Privacy Policy

Effective date: August 26, 2026

BarFit ("BarFit", "we", "us") provides a Character & Fitness ("C&F") preparation platform for U.S. bar applicants. This Privacy Policy explains what information we collect, how we use it, who we share it with, and the choices you have.

1. Who we are

BarFit is operated as an information and preparation tool. We are not a law firm and we do not provide legal advice. Using BarFit does not create an attorney–client relationship. For privacy questions, contact privacy@barfit.ai.

2. Information we collect

Account information: name, email address, password (stored as a one-way hash), state of application, law school, graduation year, date of birth.
Assessment and questionnaire answers: your responses to C&F intake questions, including disclosures about criminal history, academic discipline, financial responsibility, employment, civil litigation, mental health, substance use, and prior bar admission history.
Disclosure drafts and notes: text you write inside the Disclosure Builder, hearing-prep chat, consistency checker, and reviewer-notes log.
Document uploads: files you upload (for example, your law school application, bar passage letter, court records, supporting documents).
Billing information: handled by Stripe. We receive subscription status, plan, and a Stripe customer ID. We never receive your full card number.
Technical data: IP address, browser type, device info, and basic usage logs needed to operate the service.

3. How your information is used

When you use BarFit's tools, including the Disclosure Builder, Hearing Prep simulator, and AI coaching features, the information you enter is used to generate personalized feedback on tone, clarity, and completeness. Your responses are sent to our AI provider solely to generate that feedback in real time. They are not used to train our AI provider's models, and are not shared with any other third party for marketing or resale purposes.

What we store

We store the documents, disclosures, and responses you save in your BarFit account so you can return to your work across sessions. This data is encrypted in transit and at rest, and is accessible only to you and, where necessary for support or security purposes, authorized BarFit personnel. It is never sold, and never used to build a profile for advertising.

Retention and deletion

You can request deletion of your account and all associated data at any time from Account settings, or by contacting hello@barfit.ai. Upon deletion request, your data is permanently removed from our active systems within 5 business days. Backup copies are purged on our standard backup rotation schedule, no longer than 30 days.

Aggregate, de-identified data

To improve our understanding of the C&F review process and help future applicants, we may analyze de-identified, aggregated patterns across many users' anonymized responses. This aggregate analysis never includes information that identifies you individually, and is never shared in a form that could be traced back to your specific case.

Your control

You decide what to enter. Nothing you write is submitted to a bar authority or any third party by BarFit. You remain in full control of your own application materials at all times.

We do not sell your personal information. We do not use your questionnaire answers, disclosure drafts, hearing-prep chats, or uploaded documents to train AI models.

4. Third-party processors

We share the minimum data necessary with a small number of vetted processors:

Anthropic (AI provider) receives the text needed to generate a coaching response. We pass operator-mode requests with zero-retention settings where the provider supports it.
Stripe processes payments and stores billing details.
Supabase hosts our database, authentication, and file storage in the United States.

We may add or change AI providers as the product evolves. An up-to-date list is available on request at privacy@barfit.ai.

5. How long we keep your data

We keep your account and associated data for as long as your account is active. If you delete your account, we delete your profile, questionnaire answers, disclosure drafts, reviewer notes, and uploaded documents from active systems within 5 business days. Backup copies are purged within 30 days. This is except where retention is required to comply with law, resolve disputes, or enforce our agreements. De-identified analytics may be retained.

If you complete the Quick Scan without creating an account, your questionnaire responses are associated with your session only and are automatically deleted within 30 days. No account or personally identifiable information is retained for anonymous scans.

6. Your rights

Access: request a copy of the personal information we hold about you.
Correct: update inaccurate or incomplete information through your account or by emailing us.
Delete: request deletion of your account and associated data.
Export: request a machine-readable export of your data.
Opt out: unsubscribe from marketing emails at any time. We will still send transactional service emails.
California residents have additional rights under the CCPA/CPRA, including the right to know what categories of personal information we collect, the right to delete, and the right to limit use of sensitive personal information. We do not "sell" or "share" personal information as those terms are defined under the CCPA/CPRA.

To exercise any of these rights, email privacy@barfit.ai.

7. Security

We use industry-standard safeguards including encryption in transit (TLS), encryption at rest, row-level security on our database, and least-privilege access controls. No service is perfectly secure; please use a strong, unique password and notify us if you suspect unauthorized access.

8. Children's privacy

BarFit is intended for adults applying to a U.S. state bar. The service is not directed to children under 18 and we do not knowingly collect personal information from children.

9. International users

BarFit is operated from and hosted in the United States. If you access BarFit from outside the U.S., you consent to the transfer and processing of your information in the U.S.

10. Changes to this policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email or in-app notice and update the Effective date above.

11. Contact

Questions about this policy or your data: privacy@barfit.ai.

← Back to home