Privacy Policy

Account information: your name and email address, provided when you sign in. Authentication is handled by our platform provider; we do not create or store passwords ourselves.

Policy acceptance: the Terms and Privacy Policy versions you accepted, the acceptance time and method, and your confirmation that you meet the minimum age requirement and reviewed the guardian notice.

Purchase records: which plan you bought, payment status, amount, promotional code when applicable, and access status. Card details are handled by Stripe and do not reach our servers.

Course progress: modules and lessons opened, quiz attempts, scores, and completion status. The free Career Path Finder keeps an unfinished answer draft in the current browser tab for up to 24 hours, until you complete the quiz, start again, or close the tab. If you choose Save my shortlist, the resulting profile, matches, reasons, and tradeoffs are saved in your browser so you can reopen them; your raw answers are not saved there. If you choose Save my shortlist while signed in, a summary of the resulting career matches is also saved to your account, but not your raw quiz answers. Simply viewing results does not create an account or anonymous quiz-result record.

Profile details you choose to enter in Path 360: preferred name, phone number, city and state, profile photo, school name and type, graduation year, academic year, intended or current major, GPA, career interests, and a career goal statement.

Records you build in Path 360: experiences and logged hours, goals and tasks, milestones, opportunities and applications, resume entries, achievements, education, skills and languages, saved resources, and written reflections — including any you mark private.

Files you upload: documents such as certifications and transcripts, along with their file name, type, and size.

Information about other people that you enter yourself: supervisor names, titles, emails and phone numbers on an experience, and contacts you save for outreach. Please share only what you need to, and only what you have a reason to hold.

KORA data: your questions, saved conversations, generated recommendations, and the relevant profile context sent with a request.

Optional first-party usage analytics: page paths, broad page groups, calls to action, selected plan, quiz start and completion, and the quiz's broad top-match group when you allow analytics. We do not send your individual quiz answers, documents, reflections, or contact information in these events. Signed-out consent is stored in your browser; if you later sign in, that choice may be saved to your account.

Checkout attribution: the campaign source, medium, campaign name, content label, search term, first landing path, and external referrer host when those values are available. These fields are sanitized, held in the same browser tab, and attached to the checkout and purchase record if you choose to buy. Full page query strings are not recorded as analytics events.

Ambassador Program records, if you participate: your ambassador code and referral link, school and age band you provide, program-term and disclosure acknowledgement, referral link opens, checkout starts, eligible sale and commission records, commission adjustments, payout status, and administrative audit events. Referred customers are not shown to ambassadors by name or email.

Ambassador payout information, if you request payouts: the PayPal email and account-holder name you submit. If you are under 18, we also collect the parent or legal guardian payout-holder name, relationship, and acknowledgement needed for the payout arrangement. The Ambassador portal does not ask for bank routing numbers, card details, Social Security numbers, or tax IDs.

Most account records are stored using Base44 hosting, database, and file-storage services so they are available when you sign in from another device. This includes your profile, experiences, hours, goals, documents, and reflections.

A few standalone tools keep progress only in your browser. An unfinished Career Path Finder draft uses same-tab session storage for up to 24 hours; use Discard draft and start again to clear it. If you choose Save my shortlist, the free Career Path Finder stores that result in local browser storage; it does not persist your raw quiz answers. Your analytics choice uses local storage and checkout attribution uses same-tab session storage. Clearing browser data resets these browser-only values and does not delete account records.

Give you access to what you paid for, and keep your progress where you left it.

Answer support questions and process refunds or billing corrections.

Improve the material and product when you allow optional usage analytics or product-improvement data in the analytics banner or Privacy Settings.

Measure which campaigns and referral sources lead to completed purchases, reconcile the amount actually paid, and diagnose failed checkout steps.

Operate the Ambassador Program: issue referral codes, measure referral link opens and checkout starts, attribute verified sales, calculate and hold commissions, reverse or hold earnings after refunds or payment disputes, review payout destinations, prevent self-referrals or abuse, and maintain accounting and audit records.

We do not sell your personal information. We do not share it with advertisers. We do not use your reflections or uploaded documents for advertising, and we do not publish them.

Sharing a report happens only when you choose it. Reports are downloaded as PDFs or opened in your email app; you are responsible for attaching the PDF and confirming the recipient before sending.

Privacy settings let you control what any report includes — contact information, profile photo, supervisor names and contact details, unverified hours, and private reflections can each be excluded. Review these before sharing anything with a recommender or admissions office.

Transactional communication: Stripe may send payment receipts, and we may send account, security, support, or notification messages needed for features you enable.

KORA sends your question, relevant saved records, recent conversation messages, and selected planning context through Base44's AI integration to generate a response. Conversations and recommendations are stored with your account. Temporary draft recovery may also remain in the current browser tab for up to 24 hours. You can choose not to use KORA.

AI output can be wrong or out of date. Do not submit patient information, identity or immigration documents, Social Security numbers, passwords, or payment details. Provider retention and other processing are governed by the provider agreements; we do not promise that all AI processing occurs solely on Kraena infrastructure.

Base44 — hosting, authentication, file storage, database, app-level analytics events you allow, and platform-level operational logs and activity signals used to run and secure the service.

Stripe — payment processing. Their privacy policy governs your card details.

PayPal — when an Ambassador payout is actually sent through PayPal, the payout destination and transaction are also subject to PayPal’s terms and privacy practices. Kraena stores the payout destination submitted to us and the provider confirmation needed for our accounting records.

Email delivery providers — used for transactional messages, deletion-request notifications, support, and partnership inquiries.

AI service providers available through Base44 — used when you deliberately submit a request to KORA.

Each provider handles information under its own contractual terms and privacy policy. We limit the information sent to what is needed for the requested service.

Our own staff: administrators can view student accounts, progress, and support history in order to run the platform and answer support requests, and can attach internal notes to an account. Administrative actions are logged.

Path 360 is not designed to store protected health information. Do not enter patient names, medical record numbers, dates of birth, addresses, phone numbers, patient images, or case details that could identify a patient.

When documenting clinical, shadowing, volunteering, scribing, or research experience, describe your role and what you learned without including patient-identifying information.

Download your data: Path 360 → Settings → Data and Account generates a JSON file containing the selected profile, records, and settings and downloads it immediately.

Delete your account: request it from Path 360 → Settings → Data and Account. The request is held for 14 days so you can cancel it. Our team is notified and reviews the request for processing after the cancellation period. You can also use the Contact page. Some purchase records may be retained where tax, accounting, fraud-prevention, or dispute-resolution rules require it.

Choose analytics: signed-out visitors can allow or decline optional app-level analytics in the on-site banner. Signed-in users can change Basic Usage Analytics in Privacy Settings. Purchase, checkout, campaign-attribution, security, and fraud-prevention records are kept separately because they are needed to operate access, reconcile payments, measure campaigns, prevent fraud, and address billing disputes.

You can review your report sharing history and delete individual experiences, documents, reflections, and contacts at any time.

Progress stored in your browser can be cleared through your browser settings.

Deleting your account does not automatically refund unused access; see the Terms for that.

KRAENA LLC is based in the United States. Base44 and other providers may process information in the United States or other countries where they or their subprocessors operate. We do not represent that all information remains exclusively in the United States. Provider agreements and applicable transfer requirements govern that processing.

We use cookies and browser storage for sign-in, preferences, temporary drafts, optional saved quiz results, and checkout continuity. Optional app-level analytics requires an affirmative choice. The Cookie Policy explains these uses and provides a control to change your analytics preference.

Account and purchase records are kept while your account exists and afterwards only as long as needed for tax, accounting, and dispute-resolution purposes.

Ambassador commission, payout, referral-attribution, fraud-prevention, and audit records may be retained as needed to reconcile earnings, payments, refunds, disputes, tax or accounting obligations, and program abuse even if an ambassador account later closes.

Content you create stays until you delete it or close your account.

Report-sharing history is kept with your account so you can review when and where you chose to send a report.

Optional app-level analytics is controlled by your browser choice and Privacy Settings. De-identified or aggregated reporting already produced from earlier activity may remain after you turn analytics off. Same-tab checkout attribution ends with the browser session, while attribution attached to a purchase follows the purchase-record retention period.

Access to account records requires signing in. Base44 provides the hosting, authentication, database, and file-storage infrastructure used by the app.

We use account-level and role-based access rules for application records. Administrative access may be used for support, safety, billing, and platform operations.

No service can promise perfect security. Use a strong, unique password and do not upload patient information or documents you do not need to store online.

If you believe you found a security vulnerability, suspicious account activity, or unauthorized access, use the Contact page and choose Security Concern so the report can be routed appropriately.

If we change this policy materially we will update the date at the top and, where the change is significant, notify account holders by email.