Privacy Policy

Last updated: 9 October 2026

Admita helps students plan their university applications. Most people who use it are 16 to 18 years old, so we try to collect as little as we can and to explain plainly what we do with it. This policy covers the Admita website and the Admita mobile app for iPhone and Android. It explains what personal information we collect, why, who helps us run Admita, how long we keep it, and how you can see or delete it.

Admita is run by Core Tech, based in Mongolia (“we”, “us”). If you have a question about this policy or your data, email [email protected].

What we collect

When you create an account

• With email: your name, email address and a password. The password is stored only as a secure hash by our sign-in provider; we never see it.
• With Google or Apple: the profile information the provider shares with us — your name, your email address and, from Google, your profile picture. If you use Apple’s “Hide My Email”, we receive a private relay address instead of your real one. We never receive your Google or Apple password.
• Two-factor authentication: if you turn it on, a secret for your authenticator app, kept by our sign-in provider.

Profile information you give us

Your school year, country, time zone, planned start term, study destinations and subjects, English test and other test scores, grades, and — if you choose to add them — your date of birth and a parent or guardian’s email address.

Date of birth is used only to know whether you are under 18. If you are, and you work with a counselor, we tell your parents or guardians when a counselor is assigned and when a meeting is booked (see “Counselors and meetings”). Your counselor sees only whether you are under 18, never the date itself, and it is never sent to an AI model.

What you add while using Admita

• The universities on your list, deadlines, checklists and notes.
• Essays you write, including earlier saved versions.
• Documents you upload, such as transcripts or passport scans.
• Check-ins (how you’re feeling), journal entries and calendar dates.
• Saved scholarships, reminder and notification settings.
• Test Prep answers, scores and, if you choose to record them, spoken answers (see “Speaking recordings”).
• Lesson progress, quiz answers, private lesson notes and questions you ask about a lesson.
• Your daily study goal, how many minutes you study each day, and the questions you got wrong so the app can bring them back for review.
• Private to-dos, and AI university searches you type.
• Reviews of universities you write, and reviews you report or people you block (see “University reviews”).
• Messages with your counselor, and meetings you book.

If you apply to be a counselor

Your name, photo, a short bio, time zone, the countries, exams and languages you know, your experience and education, an optional LinkedIn link, documents you upload (such as certificates or ID) and the contact details of your references. We contact your references only to check your application. If you give us someone else’s details as a reference, please let them know first.

Technical information

Like most websites, our servers record basic request information such as your IP address and the time of a request, to keep the service secure (for example, to stop abuse) and to fix problems. Your browser keeps your sign-in session, your cookie choice and, — if you allow preference cookies — your light/dark theme choice (see “Cookies and analytics”). When you’re signed in, we also note when you last used Admita and on which days and devices (web, iPhone or Android). In the mobile app, your phone keeps your sign-in session in its secure storage. If you allow notifications, we store a push token for your device (see “The mobile app”).

How we use it

• To build and run your plan: schools, checklists, deadlines and reminders.
• To give feedback on your essays and answer questions about lessons.
• To run Test Prep, lessons and counseling.
• To send the messages you need: sign-in codes, reminders, inbox messages by email or push, and, if you add one, a consent request to your parent or guardian.
• To keep accounts secure, to find and fix errors, and to improve the service.

We don’t show ads, and we don’t use your essays, documents, check-ins, journal, recordings or messages for advertising.

Cookies and analytics

The first time you visit, we ask which cookies Admita may use. Strictly necessary ones (sign-in, security and your cookie choice) are always on. Analytics and preferences are off unless you turn them on.

• Analytics, if you allow it: pages visited (without anything personal in the address), features used, sign-ups and logins, device and browser type, the approximate country your connection comes from, and when. We don’t store your IP address for this. It goes only to Admita’s own servers — no analytics or advertising company receives it — and is deleted after 13 months.
• Preferences, if you allow it: remembers light or dark mode on your device.
• When you’re signed in, your choice is saved to your account too, so it applies on your other devices. You can change it at any time from “Cookie settings” at the bottom of every page or in Settings.

Separately from cookies, when you’re signed in we record when you last used Admita and on which days and devices, to keep accounts secure and to count how many people use Admita. It never records what you looked at. The full list of cookies, in English, Mongolian, Korean and Russian, is in our Cookie Policy.

We don’t sell your data

We do not sell, rent or trade your personal information to anyone.

The mobile app

The app uses what you add in Admita and the permissions below. Each one is asked for only when a feature needs it, and you can turn it off in your phone’s settings at any time.

• Reminders on your phone (local notifications): deadline, to-do and study-streak reminders are scheduled by the app on your phone, from your own deadlines and reminder settings. They are created and shown on the device; we don’t send them.
• Push notifications: if you allow them, inbox messages (for example from your counselor) are delivered through Expo and Apple or Google, as described below. A notification holds only a short message.
• Add to calendar: when you tap “Add to calendar”, the app opens your phone’s own new-event form, filled in with that date, for you to check and save. On iPhone this needs permission to add events (write-only). Admita never reads your calendar and never receives what is in it.
• Widgets: if you add an Admita widget to your home screen or Lock Screen, the app saves a small summary on your phone for it — such as your next deadlines, the number of days left, today’s to-dos and your streak. It stays on the phone and is not sent to us, but anyone who can see your screen can see it. Remove the widget to stop this.
• Error reports: if the app crashes, a report goes to Sentry with technical details, the screen and a random account id — no screenshots, no text you typed, no name or email address.

The app doesn’t track you across other companies’ apps or websites, and contains no advertising.

AI features

Before you use an AI feature for the first time, we ask for your OK, and you can withdraw it at any time in Settings (AI features then stop). If you are under 18, we ask a parent or guardian instead: we email them a single-use link, and AI features stay off until they say yes. If an AI answer looks wrong, harmful or inappropriate, you can report it from the answer; our team reviews reports.

Some features use AI models. We send a model only what that feature needs, through OpenRouter, routed only to providers that do not keep the data (zero data retention) and do not use it to train their models. We never put your name, email address, date of birth, guardians, journal or check-ins into a request.

• Essay feedback (Tami): when you ask, the text of that essay and its prompt are sent to write the feedback.
• Lesson questions: your question and the lesson’s own material are sent. Questions Tami can’t answer go to our staff, who see the question without your name.
• AI university search: when you describe what you’re looking for (for example “affordable engineering in Korea”), that text is sent to turn it into a search and, with public facts about the closest universities, to an AI model that scores how well each one matches. Nothing about you — not your profile, grades or plan — is sent. Searches for a university’s name or a place don’t use AI at all. We keep a count of searches per day to enforce a daily limit.
• Agent Room (when it is available to you): a team of AI helpers looks at your plan — universities, checklist items, deadlines and study tasks — and suggests changes, which you accept or reject. Only the essay coach sees essay text, and only for an essay of at least 100 words that changed since its last review, at most three times a day. You can stop the agents at any time. Agent activity is deleted after 12 months.

AI can be wrong. Nothing an AI helper suggests changes your plan until you accept it.

Speaking recordings

Speaking practice in Test Prep can record your spoken answers so you can listen back and assess yourself. We ask for your permission before the first recording. Recordings are kept in private storage, are not sent to any AI model, and are deleted automatically after 30 days — or straight away if you withdraw your permission.

Counselors and meetings

If you are matched with a counselor, every counselor has applied, given references and been checked by our team first, and has agreed to our code of conduct.

• What your counselor can see: your plan, universities, checklists, deadlines, tasks and the essays you let them see (you choose, per essay, whether they can comment, suggest or edit). They cannot see your journal, check-ins, documents, guardians or AI feedback.
• Changes: every change a counselor makes is recorded; you can see it and undo it.
• Chat: messages and attachments between you and your counselor. Our team reads a conversation only if someone reports it. Conversations are deleted two years after the counseling ends.
• Meetings: online meetings use a video link chosen by your counselor or, if they don’t choose one, a Jitsi Meet link (meet.jit.si). That service is run by a third party under its own privacy policy; Admita does not record meetings. We send reminders 24 hours and 1 hour before.
• Parents of students under 18: parents or guardians on your account are told by email when a counselor is assigned and when a meeting is booked — the time and the counselor’s name only, never the link, agenda or messages.

Parents and guardians

Your parent or guardian is involved only if you add their email address and they agree, using a single-use link we email them. When the weekly parent summary is available, it holds overall progress, the next deadline and a general mood, and you see and approve each one before it is sent. Your essays, documents, journal and messages are never shared with them.

University reviews

You can write a review of a university you know. Before your first review we ask you to accept the review guidelines in our Terms of Service.

• What others see: your rating, what you like, what to watch out for, how you know the university (for example “Applicant”) and the month. Never your name, photo or any other detail about you.
• Moderation: every review is checked by our team before it is shown, and again if it is edited. Text with offensive language, links or contact details is refused automatically. We keep which account wrote a review so you can edit or delete it and so we can act on reports.
• Report and block: you can report a review or block its writer. Reports and blocks are private: the writer is never told who reported or blocked them, and blocking never shows you who they are.
• Deleting: you can delete your review at any time on the university’s page. Reviews are deleted with your account.

Where your data is stored and who helps us run Admita

We use a small number of service providers. They process your data only to provide their service to us.

• Supabase stores your account, your app data, the files you upload and recordings, and handles sign-in and live chat updates (servers in Singapore).
• DigitalOcean hosts the Admita website and the Admita app’s server (servers in Singapore).
• OpenRouter and the AI providers it routes to write AI feedback and suggestions and run AI university search, as described under “AI features”.
• Resend sends our emails, such as reminders, inbox messages and parent or guardian consent requests.
• Sentry receives error reports when something breaks, so we can fix it (servers in Germany). Reports contain technical details such as the page, browser and error, and a random account id — not your name, email address, request contents or what you typed.
• Expo (and, through it, Apple and Google) delivers push notifications to the mobile app if you allow them. A notification contains only a short message, such as a reminder.
• YouTube plays lesson videos. Videos use YouTube’s privacy-enhanced mode (youtube-nocookie.com), but when you play one, Google receives information such as your IP address under its own privacy policy.
• Jitsi Meet hosts counseling video meetings when the counselor doesn’t choose another link.
• Google Fonts serves the fonts our website uses, which means your browser connects to Google to load them.
• DB-IP provides the free country list we use to estimate, on our own servers, which country a visit with analytics allowed comes from. Nothing is sent to DB-IP. IP Geolocation by DB-IP (CC BY 4.0).

Because these providers operate internationally, your data may be processed outside your country.

How long we keep it

• Your account and app data: while your account is open. When you delete your account, they are deleted.
• Speaking recordings: 30 days, or until you withdraw permission.
• Counseling chat and attachments: two years after the counseling ends.
• Agent Room activity: 12 months.
• University reviews: until you delete them or your account. Reports of a review are deleted when a moderator approves it or it is deleted.
• Questions saved for review: until you get them right enough times, mark them as known, or delete your account.
• Error reports in Sentry: deleted automatically after Sentry’s retention period (90 days at most).
• Analytics events (only if you allowed analytics cookies): 13 months. Your cookie choice, and when and on which days you used Admita: while your account is open.
• A security record of administrative actions (who did what, by id, never content) is kept to protect students and may outlast an account.

Students under 18 and parent consent

Most people who use Admita are teenagers. We collect only what the service needs, never show ads, never sell data, and keep parents informed about counseling as described above.

• Who can use Admita: Admita is for students aged 13 and over. We don’t knowingly collect personal information from children under 13; if we learn that we have, we delete it.
• Parent or guardian consent: if you are younger than the age at which you can agree to this policy on your own where you live, a parent or guardian must agree before you use Admita. When you sign up we ask students under 18 to add a parent or guardian; we email them a single-use link to say yes, and they can also say no.
• What parents can do: a parent or guardian can ask us to see, correct or delete their child’s information, or to withdraw consent, by emailing [email protected]. We check that the request really comes from the student’s parent or guardian before acting on it.
• What parents don’t see: essays, documents, journal, check-ins, messages, reviews and AI feedback stay private to the student.

Seeing, correcting and deleting your data

• See or download: on the website under Settings → Privacy & account → See my data.
• Correct: edit it in the app, or email [email protected].
• Delete: on the website, Settings → Privacy & account → Delete account; in the mobile app, Me → Delete account. This deletes your account, plan, essays, check-ins, uploaded files and recordings. Or email [email protected] from the email address on your account, and we will confirm by email once it is done.

Security

All connections to Admita are encrypted (HTTPS). Uploaded files and recordings are kept in private storage and can only be opened through short-lived links. Counselors’ access is checked on every request and ends as soon as their assignment ends. You can protect your account with two-factor authentication. No system is perfectly secure, but if a breach affects your data we will tell you.

Changes to this policy

If we change how we handle your data, we will update this page and the date above. If the change is important, we will also let you know in the app or by email.

Questions or requests about your data: [email protected]