Effective April 8, 2026
ACOPA is designed around data minimization. We collect only what is strictly necessary to operate the platform:
Both of these are held by our authentication provider, Supabase — not by ACOPA itself. ACOPA does not store your authentication credentials in its own database.
Achievement records, verifier testimonies, media files, and other chronicle content are stored on your behalf in a Supabase storage environment associated with your account. This content belongs to you.
ACOPA does not collect or store the following:
Passwordless magic link: When you sign in, we send a secure one-time login link to your email address. No password is ever created or stored.
Optional SMS OTP: Users on paid tiers may optionally enable SMS-based one-time passcodes as an alternative login method. This requires a phone number on file. SMS authentication is handled by Supabase and is not required for any plan.
FERPA: The Family Educational Rights and Privacy Act governs how educational institutions share student records with third parties. ACOPA is a private platform voluntarily signed up for by students and parents — it is not a school-adopted platform. Students and parents are the sole owners and initiators of their data at every stage. ACOPA is not subject to FERPA obligations in the same way that school-adopted systems are, because FERPA governs what schools share with third parties — not what students and parents choose to document themselves.
Age Requirement: College Diary is open to users aged 13 and older. We do not knowingly collect personal data from children under 13. If we become aware that a user is under 13, their account will be closed and their data deleted promptly.
Ages 13–17: Users in this age group register as the sole account holder. A parent or guardian billing email may be provided for payment receipt purposes only and does not grant any platform access. Students may optionally invite a parent or guardian as a read-only viewer from their account settings.
Export: You may download a complete copy of your achievement record at any time from your Account Settings. The export includes a PDF of all entries, verifier responses, and timestamps, as well as a zipped archive of all your media files organized by achievement.
Account closure: If you close your account, your complete achievement record is packaged and made available for download automatically before deletion begins.
Permanent deletion: All account data is permanently and irreversibly deleted 10 days after account closure. We retain no backups of deleted accounts after that period.
ACOPA does not sell, rent, or share your personal data with any third party for commercial purposes.
We do not use your achievement data to train AI models, build advertising profiles, or generate insights sold to any external organization.
The only third-party service with access to authentication data is Supabase, our authentication and storage provider. Supabase's own privacy policy governs how it handles that data.
When a verifier confirms an achievement on ACOPA, they provide their full name, email address, and a stated role or title that establishes their relationship to the achievement being confirmed.
This information is stored as part of the verified achievement record and is visible to the student who requested the verification. Verifiers retain full ownership of their submitted testimonies.
Verifiers who wish to correct or remove a submitted testimony may contact ACOPA through the support channel. ACOPA will work with the verifier to address the request.
When you contact our support team, you may choose to share screenshots or other content from your account to help us understand and resolve your issue. Any personal data visible in such screenshots — including achievement entries, verifier responses, or account details — may be reviewed by our support staff solely for the purpose of resolving your request.
Support staff are bound by confidentiality obligations and do not access, retain, or use your data for any purpose beyond resolving the specific issue you raised. Screenshots and support communications are not stored beyond the resolution of your request unless retention is required by law.
For accounts belonging to users under 18, support communications involving account data are handled with additional care consistent with our COPPA commitments described in Section 4.
We may update this Privacy Policy from time to time. We will notify you of material changes by email or by a notice within the platform. Continued use of ACOPA after the effective date of any changes constitutes acceptance of the updated policy.
Questions about this policy may be directed to the ACOPA team through the support section of your account settings.