SensAI · Veritas Hall LLC
Privacy Policy Draft
Effective date: to be set on launch
SensAI is a college-admissions guidance app operated by Veritas Hall LLC. This policy explains what we collect, why, who else touches it, and the control you have over it. It is written to be readable by the students who use SensAI — mostly 13–18 years old — not just by lawyers.
The draft opens on the commitment that your words stay yours: no selling of data, no advertising use, and analytics designed so they cannot contain what you write. Paste the final wording here.
Who this is for (age)
Minimum age 13; under-16 requires parent or guardian consent, which is recorded; 16 and over consent for themselves.
Open: confirm these ages against COPPA and state minor-privacy law, and whether verifiable parental consent (not merely an email plus checkbox) is required for 13–15-year-olds.
What we collect
Account and consent records, the case file the student builds, conversation content, voice recordings submitted for transcription, and pseudonymous usage analytics.
What we do NOT do
No selling of data, no advertising use, no cross-site tracking, and no student content in analytics events. We do not train AI models on student writing, and any future change would be explicit opt-in, never a default — stated plainly on the support page.
Open: the corresponding statement about what the AI provider does with inputs is a separate claim and is not yet made anywhere — it needs Anthropic's API data-use terms confirmed and on file first (see subprocessors, below).
How your data is processed by others (subprocessors)
Names each third party that touches user data and what it does with it.
Open: confirm the AI provider’s no-training terms; confirm the transcription provider’s retention; confirm the database host’s region and data location; and produce a formal subprocessor list stating each party’s role and location.
Storage, security, and backups
How data is stored, how backups are encrypted, and who can reach them.
Open: confirm data-at-rest encryption and the hosting region with the database provider.
Keeping, exporting, and deleting your data
Full export as JSON at any time. Account deletion immediately erases the case file, profile, and usage from the live database and removes the sign-in. Two caveats stated plainly: a copy may persist in an already-made encrypted backup until it ages out, and pseudonymous content-free analytics are not linked to identity and are not removed by deletion.
Open: set and state a backup retention period and the process for honouring deletion inside backups; decide whether inactive accounts have a retention limit.
Your choices and rights
Access, export, deletion, and analytics opt-out from inside the app; a route for parents and guardians of under-16 users.
Open: confirm the opt-out stops future analytics collection end-to-end; describe the parent/guardian verification process; and add the required rights, legal bases, and appeal mechanisms if any users fall under CCPA/CPRA or GDPR/UK-GDPR — the draft does not yet assert compliance with either.
Safety
SensAI screens messages for signs of crisis and responds with supportive language and locale-appropriate resources instead of an ordinary answer. It is not a crisis line, therapist, or medical or mental-health service.
Changes to this policy
The effective date is updated on change, with in-app notice for material changes.
Open: define what counts as a material change and the mechanism for notifying users.
Contact
Interim contact for privacy questions: josef@veritashall.com.
Open: confirm the support and privacy contact address and the mailing address for Veritas Hall LLC.
Veritas Hall
← Back to SensAI