LegitFuture Privacy Policy

Effective Date: January 12, 2026

1. Introduction

Hackworth Labs LLC ("Hackworth Labs," "we," "us," or "our") operates LegitFuture, an AI-powered college counseling platform. We are committed to protecting the privacy and security of our Users, with particular attention to the Students who use our platform.

This Privacy Policy describes how we collect, use, disclose, and protect information when you use the LegitFuture platform and associated services (collectively, the "Platform"). It also explains your rights regarding your information and how to exercise those rights.

By using the Platform, you consent to the practices described in this Privacy Policy. If you do not agree with this Privacy Policy, please do not use the Platform.

2. Scope and Applicability

This Privacy Policy applies to all Users of the Platform, including Students, Guardians, Counselors, and Administrators. Certain sections address specific User types where data practices differ.

Students access the Platform through participating Organizations (educational foundations, school districts, or similar entities). Organizations are responsible for obtaining appropriate consent from Guardians for Student participation in their programs, which includes use of the Platform.

3. Definitions

The following terms have the same meanings as defined in our Terms of Use:

• Student: An individual who accesses the Platform to receive college counseling services through Yuri.
• Guardian: A parent or legal guardian of a Student who has been granted access to the Platform's family portal.
• Counselor: An individual affiliated with an Organization who is authorized to access the Platform's counselor dashboard.
• Administrator: An authorized representative of an Organization who manages the Organization's use of the Platform.
• Organization: An educational foundation, school district, nonprofit, or other entity that has contracted with Hackworth Labs to provide the Platform to Students.
• Yuri: The AI-powered counseling assistant integrated into the Platform.
• Flare: An automated notification generated when Yuri detects topics of concern requiring human attention.

4. Information We Collect

4.1 Information Provided by Users

4.1.1 Student Information

• Account information: name, email address, date of birth, school, grade level
• Academic information: GPA, test scores (ACT/SAT), courses taken, extracurricular activities
• College planning information: colleges of interest, intended major, application status, deadlines
• Program-specific information: scholarship applications, financial aid form status (e.g., FAFSA completion), program requirements (e.g., TN Promise service hours)

4.1.2 Guardian Information

• Account information: name, email address, phone number
• Relationship to Student

4.1.3 Counselor and Administrator Information

• Account information: name, email address, title, organizational affiliation
• Role and permissions within the Platform

4.2 Information Generated Through Platform Use

4.2.1 Engagement Metrics

We collect information about how Users interact with the Platform, including session frequency, last active date, features used, and time spent on the Platform.

4.2.2 AI-Derived Signals

When Students interact with Yuri, the Platform extracts and stores academic planning signals—such as expressed interests, colleges discussed, questions asked, and progress toward milestones. These signals are used to personalize the Student's experience and track their college planning journey.

4.2.3 Progress and Milestone Data

We track Student progress on applications, financial aid forms, program requirements, and other college planning milestones.

4.3 Information Collected Automatically

• Device information: device type, operating system, browser type
• Log data: IP address, access times, pages viewed, actions taken
• Cookies and similar technologies: We use cookies and similar technologies to maintain sessions, remember preferences, and understand Platform usage. See Section 11 for more information.

4.4 Information We Do NOT Collect or Retain

5. How We Use Information

We use the information we collect for the following purposes:

5.1 Providing and Personalizing the Platform

• Delivering AI-powered college counseling through Yuri
• Personalizing recommendations and guidance based on Student interests and progress
• Tracking progress toward college planning milestones
• Providing dashboards and reports to Counselors and Guardians

5.2 Supporting Student Safety

• Operating the Flare system to alert designated Organization personnel when Yuri detects topics of concern (see Section 7 for details)

5.3 Communication

• Sending deadline reminders and action item notifications
• Providing important updates about the Platform
• Responding to inquiries and support requests

5.4 Platform Improvement

• Analyzing usage patterns to improve Platform features and user experience
• Developing new features and services
• Conducting research to improve educational outcomes (using aggregated, de-identified data)

5.5 Security and Compliance

• Protecting the Platform and Users from fraud, abuse, and security threats
• Enforcing our Terms of Use
• Complying with applicable legal requirements

6. How Yuri Processes Conversations

Understanding how Yuri handles Student conversations is central to our privacy practices. This section provides transparency about our approach.

6.1 Real-Time Processing

When a Student interacts with Yuri, the conversation is processed in real-time to generate responses and extract academic planning signals. This processing occurs through our AI infrastructure provider (see Section 8).

6.2 Signal Extraction, Not Transcript Retention

From each conversation, we extract and store only the signals relevant to academic planning—such as "Student expressed interest in engineering programs" or "Student asked about FAFSA deadlines." The verbatim text of what the Student said is not retained in our systems.

6.3 Who Can See What

Guardians see: Progress indicators, engagement metrics (session count, last active date, current focus area), academic snapshot, college list, and deadlines. Guardians do not see the content of conversations.

Counselors see: Student dashboards with progress data, analytics, AI-derived academic signals, and Flare notifications. Counselors do not see the content of conversations.

7. The Flare System

7.1 Purpose and Function

The Flare system is a safety feature designed to ensure that Students who may benefit from human support can be connected with qualified adults. When Yuri detects that a conversation involves topics of potential concern—such as indicators of significant distress, safety concerns, or circumstances that may require intervention—the Platform generates a Flare.

7.2 What a Flare Contains

A Flare is a structured notification that includes:

• The category of concern (e.g., "wellbeing concern," "safety concern")
• The date and time the Flare was triggered
• The Student's identity (so the Organization can follow up)

7.3 Who Receives Flares

Flares are delivered to personnel designated by the Student's Organization—typically qualified professionals such as school counselors, social workers, or program coordinators who are equipped to provide appropriate follow-up. Flares are not sent directly to Guardians.

7.4 Organizational Responsibility

The Organization, not Hackworth Labs, is responsible for responding to Flares, conducting any necessary follow-up with Students, and complying with applicable mandatory reporting laws and organizational policies.

8. Information Sharing

8.1 With Partner Organizations

We share information with the Organization through which a Student accesses the Platform, as necessary to provide our services. This includes Student progress data, engagement metrics, AI-derived academic signals, and Flare notifications. We do not share conversation transcripts with Organizations.

8.2 With AI and Infrastructure Providers

We use Google Cloud Platform and Google Vertex AI (Gemini) to power Yuri and provide our services. When Students interact with Yuri, conversation data is processed through these services. Our agreements with these providers include data protection provisions. For information about Google's data practices, please see Google Cloud's Privacy Notice at https://cloud.google.com/terms/cloud-privacy-notice.

8.3 For Legal Compliance

We may disclose information if required to do so by law or in response to valid legal process, such as a subpoena, court order, or government request. We may also disclose information when we believe in good faith that disclosure is necessary to protect our rights, protect your safety or the safety of others, investigate fraud, or respond to a government request.

8.4 Business Transfers

If Hackworth Labs is involved in a merger, acquisition, or sale of assets, User information may be transferred as part of that transaction. We will provide notice before your information becomes subject to a different privacy policy.

8.5 What We Never Share

We do not and will not:

• Sell User data to third parties
• Share User data with data brokers
• Use User data for targeted advertising
• Share conversation content with Guardians
• Share conversation content with any party except as required by law

9. Data Retention

9.1 Conversation Data

Verbatim conversation transcripts are not retained. Conversations are processed in real-time, and only academic planning signals are extracted and stored.

9.2 Account and Progress Data

We retain account information, academic signals, progress data, and engagement metrics for as long as a Student's account remains active and as necessary to provide our services. Organizations may have specific retention requirements under their agreements with us.

9.3 After Account Deletion

When a User requests account deletion, we will delete or de-identify their personal information within a reasonable timeframe, except as required to comply with legal obligations, resolve disputes, or enforce our agreements. Aggregated, de-identified data that cannot be linked to an individual may be retained indefinitely for research and analytics purposes.

10. Data Security

We implement appropriate technical and organizational measures to protect User information against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit and at rest
• Access controls limiting who can access User data
• Regular security assessments
• Secure development practices
• Incident response procedures

No method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

In the event of a data breach affecting your personal information, we will notify you and any applicable regulatory authorities as required by law.

11. Cookies and Tracking Technologies

We use cookies and similar technologies to operate the Platform, maintain your session, remember your preferences, and understand how the Platform is used. We do not use cookies for advertising purposes.

You can control cookies through your browser settings. Please note that disabling cookies may affect the functionality of the Platform.

12. Children's Privacy

12.1 Age Requirements

The Platform is intended for Users who are at least thirteen (13) years of age. We do not knowingly collect personal information from children under 13. If we learn that we have collected personal information from a child under 13, we will delete that information promptly.

12.2 Students Ages 13-17

Students ages 13-17 access the Platform through participating Organizations. Organizations are responsible for obtaining appropriate consent from Guardians for Student participation in their programs, which includes use of the Platform. We provide enhanced privacy protections for minor Students, including the confidentiality of conversation content described throughout this Privacy Policy.

13. FERPA Compliance

When the Platform is used in conjunction with educational institutions or programs subject to the Family Educational Rights and Privacy Act (FERPA), we operate as a "school official" with a legitimate educational interest, or in accordance with the applicable contractual arrangements with the Organization. We use education records only for the purposes for which they are disclosed to us and do not re-disclose personally identifiable information from education records except as permitted by FERPA.

14. Your Rights

Depending on your location and applicable law, you may have certain rights regarding your personal information:

14.1 Access

You may request access to the personal information we hold about you.

14.2 Correction

You may request that we correct inaccurate or incomplete personal information.

14.3 Deletion

You may request that we delete your personal information, subject to certain exceptions (such as legal retention requirements).

14.4 Data Portability

Where applicable, you may request a copy of your personal information in a structured, commonly used, machine-readable format.

14.5 How to Exercise Your Rights

To exercise any of these rights, please contact us at dev@hackworthai.com or through your Organization. We may need to verify your identity before processing your request. For Students accessing the Platform through an Organization, certain requests may need to be made through the Organization.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify Users through the Platform or by other means (such as email). The "Effective Date" at the top of this Privacy Policy indicates when it was last revised. Your continued use of the Platform after any changes constitutes your acceptance of the updated Privacy Policy.

16. Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at: