Privacy policy
Fledgy AI is operated by Metacognition Labs LLC. Last updated 4 August 2026.
This is a template, not legal advice. It describes how the software actually behaves. Before operating Fledgy AI with real students you must have it reviewed by a lawyer, particularly for FERPA, COPPA, GDPR and UK GDPR obligations, and for state student-privacy laws.
1. Who we are
Metacognition Labs LLC operates Fledgy AI: a college admissions planning platform for students and school counselors, and a marketplace where students find work and organisations recruit them. Contact us through the address published on our site.
2. What we collect
You give us
- Account: name, email, role. Passwords are held by Clerk, our authentication provider, and never reach us.
- Profile: legal and preferred name, phone, address, citizenship status, school, graduation year, GPA, class rank, intended major.
- Application data: college list, essays and drafts, activities, honors, recommenders, financial aid items, test scores, reminders.
- Documents: anything you upload to your vault, which may include test score reports and identity documents.
- Transcripts: if your school uses Fledgy AI, your counselor may file transcripts against your record. These are visible to your school and to us, and not to you through the product. Ask your school for a copy the way you would otherwise.
- Marketplace: listings, purchases, seller profile if you publish one.
- Listing photo: if you are a premium member and choose to upload one, a photograph of yourself shown on your Open to Work listing. It is served only while that listing is published and your subscription is active, and only to signed-in users.
- Organizations: if you list one, its description, links, group invite, contact email and any logo you upload; if you apply to one, the profile sections named on the apply screen.
- Admitted groups: admit letters and university email addresses submitted for verification, group messages.
We generate
- Session cookie, last-active timestamp, streak count, XP and badge records.
- Derived progress figures shown to you and, if you join a school, to your counselor.
3. Legal basis and children
Fledgy AI is intended for secondary school students, many of whom are minors. Where a school deploys Fledgy AI, the school acts as the data controller for its students' records and we process on its behalf. Where a student signs up independently, we rely on consent.
We do not knowingly collect data from children under 13. If you believe a child under 13 has an account, contact us and we will delete it.
Recruiting, and what it means for a minor
Fledgy AI puts students and organisations in contact with each other. That is the point of the jobs board and the Open to Work directory, and it is also the part of the product that carries the most risk, because most students here are under 18 and the organisations are adults.
- Being visible is opt-in and reversible. Your Open to Work listing is off until you publish it, and unpublishing removes you from the directory immediately.
- Applying is what shares your profile. Nothing is sent to an organisation until you apply or publish. Essays, documents, financial aid and counselor notes are never included.
- Messages stay on Fledgy AI so that replying does not require handing an organisation your email address. We can see them; that is the trade.
- We do not vet organisations. Anyone with an account and a payment can list. Tell an adult you trust before agreeing to meet anyone in person, and never send money or bank details to an organisation you met here.
4. Who can see your data
| Party | Can see | Cannot see |
|---|---|---|
| You | Everything in your account | - |
| Your counselor (if you joined a school) | Progress counts, college list, activities, honors, recommender status, GPA, essay prompts and status | Essay draft text, documents, credits, marketplace activity, admitted groups |
| Contributors you invite | College list, activities, honors, essay drafts, and comments if granted | Documents, credits, your ability to edit anything |
| Other students | Only what you publish: a seller profile, a marketplace listing, or a group intro you opted into | Everything else |
Your profile is private by default. Nothing about you is visible to other users unless you explicitly publish a seller profile or opt into a group directory. Revoking a contributor ends their access immediately.
5. Artificial intelligence
We are disclosing this explicitly because you should know.
AI was used to build Fledgy AI
This product, its application code, database schema, written guidance, and the curation of its opportunity and awards catalogs, was developed with substantial AI assistance. Catalog entries were assembled from an AI model's knowledge of real programs and have not been individually verified against their official sources by a human. Every entry links to its official page so you can check. See Data & accuracy.
Your data is not sent to AI models
At runtime, no student data is transmitted to any AI or language model. There is no AI inference in the product. Features that may appear AI-driven are not:
- The essay draft checker is regular expressions and arithmetic running in your browser.
- Essay archetype detection is pattern matching against the prompt text.
- The bullet auditor is keyword and digit detection, client-side.
- Superscore and readiness calculations are arithmetic.
Your essays, documents, scores and messages are never used to train any model.
Your consent
By creating an account or using Fledgy AI, you consent to our use of artificial intelligence as described in this section. That means: AI was used to build the product and to assemble its catalogs, and you accept that catalog entries, guidance and generated documents may contain errors that a human has not individually checked.
What you are not consenting to, because it does not happen: your data being sent to a model, used for training, or processed by AI at runtime. If we ever change that, it will not be done quietly under this clause. We will say so here, date the change, and ask again.
If you are not comfortable with this, do not use Fledgy AI for anything you would not want an unverified source to touch, and check every deadline, requirement and figure against the official page it links to. That is good practice regardless.
6. Where data lives
Application data, including uploaded documents, is stored in the application's own database.
Current limitation: uploaded documents are stored unencrypted and protected by access control rather than encryption at rest. Do not upload anything you would not want restored from a database backup. Encryption at rest, retention policies and audit logging are required before any production deployment handling real student records.
7. Third parties
Clerk provides authentication. Your email address, name and sign-in activity are processed by Clerk in order to create and verify your session, and passwords, verification codes and any multi-factor secrets are held by Clerk rather than by us. This is a required processor: you cannot use Fledgy AI without it.
Beyond that, Fledgy AI makes no third-party requests by default. Optionally, an operator may enable:
- Resend: only when a recommender email is sent, and only that message and its PDF attachment.
- Self-hosted logos: disabled unless configured. We deliberately do not use a third-party logo API, because that would reveal which universities you are considering.
We do not use advertising networks, analytics trackers or third-party cookies.
8. Cookies
Session cookies are set by Clerk and are strictly necessary for login. Fledgy AI sets one cookie of its own, ud_role_intent: it remembers for one hour whether you clicked “create a counselor account” or “list your organization”, so the sign-up screens show you the right thing. It holds no personal data and is deleted as soon as you finish signing up. There are no tracking or advertising cookies.
The personal branding checklist uses your browser's local storage and never reaches our servers.
9. Your rights
Depending on where you live you may have the right to access, correct, export, delete or restrict processing of your data, and to object or withdraw consent. Contact us to exercise any of these. Deleting your account cascades to all associated records.
Current limitation: account deletion is not yet self-serve, and deleting the Clerk account does not automatically remove the Fledgy AI record. Contact us and we will do it manually. A self-serve export and erase flow is required before any production deployment.
Where your school is the controller, direct requests to your school; we will assist them.
10. Retention
Account data is retained while your account is active. Admit letters are retained only as long as needed to verify a claim. On deletion, associated records are removed by cascade; backups age out on their own schedule.
11. Changes
We will post changes here and update the date above. Material changes affecting how we use your data will be notified in-product.