Privacy Policy

The Ivy Track, operating at www.ivytrackprep.com. For any privacy question, or to have your information corrected or deleted, email theivytrack@gmail.com.

When you enquire.The booking form collects the parent and student name, email address, phone number, the student's grade, their current and target scores if given, their testing timeline, and anything written in the notes field.

When you have an account. Email address, a password (stored hashed by our authentication provider, never in plain text and never visible to us), name, and role.

When a student uses the platform. Practice assignments, the answers submitted, scores and skill-level results, session records, and activity dates. For counseling students, we also store checklist progress, homework status, and any document links a counselor adds.

We do not collect payment details on this website. Fees are arranged directly with you.

• To reply to your enquiry and schedule a free strategy session.
• To run tutoring and counseling: assigning practice, scoring it, tracking progress, and preparing session plans.
• To send transactional email such as booking confirmations.
• To keep accounts secure and the service working.

We do not use your information for advertising, and we do not sell or rent it to anyone.

We use a small number of service providers, each of which only handles what it needs to:

• Supabase — database and account authentication.
• Vercel — website hosting and delivery.
• Resend — sending transactional email.
• Google — Calendar and Meet, for scheduling sessions (see below).

The Ivy Track requests access to Google Calendar events for our own business Google account only. That access is used for one purpose: to create, update, and cancel the calendar events and Google Meet links for sessions booked through this site.

We do not request or receive access to the Google account of any student, parent, or visitor. Booking a session does not connect your Google account to us. We do not read, store, or analyse the contents of anyone's personal calendar, and we never use Google user data for advertising, profiling, or training machine-learning models.

The authorisation token for our own account is stored encrypted and is accessible only to our server. It can be revoked at any time from the Google account's security settings, which immediately ends our access.

Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

This site sets only the cookies needed to keep you signed in to your account. There are no advertising cookies, no analytics trackers, and no third-party pixels. If you never sign in, no cookies are set beyond what is required to load the page.

Our students are typically in grades 9 through 12. Where a student is under 18, we expect a parent or guardian to be the one who enquires and who agrees to the service, and a parent or guardian may ask to see or delete anything we hold about their child at any time. The service is not directed at children under 13 and we do not knowingly collect their information.

Enquiries are kept while we are in contact and for a reasonable period afterwards in case you come back to us. Student accounts and their practice history are kept for as long as the account is active. Ask us to delete any of it and we will, except where we are required to keep records.

Email theivytrack@gmail.com to ask what we hold about you, to have it corrected, or to have it deleted. We will respond as promptly as we can.

If this policy changes we will update the date at the top of the page. Material changes affecting current families will be sent by email.