Privacy Policy

Kompeta (“Kompeta,” “we,” “us”) is an independent study and practice platform for students preparing for HOSA – Future Health Professionals competitive events. This policy explains what we collect, how we use it, and the choices you have. We built Kompeta around the principle of data minimization — we collect only what the product needs to work, and nothing more.

When you create an account and use Kompeta, we collect:

• Account details — your email address (used to sign in) and the password you set, which is encrypted and never visible to us.
• Profile details you provide — your U.S. state and your HOSA chapter or school name (selected from a directory), used to organize your account and connect students to their chapter advisor.
• Your study activity — the events you choose to train, practice and mock scores, daily streaks, and term-mastery progress. This powers your dashboard and progress tracking.
• Billing information (paid plans only) — handled entirely by our payment processor, Stripe. We store only Stripe’s reference IDs for your customer and subscription. We never see or store your card number.
• Optional feedback — anything you choose to submit through in-app feedback.

To keep students’ data exposure low, Kompeta does not collect or store:

• Grades, transcripts, GPAs, or other official school records
• Social Security numbers or government ID numbers
• Dates of birth or home addresses
• Health, medical, or disability information
• Payment card numbers (these go directly to Stripe)

• To operate your account and show your dashboard, progress, and readiness
• To enforce plan limits and process subscriptions
• To connect students with their chapter advisor (advisor dashboards show roster activity, not personal records)
• To respond to support requests and improve the product
• To send essential account and billing emails

We do not sell your personal information, and we do not use it for third-party advertising.

We rely on a small set of trusted vendors to run the service. They process data only to provide their service to us:

• Supabase — database, authentication, and hosting of account data.
• Vercel — application hosting and delivery.
• Stripe — payment processing (PCI-DSS Level 1 certified).
• Resend — transactional email delivery.

• All traffic is encrypted in transit over HTTPS, with HSTS enforced.
• Data is stored in a managed database with encryption at rest.
• Row-level security restricts every account to reading only its own data — enforced by the database itself.
• Sensitive fields (plan, billing, quotas) can only be changed by validated server processes, never directly from a browser.
• Passwords are salted and hashed by our authentication provider; we never store them in plain text.

Kompeta is a student practice tool, not a school record system. We intentionally avoid handling FERPA-protected education records: we do not ingest or store grades, transcripts, or official student records. A student’s practice activity stays within their own account. Where we work with schools (advisor dashboards and pilot schools), the school controls its own roster, and advisors see only chapter study activity — never protected education records. If your school requires a specific data agreement, contact us at the address below.

Kompeta is intended for HOSA members in secondary (high school), postsecondary, and collegiate divisions. It is not directed to children under 13. If you believe a child under 13 has created an account, contact us and we will remove it.

• You can view and update your state and chapter from your account settings.
• You can cancel a paid subscription at any time from the billing portal.
• You can request access to, or deletion of, your account and associated data by emailing us. We will delete your account and study data on request.

We keep your account data for as long as your account is active. If you delete your account or ask us to, we remove your profile and study data. Limited billing records may be retained by Stripe as required for financial and legal compliance.

We may update this policy as the product evolves. When we make material changes, we will update the “Last updated” date above. Continued use of Kompeta after changes means you accept the updated policy.

Questions about your privacy or this policy? Email support@kompeta.app.