Privacy Policy — Is Social Security Worth It?

Millionaire Online Education, LLC ("we," "us," "our") operates the "Is Social Security Worth It?" application (the "App"), an educational government policy modeling tool. This policy explains what we collect, why, and what rights you have.

2.1 Information you give us

• Email address — required to create an account
• Inputs you enter into the model — e.g., birth year, income, retirement age, investment selections. These are assumptions you type in, not data retrieved from any financial institution.
• Saved scenarios — if you choose to save a scenario, we store the inputs and settings you saved.

2.2 Information collected automatically

• Account and access level (Free or Supporter), and, for Supporters, your Supporter term (1-Year, 3-Year, or 5-Year), access-expiration or next-renewal date, and auto-renewal status
• Approximate geolocation at signup (derived from IP address — country/region level)
• Usage analytics, including which tabs you visit, which preset scenarios you select, and aggregate conversion metrics (e.g., free → paid upgrades)
• Technical data such as browser type, device type, and IP address
• Cookies and similar technologies — see Section 6

2.3 Payment information

Payments are processed by Stripe. We do not receive or store your full payment card number. We receive from Stripe a customer identifier, transaction and subscription status, subscription and price identifiers, renewal and expiration dates, and related metadata needed to grant, renew, and manage access to what you purchased. You manage your payment method and cancel auto-renewal through Stripe's billing portal.

2.4 What we do NOT collect

• Your Social Security Administration earnings record or SSA account credentials
• Your bank, brokerage, or retirement account balances or credentials
• Any real financial account data whatsoever

All financial figures in the App come from values you type in. The App has no connection to any financial institution or to SSA.

The App includes an AI Assistant named "Sophie", accessible to administrators only for internal testing and development purposes. Sophie is not available to general users, and no AI Assistant conversation data is collected from general users.

If you are an administrator using Sophie, your messages and the Assistant's responses are processed by third-party large-language-model providers through our platform provider, Base44 (operated by Wix.com Ltd.). These providers currently include OpenAI and Anthropic. You can delete your conversations using the "Delete My Data" feature in your Account settings.

Please do not enter Social Security numbers, account credentials, or other sensitive identifiers into the Assistant.

• To create and manage your account and tier access
• To process purchases and verify entitlements
• To operate the model and save your scenarios
• To analyze usage and improve the App's features, accuracy, and design
• To measure business metrics (e.g., how many free users upgrade)
• To communicate with you about your account, purchases, or material changes
• To detect, prevent, and address fraud, abuse, and security issues
• To comply with legal obligations

We do not sell your personal information, and we do not sell, rent, or license our email list to third parties.

We share it only with:

• Stripe — payment processing
• Base44 (operated by Wix.com Ltd.) — our application platform and hosting provider, which processes your data on our behalf as a service provider under a Data Processing Addendum. Base44 uses sub-processors (including cloud hosting, email delivery, analytics, and the AI service providers below) to deliver the service.
• AI service providers (OpenAI, Anthropic) — to generate responses from the "Sophie" AI Assistant, and associated logging providers, all as sub-processors through Base44 (see Section 3). Only applicable when Sophie is in use.
• Advertising partners — Google LLC (Google AdSense), for users on the Free level only (Supporters are ad-free) (see Section 6)
• Legal authorities — where required by law, or to protect our rights, safety, or property
• A successor entity — in connection with a merger, acquisition, reorganization, bankruptcy, or sale of all or substantially all of our assets. In such a case, your information may be transferred to the acquiring entity as a business asset. Any successor will remain bound by this Privacy Policy unless and until it provides you notice of a change.

These providers act as our service providers / processors: they are contractually restricted to using your data only to provide services to us, and are not permitted to sell it or use it for their own purposes.

6.1 Essential cookies

We use cookies and local browser storage necessary to operate the App — for example, to keep you signed in and to remember your interface preferences (such as your last scenario and chart settings).

6.2 Analytics

We use analytics to understand how the App is used and to improve it.

6.3 Advertising

Advertising is active on the App for users on the Free level. Supporters are not shown ads.

• We use Google AdSense, operated by Google LLC, as our advertising partner. Google is a third-party vendor that uses cookies and similar technologies to serve ads based on your prior visits to this site or other websites.
• Google's use of advertising cookies enables it and its partners to serve ads to you based on your visit to our site and/or other sites on the Internet.
• You may opt out of personalized advertising by visiting Google's Ad Settings at adssettings.google.com or aboutads.info.
• You may also opt out through the Network Advertising Initiative opt-out page at optout.networkadvertising.org.
• Our advertising partner's use of your information is governed by their own privacy policies.
• Where required by law, we present a consent mechanism before setting non-essential advertising cookies. The App is not intended for EU/UK/Swiss users and we restrict access from those regions (see Section 10).
• We provide a "Do Not Sell or Share My Personal Information" link in the footer of every page, in compliance with the California Consumer Privacy Act (CPRA).

We retain your account data for as long as your account is active. We retain purchase records as long as required for tax, accounting, and legal purposes (typically 7 years).

You may delete your account data at any time using the "Delete My Data" feature in your Account settings. This permanently removes your saved scenarios and associated account data. Some records (e.g., transaction records) may be retained where required by law.

You may also request deletion of your account and associated data by emailing us at email@issocialsecurityworthit.com with subject line "Privacy Request." We will process verified deletion requests within 30 days. Some records (e.g., transaction records) may be retained where required by law.

Data is transmitted over encrypted (HTTPS) connections and stored in an access-controlled database. Data and automated backups are encrypted at rest and in transit. Our platform provider maintains SOC 2 Type II and ISO 27001 certifications, and access is restricted to authorized personnel.

Payment card data is handled entirely by Stripe; we never receive or store full card numbers.

Despite these measures, no system is perfectly secure. We encourage you to use a strong, unique password and to contact us immediately if you suspect unauthorized access to your account.

This App is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have inadvertently collected such information, we will delete it promptly.

This App is intended for users in the United States. Access from the European Union, United Kingdom, and certain other jurisdictions is currently restricted at the network level due to the complexity of applicable data protection laws (including GDPR and UK GDPR). If you believe you have been incorrectly blocked, contact us at email@issocialsecurityworthit.com.

Depending on your location, you may have the right to:

• Access the personal information we hold about you
• Correct inaccurate personal information
• Request deletion of your personal information
• Opt out of the sale or sharing of your personal information (see our Do Not Sell page)
• Withdraw consent where processing is based on consent

To exercise any of these rights, use the self-service tools in your Account settings or contact us at email@issocialsecurityworthit.com with subject line "Privacy Request." We will respond within 30 days.

California residents: Under the CPRA, you have the right to know what personal information we collect, to delete it, to correct it, and to opt out of its sale or sharing. We do not sell your personal information. For CPRA requests, use the contact above.

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy in the App and updating the "Last Updated" date above. Continued use of the App after the effective date of a material change constitutes your acceptance of the revised policy.

Privacy questions or requests? Contact us:

Millionaire Online Education, LLC

email@issocialsecurityworthit.com