AbroadQ collects the information you provide when you create an account, complete the questionnaire, save profile details, use the screener, upload evidence status information, generate route scores, run simulations, or unlock audits.

This may include account email, age band, citizenship, current country, target countries, education history, work history, language scores, funds readiness, immigration history, cautions, evidence checklist progress, audit content, payment records, support requests, consent history, and product-event analytics if you opt in.

We use your information to provide pathway screening, deterministic readiness scoring, evidence gap tracking, what-if simulations, source-backed audit generation, account support, abuse prevention, product analytics, and service improvement.

Scores and audits are generated from user-provided information, stored rules, source notes, and deterministic calculations. They are planning tools and do not represent an approval prediction.

Document uploads, when used, are stored in private storage and are associated with your profile. The application may create time-limited signed links when you view or manage files.

Do not upload passwords, government portal credentials, forged documents, or documents you are not authorized to use. Uploaded files are not embedded in JSON exports.

If you opt in to AI document extraction, AbroadQ sends the selected document image to the configured AI provider to extract visible planning fields for your review. Raw OCR or AI text is not stored by default; reviewed fields and extraction metadata may be stored.

Generated audits, score runs, score factors, gate results, main review items, missing-input prompts, simulations, roadmap tasks, and source freshness metadata may be stored so you can review a stable result later.

If you update your profile, newer score runs may differ from older audits because your inputs, source freshness, or rule configuration may have changed.

When you unlock a paid audit, we store payment-related records such as amount, status, provider reference, audit reference, and provider event logs.

The current development provider may be replaced by a real payment provider later. When a real provider is used, that provider may process payment details under its own privacy terms.

We record product events such as questionnaire completion, route plan views, audit generation, simulations, source clicks, and payment events to understand usage and improve the service.

Non-essential product analytics are based on your consent preference. Authentication and session management may use cookies or local browser storage through Supabase and the application framework. These are used to keep you signed in and operate the service.

AbroadQ does not currently load Google Analytics, Meta Pixel, retargeting pixels, session replay, or advertising trackers. If those tools are added later, they must be loaded only after the relevant consent choice.

The scoring engine is deterministic. AI is not the source of truth for calculating scores. Future AI features may help explain results, draft summaries, or improve support workflows.

AI document extraction is optional and should only run after user-facing consent. Source-backed notes and official-rule references are used to improve audit transparency.

We record consent history for Terms and Privacy acceptance, student privacy notice acknowledgement, optional product analytics, optional AI document extraction, and optional marketing email.

You can change optional consent choices from Privacy Choices or Settings. Withdrawing consent affects future optional processing; it may not undo processing already completed for account operations, payments, security, support, or legal compliance.

We use service providers to operate the app, including authentication, database, private storage, AI extraction when selected, payments, and transactional email or support workflows.

We do not currently sell personal data, share personal data for behavioral advertising, or use uploaded documents for advertising. We should not share passports, financial evidence, refusal history, criminal or medical cautions, questionnaire answers, or uploaded files with schools, recruiters, agents, lenders, advertisers, or unrelated partners unless a future workflow asks for explicit user consent.

You can export account and profile-owned data from Settings. You can also delete profile-owned records and uploaded document files, while the login account may remain active.

Full account deletion can be requested from Settings and completed through an admin flow. Some records may be retained or detached where required for payment, audit, security, fraud prevention, or legal compliance.

AbroadQ follows a minimization posture for sensitive data. Raw AI extraction text is not stored by default, and retention of optional analytics or extraction metadata should be periodically reviewed.

We use Supabase row-level security, private storage controls, authenticated routes, and service-role separation to limit access to user-owned records.

No online service can guarantee absolute security. You are responsible for keeping your login credentials secure and notifying us if you believe your account has been accessed without authorization.

AbroadQ accounts are available only for users age 13 or older. Students age 13-17 may use AbroadQ for planning, but should avoid uploading documents or sensitive family, finance, legal, or medical details unless a parent, guardian, or trusted adult is helping them.

Your information may be processed using service providers outside your country. For privacy questions, data requests, or account concerns, contact support@abroadq.com.