified consumer request, contact us at support@applywithblueprint.com. We will verify your identity before processing your request and respond within 45 days.
State Student Privacy Laws
Blueprint complies with applicable state student privacy laws, including but not limited to:
- SOPIPA (California): We do not use student data for non-educational purposes, targeted advertising, or building advertising profiles. Student information is used solely to provide and improve the Blueprint platform.
- State-specific requirements: Many states have enacted student privacy laws that impose obligations on educational technology providers. We design our data practices to meet the most protective standards across all jurisdictions we serve.
If your state requires specific data privacy agreements or disclosures, contact us at support@applywithblueprint.com and we will work with your institution to meet those requirements.
Changes to This Policy
We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email or through an in-app notice. Continued use of Blueprint after changes take effect constitutes your acceptance of the updated policy.
Contact Us
If you have questions about this Privacy Policy or how we handle your data, reach out to us at support@applywithblueprint.com.
Have questions about how we protect your data? Email us at support@applywithblueprint.com