Legal

Privacy policy

Effective and last updated: October 15, 2026

Admit Path (“we”, “us”), an initiative of the Rouben Malian Memorial Foundation Inc., respects your privacy. The people we serve trust us with sensitive information about their education and goals, and protecting it is central to our mission. This policy explains what we collect through admitpath.roubenmalianmemorial.org, how we use it and the choices you have.

Information we collect

When you take the free Lite assessment: your answers stay in your browser. If you choose to send your snapshot to us, we receive your name, email, your answers and results, your choices about sliding-scale pricing and contributing anonymized data, and whether you indicated that you’re an international student. If you tell the assessment you may need disability accommodations, that choice is used only in your browser to tailor your results. It is never sent to us, even when you send your snapshot.

When you request help from an advisor: your name, email address, phone number (if given), whether you are a student or parent, the path you are interested in, where you are in the process, your target start term, the service you are interested in, whether you would like sliding-scale pricing, and any message you include.

When you request Admit Exchange early access: your name, work email, organization, role, approximate caseload, phone number (if given) and any message.

When you create an account: your email address and, if you add it, your name. We don’t use passwords: you sign in with a one-time link we email to you. If you save items to your account, we store your saved Lite assessment snapshots (your answers, scores and timeline, but never the accommodations choice or accommodation steps), your saved cost planner inputs and results, your messages with our team, your email preferences, and the requests you’ve sent us with the same email address. For each signed-in session we also store when it started and expires and your browser’s user-agent string (which browser and device type you used), so you and we can recognize sessions and spot misuse.

When you subscribe to updates: your email address, when you subscribed and confirmed, and where on the site you signed up.

The cost planner: runs in your browser. Nothing you enter is sent to us unless you choose to save or email a plan.

When you send a request or snapshot: we also store, with that request, your browser’s user-agent string and the approximate country our hosting provider derives from your IP address. We don’t store your IP address with your records.

Technical data: our hosting provider, Cloudflare, processes standard technical information such as IP address, approximate country and browser type to deliver the site and protect it from abuse. To slow down abuse, our forms and sign-in keep short-lived counters keyed to a one-way hash of your IP address or email address; they expire automatically within 24 hours.

Analytics: we use Cloudflare Web Analytics to count page views and measure how quickly pages load. It doesn’t use cookies or local storage and doesn’t build a profile of you. A small script from static.cloudflareinsights.com reports the page address, the referring page, your browser and device type, approximate country and page-load timings to Cloudflare, which shows us only aggregated statistics. We don’t use any other analytics or advertising tools.

Fonts: we host our fonts ourselves, so loading a page doesn’t contact Google or any other font service.

The iPhone app

The Admit Path iPhone app uses the same account and stores the same information as the website. In addition:

  • Signing in: we email you a one-time code (and a link) instead of a password. After you sign in, the app keeps a session token in your iPhone’s Keychain; we store only a hashed copy, with when the session started and was last used and your app’s user-agent. App sessions last up to 180 days from when you last used the app. You can sign out, or see and end your other sessions, in the app.
  • Notifications: if you allow notifications, we store your device’s push token, your app version, language and time zone, and the notifications we send you. Notifications are sent through Expo’s push notification service (Expo, by 650 Industries, Inc.), which acts as our service provider and passes them to Apple. Notifications only say that you have a new message, an update on a request or upcoming deadlines; they never include what you or our team wrote. You can turn each kind off in the app or in your iPhone’s settings.
  • On your iPhone only: deadline reminders the app schedules on your phone, and events you add to your calendar from the app, stay on your device. As on the website, the disability accommodations choice in the assessment is never sent to us.
  • Deleting your account: you can download your data or delete your account from the app’s settings, as on the website. Deleting your account also deletes your devices’ push tokens and notifications. See our support page.

How we use it

  • To respond to your request and deliver the services you choose.
  • To determine sliding-scale eligibility, using the minimum information needed.
  • To run your account: signing you in, saving your items and showing your requests and messages.
  • To send the emails you ask for or need: sign-in links, confirmations of your requests, copies of your results, replies from our team, deadline reminders if you turn them on, and updates if you subscribe.
  • To keep our site and services secure.

We do not sell or rent personal information, and we do not use it for third-party advertising.

Emails and your choices

Deadline reminders and Admit Path updates are optional. Every update includes a one-click unsubscribe link, every reminder includes a link to turn reminders off, and you can change both in your account settings. We only add you to updates after you confirm your subscription, or when you turn them on in your signed-in account. Sign-in links and replies to your requests are always sent because they’re part of the service you asked for.

Cookies and browser storage

We use one essential, secure cookie to keep you signed in for up to 30 days and a second cookie that only tells the site to show “My account” instead of “Sign in.” If you ask to save a snapshot or plan before signing in, we hold it in your browser’s local storage for up to two hours. When you sign in, we ask you to confirm before saving it to your account, and you can discard it instead. We don’t use advertising or third-party tracking cookies, and our analytics (above) use no cookies at all.

Admissions data and our models

If you choose to contribute your admissions outcomes to improve our models, personally identifying information is removed before that data enters any aggregate model. Contribution is always optional.

Confidentiality

We do not reveal the existence of any client relationship without your consent or a court order. Admit Exchange is in early access. When profile sharing with counselors and consultants becomes available, sharing will be your choice, and you’ll be able to withdraw their access at any time.

Sharing

We share information only with service providers that help us operate (for example, web hosting, email delivery and app notifications) under obligations to protect it, or when required by law. If we ever recommend a partner service, it will be clearly labeled, and we will not share your information with that partner without your permission.

Retention and deletion

We keep inquiry information only as long as needed to respond to you and provide services. If you have an account, you can download all of your account data or permanently delete your account at any time from your account settings. Deleting your account removes your saved snapshots, cost plans, messages, requests, subscription, our records of emails sent to you and, if you use the iPhone app, your devices’ push tokens and notifications. Otherwise, records of emails we’ve sent are kept for up to 90 days for security and troubleshooting (this includes the email confirming that your account was deleted). Notification emails about your requests in our team’s inbox, and a backup copy of our records made on October 12, 2026, are not removed automatically; contact us if you’d like them deleted. You can also ask us to access, correct or delete your information at any time by replying to any message from us or by emailing support@admitpath.com.

Children and students under 18

Many of the people we serve are middle and high school students. Accounts, email updates and requests are for people 13 and older: before you create an account, subscribe or send us a request, we ask you to confirm that you’re 13 or older, or that you’re a parent or guardian acting for a younger student. We do not knowingly collect personal information directly from children under 13. For a younger student, a parent or guardian should create the account and complete any form. If you are 13 to 17, please involve a parent or guardian before submitting a form.

If we learn that we have collected personal information from a child under 13 without a parent or guardian, we will delete it. Parents and guardians may contact us at any time at support@admitpath.com to review or delete their child’s information.

Security

Our site is served over encrypted HTTPS connections. Sign-in links expire after 20 minutes and work once, session tokens are stored only in hashed form, and access to submitted information is restricted to authorized staff.

Your rights

Wherever you live, you can ask us to access, correct, export or delete your personal information. If the law where you live gives you additional rights (for example in the European Union, the United Kingdom or some U.S. states), email us and we will respond within the time that law requires. You can also complain to your local data protection authority.

Contact us

For privacy questions or requests, email support@admitpath.com. Admit Path is operated by the Rouben Malian Memorial Foundation Inc.

Changes

We may update this policy from time to time. The date at the top shows when it was last revised. If we make a material change, we’ll note it here and, where appropriate, email account holders.