Privacy Policy
Last updated: June 14, 2026
Who we are
No Soup Sandwich (“NSS,” the “Service”) is a military-preparation platform operated by BoulevardLabs(“BoulevardLabs,” “we,” “us,” “our”), a company based in the Commonwealth of Virginia, United States. This policy explains how we handle your information across the app at app.nosoupsandwich.com and the website at nosoupsandwich.com. By using the Service you agree to this policy and to our Terms of Service.
Information we collect
- Account: name, email, and authentication data (including sign-in through Google).
- Profile you provide: target branch and pathway, birth year, sex, education, timeline, target dates, and optional background (family service, motivations, citizenship, and income as a bracket only — never an exact figure or financial-account data).
- Progress data: practice and test scores, fitness logs, DEP and officer-packet progress, and MEPS pre-screen checklist responses (a preparation checklist — never medical records).
- Content you submit: messages to our AI coach, essay drafts, and support or contact-form messages.
- Usage, device & log data: feature usage, rate-limit events, IP address, browser/device type, and timestamps, used for security, troubleshooting, and cost control.
We do not knowingly collect Social Security numbers, financial-account numbers, or medical records, and you should not submit them.
How we use your information
We use your information to operate and secure the Service; personalize your readiness guidance and AI coach; gate features by plan; process payments; send transactional and reminder emails; respond to support requests; comply with law; and improve the product. We rely on your consent, our agreement with you (the Terms), and our legitimate interest in running a safe, functional service. We do not sell your personal information, and we do not use it for third-party advertising.
Cookies & similar technologies
We currently use only essential cookies required to sign you in and keep the Service secure — we do not use advertising or cross-site tracking cookies. Because these are strictly necessary, they cannot be switched off without breaking the Service. If we add analytics or other non-essential technologies in the future, we will update this policy and provide a consent choice where required.
How we share information
We share information only as needed:
- Service providers (processors) for cloud hosting and data storage, account authentication, payment processing, AI features, email delivery, and mapping (the recruiter finder). They process data only to provide their service to us, under their own security and privacy terms.
- People you choose — a recruiter or school counselor — only when you explicitly opt in to share, and only the readiness summary you preview first. You can revoke any share at any time.
- Aggregate, de-identified insights — we may share statistics that describe groups, never individuals (for example, how many adults in a region are preparing, or the distribution of practice scores), with partners such as recruiting organizations. These figures are aggregated, stripped of identifying details, exclude minors and income entirely, and hide any group small enough to risk re-identifying someone. This is not personal information and is not a sale of your data.
- Legal & safety — when required by law, to enforce our Terms, or to protect the rights and safety of users or the public.
- Business transfers — if BoulevardLabs is involved in a merger, acquisition, or asset sale, information may transfer as part of that transaction, subject to this policy.
Children & minors
The minimum age to use NSS is 14. The Service is not directed to children under 13, and we do not knowingly collect their information; if we learn we have, we will delete it. If you are under 18 you are a minor: a parent or guardian must consent to your use, all Tier-2 data-sharing options are disabled and cannot be enabled, we never share a minor’s profile with partners, and we never include income information in any export. These protections are enforced at the database level. Parents and guardians can review or request deletion of their child’s information by contacting privacy@nosoupsandwich.com. See our For Parents guide for details.
Your choices & consent
Recruiter visibility, school-counselor aggregate stats, ROTC matching, and the optional “Data-for-Access” program are all opt-in, plain-language, and reversible. Counselors only ever see aggregate cohort statistics, never individual records, unless an of-age student separately and explicitly shares their own progress. You can manage consents anytime in your settings.
Data retention
We keep your information for as long as your account is active and as needed to provide the Service. When you delete your account or ask us to delete your data, we remove or de-identify it within a reasonable period, except where we must retain certain records to comply with law, resolve disputes, or enforce our agreements. Aggregated or de-identified data that cannot reasonably identify you may be retained.
How we protect your data
We use industry-standard safeguards — encryption in transit, access controls, and row-level security so users can only reach their own records. No method of transmission or storage is perfectly secure, but we work to protect your information and to notify you and authorities of a breach where the law requires.
Your privacy rights
Depending on where you live, you may have the right to access, correct, delete, or obtain a portable copy of your personal data; to withdraw consent; and to opt out of the “sale” or “sharing” of personal data or targeted advertising. We do not sell or share personal data for targeted advertising. Residents of Virginia (under the VCDPA), California (CCPA/CPRA), and other states or countries with privacy laws may exercise these rights, and we will not discriminate against you for doing so. To make a request, use your in-app settings or email privacy@nosoupsandwich.com; we may need to verify your identity. If we deny a request, you may appeal by replying to our response, and Virginia residents may contact the Office of the Attorney General.
Where your data is processed
BoulevardLabs is based in the United States and processes data here. If you access the Service from outside the U.S., you understand your information will be processed in the U.S., where privacy laws may differ from those in your location.
Third-party links
The Service may link to third-party sites (for example, official military or recruiting resources). We are not responsible for their privacy practices; review their policies before sharing information.
Changes to this policy
We may update this policy. Material changes will be posted here with a new “Last updated” date, and where the law requires, we will provide additional notice. Continued use after an update means you accept it.
Contact us
Questions or requests? Email privacy@nosoupsandwich.com. BoulevardLabs is the controller responsible for your information.
See also our Terms of Service and For Parents guide.