Dr. Whoo whooknowscollege.com

Privacy Policy

Last updated: September 8, 2026

Dr. Whoo ("Dr. Whoo," "we," "us"), a service operated by Dream Education Consulting, helps students brainstorm and strengthen their college application essays. We take the privacy of students and families seriously. This policy explains what we collect, why, and the choices you have.

Who this service is for

Dr. Whoo is intended for high-school students ages 13–18 working on college applications, and for the parents and guardians who support them. Users must be at least 13 to create an account or submit personal information, and we do not knowingly collect personal information from children under 13. If you are under 18, please use Dr. Whoo with a parent or guardian's knowledge and permission. If you believe a child under 13 has given us information, contact us and we will delete it.

Information we collect

The free Story Starter works entirely inside your browser. The answers you type there are not sent to Dr. Whoo, OpenAI, our database, or an email list. They disappear when you leave or refresh that experience unless your browser itself preserves form data.

Essay and brainstorm content may include sensitive personal information that you choose to share, such as information about health, disability, religion, family circumstances, immigration, or identity. Please do not include home addresses, government identification numbers, financial-account details, medical-record numbers, or other identifiers that are not necessary for essay feedback.

How we use your information

We do not sell your personal information or use your essays to train our own AI model. We use OpenAI's business API to generate feedback. OpenAI states that API inputs and outputs are not used to train its models by default unless the API customer explicitly opts in; we have not opted in.

How AI processing works

When you use an AI-guided feature, the information needed to answer you—including relevant profile details, brainstorm answers, drafts, and conversation history—is sent securely to OpenAI through our server. We configure Responses API requests with storage disabled, so we do not ask OpenAI to retain response application state. OpenAI may still retain API content in abuse-monitoring logs for up to 30 days under its standard API data controls, unless a shorter legally required or approved retention control applies.

Voice input uses speech-recognition features provided by your browser or device. We receive the resulting transcript, not a recording that we intentionally store. Your browser or device provider may process audio under its own privacy terms. You can always type instead.

Service providers we share data with

We use a small number of trusted providers strictly to operate the service. They may process your information only on our behalf:

How long we keep your data

We keep active accounts and saved student content while the account is in use. Unless you ask us to delete it sooner, we may retain account and student-work content for up to 24 months after the last account activity so students can return during an application cycle. Purchase and transaction records may be retained for up to seven years for accounting, tax, fraud-prevention, and dispute-resolution purposes. Routine operational and security logs are generally retained for no longer than 90 days unless an incident requires longer preservation. Backup copies may remain for a limited period until they are overwritten through our normal backup cycle. OpenAI's separate API retention is described in “How AI processing works” above.

Deletion requests

You may ask us to delete your account and content at any time. We will verify that the request comes from the account holder or, when appropriate, the student's parent or legal guardian. We will delete or de-identify the information from active systems unless retention is required for legal, accounting, security, fraud-prevention, or dispute-resolution purposes. We will also address copies within systems we control and instruct applicable service providers when required.

Security

We use industry-standard measures to protect your information, including encrypted connections and access controls. No online service can guarantee absolute security, but we work hard to protect your data and limit who can access it.

Your choices and rights

To make any of these requests, email us at whooknowscollege@icloud.com.

Changes to this policy

We may update this policy from time to time. When we do, we'll revise the "Last updated" date above, and material changes will be reflected on this page.

Contact us

Questions about your privacy? Email whooknowscollege@icloud.com.