Privacy Policy

This Privacy Policy explains how MyFullRides (“MyFullRides”, “MFR”, “we”, “us”) collects, uses, shares and protects personal information when you use our website, matching engine, scholarship and leaderboard lists, Premium and related emails (the “Service”). It forms part of our Terms of Service.

By using the Service you acknowledge the practices described here.

Information you enter to get results. Your unweighted and weighted GPA, SAT or ACT score, state of residence, household income range (a range, never an exact figure), achievement level, and optional details such as class rank, type of high school, intended major, extracurricular activities, honors and awards, AP or IB course count, National Merit status, citizenship, first-generation, rural and veteran status, and whether you would leave your state.

Account information. If you create an account: your name, email address and password (stored only in hashed form by our authentication provider). If you sign in with Google, the name, email address and profile picture Google shares with us.

Saved information. Schools you save, your saved stats, and your settings and preferences, including whether you asked to receive news and offers by email.

Payment information. If you start a trial or subscribe to Premium, our payment processor Stripe collects your card and billing details. We receive only limited information from Stripe, such as a customer ID, subscription status, the last digits and brand of your card, and billing history. We never see or store your full card number.

Usage and device information. When you use the Service we automatically record events such as opening a page, filling in the form, running a search, viewing the Premium offer, opening or closing a sign-up box, pressing checkout, signing in and leaving. Each event can include the time, the page, a random visit identifier, your IP address, the country your network appears to be in, your browser's user agent, and, if you are signed in, your account and email address.

Communications. Messages you send us, such as questions, corrections or privacy requests.

We do not ask for Social Security numbers, tax returns, bank account details or exact income, and you should not send them to us.

• To match your profile against colleges and aid programs and show your results.
• To create and run your account, keep your saved schools, stats and settings, and sync them across devices.
• To provide Premium, process payments and trials, and manage subscriptions and cancellations.
• To evaluate free-text activities so your results reflect them.
• To send service emails, such as sign-in and password-reset messages, and, only if you turned it on, news and offers.
• To understand how people use the Service, measure what works, fix problems and improve features.
• To protect the Service and its users, prevent fraud, abuse, free-trial misuse and chargebacks, and enforce our Terms.
• To comply with law, respond to lawful requests and establish or defend legal claims.

We do not sell your personal information, and we do not share it for cross-context behavioral advertising. We do not give your profile or results to colleges, lenders, scholarship services, data brokers or advertisers. See Do Not Sell My Personal Information.

We share information only with service providers that process it for us under their own terms, and only as needed:

• Supabase: accounts, sign-in, stored profiles, saved schools, settings and the usage log.
• Vercel: hosting and serving the site, including estimating the country of a request.
• Stripe: payments, free trials, subscriptions and the billing portal.
• Google: sign-in, only if you choose Continue with Google.
• Anthropic: evaluating the extracurricular activities you write in; this text is sent to Anthropic's API to score it and is not used to train its models.
• Resend: sending email, if you receive email from us.

We may also disclose information if required by law or legal process, to protect the rights, safety or property of MyFullRides, our users or others, or as part of a merger, acquisition, financing or sale of assets, in which case this policy will continue to apply to your information.

Links to college websites, aid pages and Niche take you to third parties. We do not send them your profile, and their own privacy policies apply once you are on their sites.

Premium is billed through Stripe. We keep records of your subscription status, trial, renewals and payment history to provide Premium, meet our legal and accounting obligations, and respond to disputes and chargebacks. Stripe keeps its own records as required by law, even after you delete your account with us.

All payments are final and non-refundable, and any and every request for a refund, credit or partial refund will be denied, as set out in Section 8 of our Terms of Service. Deleting your account, cancelling, or making a privacy request does not create a right to a refund.

We may use payment and account information to detect and prevent refund abuse, repeated free trials and fraudulent chargebacks.

We use cookies and your browser's local and session storage for things the Service needs to work:

• Keeping you signed in.
• Remembering your settings, such as theme, and, if you choose, your stats and saved schools.
• Counting your free search and keeping your results while you sign in, so you return to them.
• A random identifier for each visit, used in the usage log.
• Security and fraud prevention.

We do not use third-party advertising cookies or advertising trackers. You can clear this storage at any time with Settings, then Clear my data, or in your browser; some features will stop working until you sign in again.

• Account information, saved schools, saved stats and settings: until you delete your account.
• Usage events: generally up to 90 days, then deleted, unless needed longer for security, fraud prevention or a legal matter.
• Payment and subscription records: as long as required for tax, accounting and legal purposes, and to handle disputes and chargebacks.
• Email send records for news and offers: until you delete your account.
• Information in backups is deleted as backups roll over.

• Correct or update: change your name, email, password and saved stats in Account settings.
• Delete: delete your account in Account settings. This erases your account, saved schools, saved stats, activity history and email records, and cancels any subscription.
• Browser data: Settings, then Clear my data, removes everything held in your browser.
• Marketing email: we send news and offers only if you turn on “Email me news and offers”. Turn it off in Settings or use the unsubscribe link in any such email. Service emails, such as password resets, may still be sent.
• Access or copy: ask us for a copy of the personal information we hold about you.

Depending on where you live, including California, Colorado, Connecticut, Virginia, Utah, Texas and other states, and the European Economic Area and United Kingdom, you may have additional rights to know, access, correct, delete or port your information, to object to or restrict certain processing, and not to be discriminated against for using these rights. To make a request, contact us through the Contact page. We will verify your identity before acting and respond within the time the law requires. An authorized agent may make a request for you with proof of authority.

Most people who use MyFullRides are high school students. The Service is not directed to children under 13, and we do not knowingly collect personal information from anyone under 13. If we learn that we have, we will delete it. If you believe a child under 13 has given us information, contact us through the Contact page.

Users from 13 up to the age of majority should use the Service with a parent or guardian's involvement, and a parent or guardian must approve any purchase. Parents and guardians may contact us to review or delete their child's information.

We use reasonable safeguards designed to protect your information, including encrypted connections, hashed passwords, database row-level security so an account can read only its own rows, and access limited to the owner of the Service. No system is perfectly secure, and we cannot guarantee the security of information sent over the internet. Keep your password to yourself and tell us about any suspected unauthorized use of your account.

MyFullRides is operated from the United States, and our service providers process information in the United States and other countries. If you use the Service from outside the United States, your information will be transferred to and processed in the United States, where data protection laws may differ from those where you live.

We may update this policy from time to time. The date at the top shows when it last changed. If a change is material, we will take reasonable steps to let you know, for example on the Service or by email. Continuing to use the Service after a change takes effect means you accept the updated policy.

Questions, requests and complaints about privacy can be sent to us through the Contact page.