Legal

Privacy policy.

We built Diplomare for our own families first, and we think about privacy the way a parent would: the less we hold, the better. Here's exactly what we collect, how we use it, and what you can ask us to do with it.

Last updated · April 18, 2026

Who we are

When we say “we,” “us,” or “Diplomare” in this policy, we mean the small team that builds and runs the service. Questions go to hello@daddiorobotics.net.

What we collect

  • Account information — email, name, password hash, and your family's structure (parents and students).
  • Student profile data — the information you choose to enter: GPA, test scores, coursework, activities, colleges of interest, essay drafts, application status.
  • Uploaded files — transcripts, award letters, and other documents you attach to a student profile.
  • Billing information — handled by Stripe. We store your subscription status and a reference ID; we never see full card numbers.
  • Usage information — minimal server logs for debugging and abuse prevention. No third-party tracking pixels. No ad networks. No session replay.

How we use it

We use your data to run the product you pay for. Specifically:

  • Show you your own dashboard.
  • Generate AI suggestions on request — college matches, essay feedback, scholarship recommendations.
  • Send transactional email — deadline reminders, billing receipts, invites you've opted into.
  • Comply with the law when required.

We do not sell your data. We do not share your data with colleges, admissions offices, advertisers, or data brokers. We do not train AI models on your content.

AI features and Anthropic

Our AI features (college matching, essay feedback, scholarship research) are powered by the Anthropic Claude API. When you use a feature that calls it, the relevant text is sent to Anthropic to generate a response. By default, the Anthropic API does not train its models on your inputs or outputs, and we have not opted into any training program.

Families with children under 13 (COPPA)

Diplomare is designed for a parent managing the college process on behalf of their family. For any student user under 13, we require verifiable parental consent before creating the student profile. Parents may review, export, or delete their child's data at any time by signing in, or by emailing us.

We collect only what's needed to deliver the service. We do not use any child's personal information for marketing, and we don't share it with third parties except the processors listed below.

How we protect it

  • All traffic between you and us is encrypted with TLS.
  • Access to production data is limited to the small number of Diplomare employees who need it to run the service.
  • Backups are encrypted before leaving the server. Production credentials are never committed to source control.
  • If we discover a security incident that affects you, we'll tell you in plain English and tell you what to do about it.

Full details on our security posture live on the Security page.

How long we keep it

While your account is active, we keep your data so you can use it. If you cancel or delete your account, we remove your family's personal data within 90 days of cancellation, except where we need to keep specific records longer to satisfy a legal or accounting obligation. You can export everything to JSON or CSV from inside the app before you go.

Your rights

Regardless of where you live, you can ask us to:

  • Show you what we have about your family.
  • Correct anything that's wrong.
  • Delete your data.
  • Export your data in a portable format.

Residents of California (CCPA/CPRA), Colorado (CPA), Connecticut (CTDPA), Virginia (VCDPA), and other states with consumer privacy laws have additional rights under those statutes, all of which we honor. Email hello@daddiorobotics.net with the subject line “Privacy request” and we'll respond within 30 days.

Processors we use

  • Stripe — payment processing. Subject to Stripe's privacy policy.
  • Anthropic — Claude API for AI features. Your inputs are not used for training under our default configuration.
  • Resend — transactional email (deadline reminders, receipts, account emails).
  • Hostinger — infrastructure hosting (the VPS running the app and database).

Changes to this policy

If we make a material change, we'll email account holders and update the “last updated” date at the top. Continued use after a change means you accept it.

Questions about your data?

We'll answer anything — usually within a business day.

Email us →