Privacy Policy

Pathways (pathways.uno) is a platform that connects high school students with students, educators, and counselors who can give firsthand guidance on college and careers. It is operated by iPathways, based in San Ramon, California, United States, which is the data controller for the information described here.

Contact: ishaan@pathways.uno. A postal address is available on request.

When you sign up: your name and email address from your sign-in provider.

When you build your profile: your role, grade or institution, school, the topics you want help with, your headline, and your bio. All of this is optional except your role.

As you use Pathways: the posts you publish, the messages you send and receive, your connection requests, and the questions you ask Sage along with Sage's answers, so your conversation is there when you come back.

Notes you keep on other members: a private nickname and up to 4,000 characters of free-text notes you can write about another member, the way the notes field on a phone contact works. The person you are writing about is never told a note exists.

For safety: if a message or post is blocked by our safety systems, we keep a record of what rule fired, a short excerpt, and who sent it. We keep reports members file about each other.

Automatically: a one-way hash of your IP address, used only to rate-limit the free Sage sample on our public page. We do not store raw IP addresses for that feature.

If you subscribe to Sage: Stripe collects and holds your payment details. We receive only your subscription status, plan, renewal date, and Stripe customer reference. We never see your card number.

We do not sell student data. We do not share your information with data brokers. We do not use your messages or your Sage conversations to target advertising, and we do not train any AI model on them. There is no advertising anywhere on Pathways.

To run your account and sign you in; to show you relevant people and posts; to let other members find you when you want to be found; to give Sage enough context to answer usefully; to process your Sage subscription; to keep the platform safe by screening content and reviewing reports; and to send you messages about your account. We do not send marketing email you did not ask for.

Other members: your name, role, headline, school, grade, bio, and topics are visible to other signed-in members, so they can decide whether to connect with you. Only share what you are comfortable being seen — you can clear any of these fields from your Profile tab at any time.

No other member: your Sage conversations, and the private notes and nicknames you keep on other people. No member can see either one, and the person a note is about is never told it exists.

You and one other person: your direct messages.

Us: our admins can access message content, Sage conversations, and contact notes. We do that when we are investigating a safety report or a blocked message. We do not read them otherwise.

• Base44 — hosts the application, database, and authentication
• Google — sign-in provider
• Stripe — payment processing for Sage subscriptions
• A large language model provider — generates Sage's answers and runs our safety classifier

These providers process data on our behalf under their own terms. We do not permit them to use your data for their own purposes.

Your profile, posts, messages, and Sage history are kept while your account is open. When you delete your account we remove or anonymise them within 30 days.

Two exceptions: safety records (blocked-content logs and reports) are kept for up to two years even after an account is deleted, because they are how we spot repeat behaviour across accounts; and payment records are kept as long as tax and accounting law requires.

Pathways is for people 13 and older. We do not knowingly collect information from anyone under 13. If you believe a child under 13 has created an account, email us and we will delete it promptly.

Members who are minors are protected by the rules in our Terms section 6: messaging requires a mutual connection, and every message is screened for contact details and meetup requests before it sends.

We handle student information consistently with COPPA, and where Pathways is used in connection with a school we will work with that school on its FERPA obligations. A parent or guardian can email us to review, correct, or delete their child's information.

You can edit or clear your profile at any time from the Profile tab. You can also:

• Download your data — request a copy of everything we hold about you
• Delete your account — from your Profile page, or by emailing us
• Correct anything inaccurate
• Object to a particular use of your information

If you are a California resident, the CCPA and CPRA give you the rights to know, delete, correct, and opt out of sale or sharing of your personal information. We do not sell or share personal information, so there is nothing to opt out of, but the other rights apply and you can exercise them at the address below. We will not discriminate against you for exercising them.

Access to your data is restricted at the database level so members can only read their own records and their own conversations. Payment credentials never touch our systems. No service can promise perfect security, and we will tell affected members promptly if we ever discover a breach involving their information.

If we make a material change we will note it here with a new date at the top, and tell registered members by email where the change meaningfully affects them.

Questions, requests, or concerns about privacy go to ishaan@pathways.uno. Safety concerns are treated as urgent — see our Safety page.