Privacy Policy

Last updated: 25 October 2026

Admita helps students plan their university applications. Most people who use it are teenagers, so we collect as little as we can and explain plainly what we do with it. This policy covers the Admita website and the Admita app for iPhone and Android, and everyone who uses them: students, parents and guardians, and counselors.

This policy applies everywhere. If you live in Mongolia, South Korea, Kazakhstan, the European Economic Area or the United Kingdom, or the United States, please also read the supplement for where you live at the end; it adds to this policy and wins if the two differ.

Your information is stored outside your country. Admita is operated by a company in the United States, our team works from Mongolia, our servers are in Singapore, and some of the services we use are in other countries, listed under “Who receives your information”. Their laws may protect personal information less than the laws where you live. By creating an account you agree to this.

1. Who we are

Admita is operated by Core Education For All, Inc., a Delaware corporation in the United States (“Admita”, “we”, “us”), and built by the Core Tech team in Mongolia. Core Education For All, Inc. decides how your personal information is used and is responsible for it.

Privacy contact: our privacy team at support@admita.app.

2. At a glance

• We don’t show ads, and we don’t sell, rent or trade your information.
• Admita is for students aged 13 and over. If you are under 18, a parent or guardian must agree to your use of Admita.
• AI features are off until you agree; if you are under 18, until a parent says yes. AI providers don’t keep your text or train on it.
• Parents never see your essays, documents, journal, check-ins or messages.
• You can see, download and delete your information in Settings at any time.

3. What we collect

Your account

• With email: your name, email address and password. We store the password only as a one-way hash (bcrypt); nobody at Admita can read it.
• With Google or Apple: your name, email address and an account id from the provider, and from Google your profile picture. With Apple’s “Hide My Email” we receive a private relay address. We never receive your Google or Apple password.
• Two-factor authentication: if you turn it on, an encrypted secret for your authenticator app.

Your profile

Your school year, graduation year, country, time zone, language, planned start term, study destinations, subjects and intended major, GPA, SAT, English and other test scores and dates, goals, daily study goal, yearly study budget and whether you are applying for financial aid. If you choose to add them: your date of birth and a parent or guardian’s email address.

We use your date of birth only to know whether you are under 18. Counselors see only “under 18”, never the date, and it is never sent to an AI model. If you don’t add one, we treat you as under 18 for telling parents about counseling.

What you add while using Admita

• Universities on your list, rounds, deadlines, results, checklists, to-dos, notes and calendar dates.
• Essays, earlier versions and outlines, and brainstorm and Idea Studio boards.
• How you wrote an essay in the Admita editor: each edit (typed, pasted or deleted) and when, so you can replay it and show the work is your own. Only you can see it.
• Activities, recommenders (name, role, subject) and saved scholarships.
• Documents you upload, such as transcripts, certificates or passport scans, and documents you translate.
• Mood check-ins and journal entries (see “Sensitive information”).
• Test Prep answers, time spent, scores, self-ratings and, if you agree, spoken answers.
• Lesson progress, quiz answers, private lesson notes and questions you ask.
• University reviews you write, and reviews you report or people you block.
• Messages and attachments with your counselor, meetings you book and ratings you give.
• AI university searches you type, and reports you make about AI answers.

Connected apps, if you turn them on

• University email forwarding: a personal forwarding address. A forwarded email is read once to pull out dates and next steps; we keep what we pulled out, not the email.
• Telegram: your Telegram chat id and your messages to the Admita bot.
• Calendar feed: a private link that shows your deadlines in a calendar app. Anyone with the link can see your deadlines; “New link” turns the old one off.
• Push notifications: a push token for your device.

Payments

If you buy Admita Plus or the Season Pass, Stripe takes the payment on its own secure page. We receive your plan, its status and renewal date, the card’s brand, last four digits, expiry and issuing country. We never see your full card number. Prices depend on the country in your profile or, if there isn’t one, the country your connection comes from. If you are under 18, ask a parent or guardian before you buy.

Referrals

If you invite a friend or join through an invite, we record who invited whom and any reward. To stop abuse, we check whether accounts share an IP address, a browser or a device, and store only scrambled one-way versions (hashes) of these signals.

Parents and guardians

Your email address (given by the student), your answers to consent requests and when you gave them, and, if you have an account, the students you are linked to.

Counselors

Name, photo, bio, tagline, time zone, the countries, universities, exams and languages you know, education, test scores, experience, an optional LinkedIn link, availability, meeting link and session price, documents you upload (such as certificates or ID), your references’ contact details, private notes you write about students, and your payout details (bank name, account holder and account number, or a PayPal or Wise email). Account numbers are encrypted; only the last four characters are ever shown. We contact your references only to check your application; please tell them first.

Technical information

Our servers see your IP address and the time of each request. We use it to keep Admita secure (for example to limit sign-in attempts), to work out your approximate country on our own servers, and for the referral checks above. When an Admita administrator acts on an account, a security record keeps who did what and the IP address they used. When you’re signed in we also record when you last used Admita and on which days and devices.

4. Sensitive information

Some information needs extra care. All of it is optional.

• Check-ins and journal are about how you feel. Parents, counselors and AI models never see them. The Agent Room makes fewer suggestions on a day your check-in says you’re stressed or overwhelmed; for that, it tells the AI only that today is a hard day, never your check-in or journal. A weekly parent summary, if you turn it on, shows only a general mood, and you approve each one before it is sent.
• Counselor messages are private. Our team reads a conversation only if someone reports it.
• ID documents contain ID numbers. Upload one only when a university asks for it, and cover any national ID number (such as a Korean resident registration number) first.
• Voice recordings are kept for you to listen back to. We don’t create voiceprints or recognise you by your voice.

5. How we use it

• To run your account and plan: schools, checklists, deadlines, essays, documents, lessons, Test Prep, counseling, reminders and inbox messages.
• To run the AI features and checks you choose to use (sections 6 and 7).
• To tell parents of students under 18 when a counselor is assigned or a meeting is booked, and to send parent consent requests.
• To take payments and keep billing and tax records.
• To keep Admita safe: security, stopping abuse and referral fraud, reviewing reports, protecting students.
• To find and fix errors and to understand, with your permission, how Admita is used.
• To meet legal obligations.

We don’t show ads, and we never use your essays, documents, check-ins, journal, recordings or messages for advertising or to train AI models.

6. AI features

Before you use an AI feature for the first time, we ask for your OK. If you are under 18, we email a parent or guardian a single-use link instead, and AI features stay off until they say yes. You can withdraw at any time in Settings. If an AI answer looks wrong or harmful, report it from the answer; our team reviews reports.

We send a model only what the feature needs, through OpenRouter, routed only to providers that don’t keep the data (zero data retention) and don’t train on it. We never send your name, email address, date of birth, guardians, journal or check-ins.

• Essay feedback, essay review and Idea Studio (Tami): the essay or notes you ask about and the essay prompt.
• Activity brainstorm: your board’s ideas, school year, country and intended major.
• Readiness check: up to 700 words of each essay and its prompt; every other check runs without AI.
• Test Prep writing feedback: your written answer and the task.
• Lesson questions: your question and the lesson’s material. Questions Tami can’t answer go to our staff without your name.
• Document translation: the text of the document you upload. Translations are not certified.
• AI university search: only what you type.
• Agent Room: your universities, checklist items, deadlines and study tasks; essay text for the essay coach (essays of at least 100 words that changed, at most three a day); and, on a hard day, only that fact (section 4). Nothing an agent suggests changes your plan until you accept it.

AI can be wrong. Use your own judgement and never submit text you didn’t write.

7. Essay integrity check and web search

• Other Admita essays: the integrity check compares your essay with other essays on Admita. A match shows only your own sentence and “Another Admita student’s essay”, never who wrote it or their text. Your essay is compared the same way when others run the check.
• AI-writing detector: if you have agreed to AI features, your essay text is sent to Sapling to estimate how AI-written it reads.
• The web: short sentences from your essay are searched on Brave Search.
• “Find real programs”: a search built from your activity idea and your city goes to Tavily and Exa; we save only the public pages found.

Searches never include your name or contact details.

8. Cookies and analytics

The first time you visit, we ask which cookies Admita may use. Strictly necessary ones (sign-in, security, your cookie choice) are always on. Analytics and preferences are off unless you turn them on.

• Analytics: pages visited (without anything personal in the address), features used, sign-ups and logins, device and browser type, approximate country, and when. It stays on Admita’s own servers and is deleted after 13 months. We don’t store your IP address for it.
• Preferences: remembers light or dark mode.

Change your choice any time from “Cookie settings” at the bottom of every page or in Settings. The full list is in our Cookie Policy.

9. The mobile app

• Local reminders are scheduled and shown on your phone; we don’t send them.
• Push notifications go through Expo and Apple or Google, and hold only a short message.
• Add to calendar opens your phone’s own new-event form (write-only on iPhone). Admita never reads your calendar.
• Widgets keep a small summary on your phone; it isn’t sent to us, but anyone who sees your screen can see it.
• Crash reports go to Sentry with technical details, the screen and a random account id — no screenshots, typed text, name or email.

The app asks for each permission only when a feature needs it, doesn’t track you across other companies’ apps or websites, and has no ads.

10. Speaking recordings

Test Prep speaking practice can record your spoken answers so you can listen back and rate yourself. We ask your permission first. Recordings stay in private storage, are never sent to an AI model, and are deleted after 30 days, or at once if you withdraw permission.

11. Counselors and meetings

• Checked first: every counselor applies, gives references, is checked by our team and agrees to our code of conduct.
• What they see: your plan, universities, checklists, deadlines, tasks and the essays you choose (per essay: comment, suggest or edit). Never your journal, check-ins, documents, guardians, payments or AI feedback.
• Changes a counselor makes are recorded; you can see and undo them.
• Chat is deleted two years after the counseling ends.
• Meetings use a video link your counselor chooses or Jitsi Meet. Admita doesn’t record them.
• Parents of students under 18 are emailed when a counselor is assigned and when a meeting is booked: the time and the counselor’s name only.

12. Parents and guardians

A student can add a parent or guardian’s email. We then email the parent a single-use link to agree or decline, and we ask again before turning on AI features for a student under 18. The weekly parent summary, if turned on, holds overall progress, the next deadline and a general mood, and the student approves each one first. Essays, documents, journal, check-ins, messages and reviews are never shared with parents.

13. University reviews

Before your first review you accept the review guidelines in our Terms of Service. Others see your rating, what you like, what to watch out for, how you know the university and the month, never your name or photo. Our team checks every review before it appears. We keep which account wrote it so you can edit or delete it and so we can act on reports. Reports and blocks are private.

14. Who receives your information

We don’t sell your information. We share it only with the service providers below, which process it only to provide their service to us, and in the cases listed after the table.

Information goes to a provider over an encrypted connection when you use the feature that needs it, and the provider keeps it only as long as its service requires. We also share information:

• with your counselor and your parents or guardians, as described in sections 11 and 12;
• with professional advisers (lawyers, auditors) where they need it to advise us;
• with authorities when the law requires it, or to protect a student from serious harm;
• with a new owner if Core Education For All, Inc. is merged or sold. We will tell you before that happens.

DB-IP supplies the country list we use on our own servers; nothing is sent to it (IP Geolocation by DB-IP, CC BY 4.0).

15. How long we keep it

16. Your choices and rights

Wherever you live, you can:

• See and download your information: Settings → Privacy & account → See my data.
• Correct it in the app, or by writing to us.
• Delete your account: Settings → Privacy & account → Delete account on the website, or Me → Delete account in the app. This cancels any paid plan and deletes your account, plan, essays, check-ins, journal, uploaded files and recordings.
• Withdraw a permission (AI, recordings, cookies, notifications, connected apps) in Settings. What we did before stays lawful.
• Object to how we use your information, or ask us to limit it.

Write to support@admita.app from the email on your account. We may ask you to confirm who you are. We reply within 30 days, sooner where your supplement says so, and never charge. We won’t treat you differently for using these rights.

17. Children and teenagers

Admita is for students aged 13 and over. It is not for children under 13, or for anyone too young where they live to use it without a parent’s consent unless that parent has agreed. When you sign up you confirm that, if you are under 18, a parent or guardian agrees too. If we learn we have information from a child under 13, we delete it. A parent or guardian can ask to see, correct or delete their child’s information, or withdraw consent, at support@admita.app; we check the request comes from the parent first.

18. Security

All connections are encrypted (HTTPS). Passwords are hashed, payout account numbers and two-factor secrets are encrypted, and files and recordings sit in private storage that opens only through short-lived links. Counselor access is checked on every request and ends with the assignment. Administrators need two-factor authentication, and their actions are logged. If a breach affects your information, we will tell you and the authorities that require it without undue delay, with what happened and what you can do.

19. Changes to this policy

We post changes on this page and update the date above. If a change is important, we tell you in the app or by email before it takes effect, and ask again where the law requires.

20. Contact

Core Education For All, Inc. (Delaware, United States) · Team based in Mongolia · support@admita.app

Supplements for where you live

These add to the policy above for people in each place, and win if they differ from it.

Mongolia

• Law: the Law on Personal Data Protection (2021). Core Education For All, Inc. is the controller; our team works from Mongolia.
• Consent: you give it electronically when you create an account, including to storing and processing your information outside Mongolia (section 14). AI features, recordings and cookies have their own consent. You can withdraw any consent in Settings or by writing to us; without the account consent, we can’t provide Admita and will delete your account.
• Under 18: your parent or legal representative must consent to your use of Admita.
• Sensitive information under Mongolian law includes health information (check-ins, journal) and correspondence (counselor messages). We protect it as section 4 describes.
• Complaints: to us first if you can, or to the National Human Rights Commission of Mongolia.

South Korea (대한민국)

• Law: the Personal Information Protection Act (PIPA).
• Under 14: we need your legal representative’s consent before we process your information.
• Overseas transfer: your information is transferred to the providers, countries and for the purposes in section 14, over the network, at the time you use each feature. Each provider keeps it only as long as its service needs, or the period in section 15. You can refuse by not creating an account, or by turning off optional features (AI, connected apps, notifications); Admita can’t work without its servers.
• Destruction: when information is no longer needed, we delete files permanently from storage and records from the database so they can’t be recovered.
• Your rights: access, correction, deletion and suspension of processing. We answer within 10 days. A legal representative may act for you.
• Privacy contact: our privacy team, support@admita.app.
• Breaches: we tell you and the Personal Information Protection Commission within 72 hours of learning of a breach that requires it.
• Help and complaints: Personal Information Infringement Report Center (privacy.kisa.or.kr, call 118); Personal Information Dispute Mediation Committee (kopico.go.kr, 1833-6972); Personal Information Protection Commission (pipc.go.kr).

Kazakhstan (Қазақстан)

• Law: the Law on Personal Data and Their Protection.
• Consent: you give it electronically when you create an account. You can withdraw it in Settings or by writing to us.
• Under 18: your parent or legal representative must consent to your use of Admita.
• Your rights: to know that we hold your information and see it, and to have it corrected, blocked or deleted.
• Complaints: to us, or to the authorized body for personal data protection in Kazakhstan.

European Economic Area and United Kingdom

• Controller: Core Education For All, Inc. (section 1).
• Legal bases: providing the service you asked for (your account, plan, counseling, payments); your consent (AI features, recordings, cookies and analytics, connected apps, and your explicit consent to optional sensitive information such as check-ins); our legitimate interests (security, fraud and abuse prevention, error fixing, protecting students); and legal obligations (tax records, lawful requests).
• Children: if you are under the age of digital consent where you live (13 to 16, depending on the country), we process your information only with your parent or guardian’s consent.
• Transfers: to countries without an adequacy decision we rely on the safeguards in our providers’ data processing agreements, such as the European Commission’s Standard Contractual Clauses and the UK Addendum. Ask us for details.
• Your rights: access, rectification, erasure, restriction, objection, data portability and withdrawing consent. You can complain to your data protection authority.

United States

• Everyone in the US can use the rights in section 16, whatever their state: to know what we collect and why, get a copy, correct, delete, and appeal a refusal within 60 days. If we refuse your appeal, we tell you how to contact your state attorney general.
• Selling and sharing: we don’t sell personal information, don’t share it for cross-context behavioral advertising, don’t do targeted advertising and don’t profile you for decisions with legal effects.
• Sensitive information: we use it only to provide the features you ask for (section 4), never to infer things about you for other purposes.
• Children under 13: we don’t knowingly collect their information (COPPA) and delete it if we learn of it.
• Categories we collected in the last 12 months: identifiers (name, email, account ids, IP address); education information (grades, test scores, applications); commercial information (plans bought); internet activity (with analytics consent); approximate location (country); audio (recordings, if you agree); sensitive information (account sign-in, health-related check-ins and journal, ID documents); inferences (Agent Room suggestions). The sources, purposes and recipients are in sections 3, 5 and 14.

Questions or requests about your information: support@admita.app