Privacy Policy

What we collect

• Account info: your email address and password (passwords are handled by our authentication provider, never stored by us in plain text).
• Profile: the name, school, education level, and grading scale you choose to add.
• Academic content: the courses, grades, deadlines, study sessions, and targets you enter.
• Syllabus files: the photos or PDFs you choose to import, used only to extract course and deadline details.
• Reminder history: a copy of the reminders ClassPulse raises — their title, text, and time — so you can reread them in the app after they leave your notification tray.
• Subscription status: whether you have an active subscription, which plan, and when it renews. Payments are processed by your app store, so we never receive your card details.
• Basic app usage needed to keep the service working (for example, error and connection information).

How we use it

We do not sell your personal data, and we do not use your academic content for advertising.

• To calculate your GPA, needed scores, and study plans.
• To sync deadlines and study sessions to your calendar, if you turn that on.
• To send the notifications you enable, and to let you reread them in the app afterwards.
• To give you the features your subscription includes, and to check whether it is active.
• To operate and secure the app, and to improve it using non-Google diagnostic and usage information.

Google user data and Calendar sync

If you choose Sign in with Google, Google shares your email address, Google account identifier, and available profile name with ClassPulse. We use that information only to authenticate you, create and maintain your ClassPulse account, protect the service, and provide support you request.

If you connect Google Calendar, ClassPulse requests the calendar.events permission only so it can create events in your primary Google Calendar for deadlines and study sessions that you explicitly choose to sync. ClassPulse does not read your existing Google Calendar events.

Your Google Calendar access token is stored in secure storage on your device. When you choose to sync an event, the token and the event details are transmitted securely and processed temporarily by a ClassPulse Supabase function, which verifies the connected Google account and sends the event to Google Calendar. ClassPulse does not store the Google access token in its database or application logs. We retain the created Google Calendar event identifier and calendar connection status so ClassPulse can show what has been connected and synced.

Information received from Google APIs is used only to provide the Google sign-in and Calendar-sync features you request. It is not used for advertising, marketing, analytics, profiling, determining creditworthiness, or training or improving generalized artificial intelligence or machine-learning models. Google user data is not sent to OpenRouter, OpenAI, or any other AI provider.

The optional AI syllabus-import feature processes only a syllabus photo or PDF that you separately select. It does not access or process data obtained from Google APIs.

ClassPulse's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Third-party services we rely on

To provide ClassPulse, we share limited data with trusted providers only as needed:

• Supabase — hosts our database and handles authentication and secure storage of your data.
• OpenRouter and the selected AI model provider — when you use syllabus import, the images or PDF you select are sent through OpenRouter to an AI model provider (currently OpenAI) to extract course and deadline details. Review their privacy terms before using this optional feature.
• Google Calendar — only if you connect it, and only to create the deadline and study-session events you explicitly choose to sync. Google API data is handled as described in “Google user data and Calendar sync” above.
• Google and Apple sign-in — only if you choose to sign in that way. They confirm your identity and may share your email address, provider account identifier, and available profile name with us. We never see your password for those accounts.
• Resend — delivers account emails such as your verification code and password resets. It receives your email address to do so.
• RevenueCat — manages subscriptions and tells us whether yours is active. It receives your ClassPulse account identifier and the purchase record from your app store. It does not receive your academic content.
• Apple App Store and Google Play — process the payment itself. They handle your billing details directly; we never see them.

Who at ClassPulse can see your data

Authorised ClassPulse staff can access account data — including your profile, courses, grades, deadlines, and study activity — through an internal admin tool. We look only when there is a reason to: answering a support request you sent us, diagnosing a fault, or investigating suspected abuse. We do not browse accounts out of curiosity.

That access is protected by a separate sign-in that requires a second factor, such as a code from an authenticator app. Whenever a staff member opens an individual account, we record who did it and when, and that record cannot be edited or deleted afterwards.

Two things stay off limits even to staff: the calendar credentials you grant when connecting Google Calendar, and the contents of your notification history.

Device permissions

You can change these permissions any time in your device settings.

• Camera and photos: only used when you scan or choose a syllabus to import.
• Notifications: only used to send the reminders you turn on. Reminders are scheduled on your device rather than pushed from a server, so they are never handed to Apple’s or Google’s push services. A copy is saved to your account so you can reread reminders in the app after dismissing them.

Data retention

We keep your account and academic data while your account is active. When you delete your account from Settings, we delete the account and its associated academic data. We may retain a limited access-audit record, including the account email involved, when needed to investigate security incidents, prevent abuse, demonstrate authorized staff access, or meet legal obligations. We restrict access to those records and keep them only as long as reasonably necessary for those purposes.

Syllabus files are transmitted for extraction when you choose Import Syllabus. ClassPulse does not add the original photo or PDF to your academic account, but OpenRouter and the selected model provider may process or retain request data under their own terms and privacy settings.

Your rights

You can view and edit your data and delete your account and associated academic data directly from Settings. You do not need to email us to delete an account you can access. If you cannot access the app, you can request deletion at https://classpulse.store/support.html#delete-account. Depending on where you live, you may also have the right to request a copy or correction of your data. Contact us and we will help.

Security

We use industry-standard measures, including encrypted connections and secure credential storage on your device, to protect your data. No system is perfectly secure, so we also rely on you to keep your account credentials safe.

Age

ClassPulse is intended for students aged 16 and older and is not directed to anyone under 16. We do not knowingly collect personal data from children under 16. If you believe a child under 16 has provided us data, contact us and we will remove it.

Changes to this policy

We may update this policy as the app evolves. If we make material changes, we will update the date above and, where appropriate, notify you in the app.

Contact

Questions or requests? Reach us at support@classpulse.store.