Privacy policy

This policy explains what information Grade GPS collects, why, who it's shared with, and the choices you have. Grade GPS is built for high-school students, many of whom are under 18, so we collect as little as we can and give you control over all of it. Words in [brackets] are details the Grade GPS team still needs to fill in.

1. Who we are

Grade GPS is operated by [legal name of operator or company], based in [city, state]. You can reach us through the Contact page or at [privacy contact email].

2. Who Grade GPS is for

• Grade GPS is for students who are 13 or older. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has created an account, contact us and we'll delete it.
• If you're under 18, please review this policy with a parent or guardian.
• Grade GPS is something students choose to use on their own. It is not currently provided to students through a contract with their school. If a school or district later offers Grade GPS to its students, a separate agreement with that school will describe how school records are handled.

3. What we collect

Information you give us

• Account: your email address and password. Passwords are stored by our authentication provider in hashed form; we can't see them.
• Profile: your first name, school year, and (optionally) your school's name, preferred study times, and a rough estimate of your daily screen time.
• School work: classes, grading rules, assignments, scores, target grades, study tasks and scenarios you create or confirm.
• Files and notes: gradebook screenshots, syllabi, lecture recordings, transcripts and notes you choose to upload.
• Feedback: survey answers, feature requests, reports of incorrect results, and quotes you submit for our website.
• Study Rooms: a bunny name you choose (never your real name or school), your bunny's look and room settings, how long you studied, and your own note on how a session went. In a shared room, other members can see your bunny name, look, status and any short goal you choose to share, plus chat messages you post. They never see your grades, school, email or study plan. Reports about rooms or messages are kept for safety review. Rooms are invite-only with no video, audio or direct messages.

Information from services you connect

• If you connect Google Classroom or Canvas, we receive read-only access to your active classes, assignments, due dates, grading categories and your own grades. We store encrypted access tokens so we can import updates when you ask. We don't receive your password, your classmates' grades, or your messages.

Information collected automatically

• Anonymous product events, such as “a grade check-in was confirmed”, stored without your name, email or account ID.
• A “last active” date on your account, used to count active users.
• Basic technical logs kept by our hosting providers (for example IP address and browser type) to run and secure the service.

What we never collect

• Passwords for PowerSchool, Google, Canvas or any other school account.
• Social Security numbers, government ID numbers, or your precise location.
• Your contacts, or your activity in other apps. Focus mode does not monitor your phone.
• Payment card numbers. If you pay for Plus, Stripe collects your card details directly; Grade GPS never sees them.

4. How we use information

• To provide Grade GPS: calculating grade estimates, building your study plan, organizing your notes, generating flashcards and quizzes, and running focus sessions.
• To read screenshots, syllabi and recordings you upload, using the processors listed below.
• To keep accounts secure, prevent misuse, and fix errors.
• To understand, in aggregate, whether Grade GPS helps students (for example, average change in practice-quiz scores), and to decide what to build next.
• To respond to you when you contact us.

We do not sell your information, rent it, use it for targeted advertising, or build a profile of you for any purpose other than running Grade GPS for you. We do not use your files, notes or grades to train AI models.

5. Who we share it with

We share information only with service providers that process it on our behalf, under contracts that limit how they can use it:

• Supabase — database, authentication and file storage (United States).
• Our web host — runs the website [hosting provider].
• Anthropic — only if enabled; reads screenshots and syllabi you upload and organizes notes.
• OpenAI — only if enabled; transcribes audio you upload.
• Stripe — only if you subscribe to Plus; processes payments.
• Google and Instructure (Canvas) — only if you connect them; we request data from them on your behalf.

[The Grade GPS team should confirm each provider's data-processing terms, including whether submitted data is retained or used for model training, and list them here before launch.] We may also disclose information if required by law, to protect someone's safety, or as part of a merger or sale of Grade GPS — in which case this policy, or one at least as protective, will continue to apply.

The Grade GPS team's admin tools show totals (for example, how many classes have been created) and account status. They do not show your grades, notes or files. Feedback and quotes you submit are visible to the team.

6. How long we keep it

• Gradebook screenshots can be deleted automatically as soon as you confirm the scores. Otherwise they stay until you delete them.
• Everything else stays until you delete it or delete your account.
• When you delete your account, your data is removed from our live database right away and from backups within [30] days.
• Anonymous product events are kept for up to [24] months.

7. Your choices and rights

• See and edit your information in the app at any time.
• Delete individual recordings, transcripts, screenshots, syllabi, quotes or feedback, or all of your data at once, from Settings.
• Download a copy of your data from Settings.
• Disconnect Google Classroom or Canvas at any time; we revoke access and delete our stored tokens.
• Delete your account from Settings.
• A parent or guardian can contact us to review or delete information belonging to their child.

Depending on where you live, you may have additional rights under laws such as California's privacy laws. Contact us to make a request; we won't treat you differently for making one.

8. Security

Data is encrypted in transit. Database rules separate each student's data so other users can't access it. Uploaded files are private. Connected-account tokens are encrypted and stored where only our server can read them. No system is perfectly secure; if we learn of a breach affecting your information, we'll notify you as required by law.

9. Changes

We'll post changes here and update the date above. If a change materially affects how we use your information, we'll tell you in the app before it takes effect.

10. Contact

[Legal name], [mailing address], [privacy contact email].