Privacy Policy

1. Who we are

ClassMate is an academic productivity and collaboration platform that helps users manage schoolwork, notes, schedules, learning tools, community features, and optional connected services.

2. Information we collect

Account and profile information

• Name, email address, account identifier, and sign-in details through Supabase authentication or connected sign-in providers.
• Profile details you choose to add, such as username, avatar, bio, school, grade, classes, links, interests, and status.

Content you create in the app

• Notes, assignments, events, schedules, posts, comments, messages, shared content, and other study or community content you create or upload.
• Photos, profile images, cover images, and files you upload where those features are available.

Connected service data

• Google account information and Google Calendar-related data if you connect Google features.
• Canvas tokens and Canvas course data if you connect a Canvas account.
• Other third-party integration data only when you choose to connect the relevant feature.

Billing and subscription information

• Subscription status, billing plan, Stripe customer ID, and Stripe subscription ID.
• Payment card details are generally handled by Stripe and are not stored directly by ClassMate when entered in Stripe-hosted checkout or billing flows.

Usage and diagnostic information

• Basic product interaction, engagement, and feature activity data needed to run community analytics and product features.
• Limited performance and usage analytics through services such as Vercel Speed Insights.
• Technical logs and security-related records needed to operate, troubleshoot, and protect the service.

3. How we use information

• To create and manage your account.
• To provide core app functionality like notes, schedules, reminders, profiles, study tools, social features, and subscriptions.
• To sync optional third-party integrations you enable, such as Google or Canvas.
• To process purchases, manage subscriptions, and respond to billing requests.
• To personalize your experience, such as showing your profile, saved content, or subscription features.
• To secure the app, prevent misuse, debug problems, and improve reliability and performance.
• To communicate with you about account, support, security, or service updates.

4. How information is shared

We may share information with service providers that help us run the app, including:

• Supabase for authentication, database, storage, and backend services.
• Stripe for subscription and billing services.
• Google if you choose to connect Google features.
• Canvas if you choose to connect a Canvas account.
• Vercel for hosting, delivery, and limited performance analytics.

We do not currently state in this policy that we sell personal information or share it with third-party advertising networks for behavioral advertising.

A more organized district-facing list of current providers is available at /subprocessors.html.

5. School districts and student accounts

If a school or district wants students to use ClassMate with school-managed accounts, including district Google Workspace accounts, that rollout should happen only after the district completes its own approval, privacy review, and contracting process.

• District-managed student data is intended to support the requested academic service and related support, security, and operations.
• We do not currently state in this policy that student data is sold or shared with third-party advertising networks for behavioral advertising.
• If a district requires stricter student-facing controls, a district-safe deployment can disable community and chat-style social surfaces.

ClassMate publishes a district review packet at /schools.html and a DPA readiness summary at /dpa.html. Final district obligations are governed by the signed agreement and applicable law, not by this policy alone.

6. Data retention

We keep data for as long as reasonably necessary to operate the service, maintain your account, comply with legal obligations, resolve disputes, and enforce agreements. Some connected-service records, backups, logs, or billing records may remain for a limited period after deletion or disconnect requests.

7. Security and incident response

We use technical and organizational measures intended to protect account and app data, but no system can guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials and for using the service responsibly.

District reviewers who need written incident-response, subprocessor, or breach-notification materials can request them through the district-review contact listed below or on /schools.html.

8. Your choices and rights

• You can update profile information inside the app.
• You can disconnect optional integrations such as Google or Canvas.
• You can manage billing through Stripe-backed subscription flows where available.
• You can request help with access, correction, or deletion by contacting us.

9. Children and student use

ClassMate is intended for users who are at least 13 years old. If you are under the age of majority in your jurisdiction, you should use the service with permission from a parent or guardian.

10. Changes to this policy

We may update this Privacy Policy from time to time. The current version will be posted at https://www.classmate.plus/privacy.html with the updated date shown at the top of the page.

11. Contact

If you have questions about this Privacy Policy or want to request account-related privacy help, contact hello@classmate.plus.

District privacy and DPA review requests can also use hello@classmate.plus with the district name and requested review materials.