Privacy Policy

Last updated: May 7, 2026

We try to collect as little as possible and tell you what we do.

What we collect

Account data. Your email and the OAuth identifier from your sign-in provider (typically Google). Name and profile picture if your provider sends them.
Essay data. The essays, activities, honors, letters, and notes you create or upload, plus the scores and reviews Kolly produces for them.
Usage data. Pages visited, features used, error logs, and rough device info (browser, operating system, IP at the time of request). We use this to debug and improve the product.
Billing data. If you subscribe, Stripe handles your card. We get back the subscription status, invoice metadata, and the last four digits of the card. We do not see or store your full card number.

What we don't collect

We don't sell your data.
We don't use your essays to train third-party models.
We don't run third-party advertising trackers in the authenticated app.
We don't ask for medical, legal, or financial information, and we'd rather you not paste it in.

Who we share data with

To run Kolly we use a small set of vendors. Each one only sees the data it needs to do its job:

Supabase stores your account, essays, and scores. Hosted in the US.
Anthropic and the Vercel AI Gateway run the language models that produce scores and feedback. Your essay text is sent at scoring time. Neither retains your essays for model training.
Stripe processes payments.
Vercel hosts the app and serves the website.
Resend (or a similar transactional provider) sends account emails.
Google Analytics collects aggregate traffic stats on public pages. We do not run it on authenticated app pages.

We may also disclose data if a court orders us to, or if it is necessary to protect a person from harm.

Cookies

We use a small number of cookies to keep you logged in and remember your settings. We do not use third-party advertising cookies.

Your choices

See your data. Most of it is visible in the dashboard.
Delete your data. Delete an essay from its document menu; it is removed from active storage right away. Email founders@kolly.ai to request full account deletion.
Cancel. Cancel your subscription from Settings.
Export. Email us if you want a copy of everything Kolly has on you.

Data retention

Active data lives until you delete it or until your account is closed. Backups age out within 30 days of deletion. Billing records are kept for as long as we are legally required to keep them.

Children

Kolly is built for high-school students applying to college. We don't direct the Service at children under 13 and don't knowingly collect data from anyone under 13. If you think a minor under 13 has signed up, email us and we'll delete the account.

International users

Kolly is hosted in the United States. If you use it from outside the US, you are sending your data to the US.

Changes to this Privacy Policy

We'll update the date at the top when this changes. Material changes will get an email to your account.

Contact

Privacy questions or requests: founders@kolly.ai. Mail: Dotter, Inc., 42822 Songbird Ct, Ashburn, VA.