What we hold, and how to get rid of it.

Trask Education is a college counseling and tutoring practice run by Austin Choi in California. This policy covers traskeducation.com, the free tools on it, and the signed-in application behind them.

It applies to three kinds of people: someone browsing the site or using a free tool, someone who fills in the interest form without making an account, and a student or family with an account. What we hold is different in each case, and the section below says which is which.

The UC GPA Calculator and the Transfer Planner run entirely in your browser. Nothing you type into either one is sent to us, saved, or associated with you in any way. Close the tab and it is gone.

That applies to the UC GPA Calculator and the Transfer Planner. Neither asks for an email address, neither writes to our database, and neither one keeps a copy after you leave. Each sends two kinds of request: the course-list lookups described in section 7, which carry a school name and never carry you, and a single anonymous count that the tool was used, which carries nothing you typed.

Five sources, and nothing else. Each row names the actual fields rather than saying “certain information”.

Your password is not in that list because we never receive it. Sign-in is handled by Firebase Authentication, which stores a hash we cannot read and cannot reverse. Nobody at Trask Education can see, recover or tell you your password.

The interest form is limited to six fields at the database level, not merely by what the form draws: a submission carrying a seventh field is rejected. The same is true of the two fields an administrator can later set on an inquiry, which are a status and a contact date and cannot be used to alter a family’s name, address or message.

These absences are deliberate, and several of them are product decisions we do not intend to revisit.

• No Social Security number, government identification, or date of birth.
• No home address and no phone number.
• No payment card details. We have never processed a card on this site.
• No first-generation status, income, class rank, or race and ethnicity. These are deliberately excluded from the product.
• No advertising trackers, no third-party advertising cookies, and no data broker relationships. We do not sell or share personal information, and never have.

We have never sold or shared personal information, and we have no arrangement under which we could. There are no advertising pixels on this site. We count visits, and a few actions such as finishing a calculation, using Vercel’s analytics, which sets no cookies and does not follow you to other sites. Those counts carry no name, no email address and nothing you typed.

• To run your account and show you your own record.
• To calculate your UC GPA, your A–G progress, and your transfer standing against Cal-GETC, the UC seven-course pattern and the CSU Golden Four.
• To answer you when you write to us, whether through the interest form or by email.
• To deliver counseling or tutoring you have paid for, and to keep a record of sessions delivered.
• To keep the service working and secure, including limiting how often an anonymous visitor can call our course-list endpoints.

We do not use your student record to train a model, and we do not use it for anything other than showing it back to you and to people you are working with at Trask Education.

Each of these companies does one job. They process data on our instructions and are not permitted to use it for their own purposes.

Inside Trask Education, a tutor or counselor with a staff account can read the records of students assigned to them, which is what lets them do the work. One administrator account, which is Austin’s, can read every account and the interest inbox. Administrator access is tied to a specific account identifier written into the security rules, so it cannot be granted by anything stored in the database.

One honest limitation: the database’s security rules produce no access log. We can tell you who is able to read a record, which is the list above. We cannot produce a log of which records were actually opened, or when.

The app checks your coursework against two public databases. This is the part families most often assume works the other way around, so it is worth stating exactly.

Neither request carries a student name, an email address, a grade, or any identifier that could be traced back to an account. We ask those systems about schools and courses. We never tell them about a student.

A student can make a link that lets a parent see a summary of where things stand, without an account of their own. Nothing is shared unless the student makes the link.

• What it shows: first name, grade level, UC GPA, A–G progress, the college list with its estimates, how many words each chosen essay has, and activity names.
• What it never shows: essay text, notes, college supplements, activity descriptions, last name, school, birthplace, or the grade the student moved to the United States.
• It is a copy, refreshed when the student opens their overview, and it says when it was last updated.
• Anyone holding the link can open it, the way a shared document link works. The link is long and random, cannot be guessed, and is kept out of search engines.
• Making a link requires a confirmed email address. The student can turn it off at any time, which deletes the copy, and deleting the account deletes it too.

Most students using this product are minors, and the record they build is a detailed one. We take that seriously and we would rather be blunt than reassuring.

• This service is not directed to children under 13, and we do not knowingly create accounts for them. If you believe a child under 13 has an account, email us and we will delete it and everything in it.
• A student under 18 should create an account only with a parent or guardian's knowledge and permission. We ask for that confirmation at signup.
• A parent or guardian may ask to see, correct, or delete their child's record at any time, and we will act on that request without requiring a reason.
• We do not sell or share personal information about anyone, which includes the opt-in that California law would otherwise require for a consumer under 16.

• Account and student record: for as long as the account exists. Delete the account and it goes with it, immediately and permanently.
• Parent links: until the student turns sharing off or deletes the account.
• Interest form submissions: 24 months from the last time we were in contact about it. For a submission we never followed up, that clock starts at the submission date.
• Tutoring session records: retained as a business record of work delivered. They contain a date, a subject, notes, and the account identifier of the student. Ask us and we will remove them.
• Server logs at our host: a short retention period set by Vercel, containing IP addresses and request paths, not account content.

Deleting an interest form submission on schedule is a manual job today. No scheduled process runs. We would rather say so than imply an automation that does not exist.

There is a button. It is on the account page, it asks for your password to confirm it is you, and it does the following in one action:

• Turns off any parent link you made, deleting the shared copy.
• Deletes your student record: courses, grades, testing, activities, essays, your college list and your transfer plan.
• Deletes your account record: your name and email address.
• Deletes your sign-in credentials, so the account no longer exists and cannot be recovered.

This is a hard delete, not a flag. Nothing is archived, there is no recycle bin, and we cannot restore it afterwards. Export anything you want to keep first.

Two things it does not reach, because they are not yours to delete alone. Tutoring session records written by a tutor are business records of work delivered; email us and we will remove them by hand. Interest form submissions are not attached to an account at all; email us from the address you used and we will delete it.

If you would rather not use the button, email hello@traskeducation.com and ask. We do not require a reason and we do not try to talk you out of it.

Under the California Consumer Privacy Act as amended, you have the right to know what we hold about you, to have it corrected, to have it deleted, and not to be treated differently for exercising any of those.

• To know: your entire student record is visible to you inside the app, which is the whole point of it. For anything else, ask and we will tell you.
• To correct: every field in your record is editable by you. For the name and email on your account, email us.
• To delete: section 11.
• Not to be sold or shared: there is nothing to opt out of, because we do not do it. We have no Do Not Sell link for the same reason.
• No retaliation: asking for any of the above does not affect the service you receive or the price you pay.

We answer requests at hello@traskeducation.com, normally within a few days and within 45 days at the outside. We may need to confirm you control the account before acting on a request about it, which is a protection for you rather than an obstacle.

Every request to the database is checked against a set of published security rules rather than by application code, so a bug in a page cannot expose a record the rules forbid. Those rules have an automated test suite that runs against an emulator, and a rule change without a matching test is treated as incomplete. Traffic is served over HTTPS throughout.

What that does not mean. No system is immune, this one is young, and it is operated by a very small team. If we ever discover a breach affecting your information, we will tell you directly and promptly rather than waiting to be asked, and we will say what we know at the time even if the picture is incomplete.

When what the software does changes, this page changes in the same release and the date at the top moves. That date is edited by hand and is not stamped by the build, so it means what it says: the last time the substance of this document was reviewed.

If a future change would meaningfully reduce the protection described here, we will email account holders before it takes effect rather than relying on you to notice a new date.

Questions, requests, or anything on this page that does not match what you are seeing: hello@traskeducation.com. A real person reads it.