Privacy Policy

The short version

• We never sell or rent your personal data, and there are no ads in the app.
• Your grades, notes, study history and AI chats are private to your account.
• Parents, tutors and classmates only see what you choose to share, and you can turn sharing off anytime.
• Your content is not used to train public AI models.
• You can download or delete your data at any time.

Security & privacy FAQ for parents and advisors

Who can see a student's grades and notes? Only the student. Every record is locked to the student's own account at the database level, so other users — including parents, tutors and our own app screens for other accounts — can't read it.

What do parents and tutors see? Only what the student chooses to share. Tutors get the course, relevant syllabus policies and a short brief — never grades, private notes or personal details. Students can pause or remove sharing anytime.

How are Canvas and calendar connections protected? Access tokens are encrypted (AES-256) before they're stored, are never sent back to the browser, and are deleted the moment a student disconnects.

Is student data used to train AI? No. Syllabi and questions are processed only to answer the student's request and are not used to train public AI models.

Is CollegeOS FERPA compliant? CollegeOS is a personal tool students choose themselves, not a school system, so the data is the student's own. We follow FERPA-aligned practices — student control, minimal sharing, no selling of data — and will sign the required agreements with any school that partners with us.

Can a student leave and take their data? Yes. In Settings → Your data, students can download everything or delete their account instantly; payment records are kept only as the law requires.

Is data ever sold or used for ads? Never. There are no ads and no data sales.

What we collect

• Account info: name, email, and sign-in details (including from Google if you choose Google sign-in).
• School info you add: university, major, classes, schedules, syllabi, assignments, exams, grades and transcripts you upload or enter.
• Connected services: if you connect Canvas or a calendar, we read the courses, assignments and events needed to build your calendar. We store connection tokens encrypted.
• Things you create: study sessions, confidence ratings, life tasks, goals, notes, documents and questions you ask CollegeOS.
• Support circle: email addresses of parents, tutors or others you invite.
• Billing: your plan and payment status. Card details are handled by Stripe; we never see or store your full card number.
• Device and usage: basic technical data like browser type, pages visited, and push notification settings, used to keep the service working and secure.

How we use it

• To build your calendar, study plan, reminders and answers.
• To send notifications and emails you've turned on, and important account or billing notices.
• To share updates with people in your support circle, only within the permissions you set.
• To process payments, prevent fraud and keep accounts secure.
• To fix problems and improve CollegeOS using aggregated, non-identifying information.

AI features

When you upload a syllabus or ask CollegeOS a question, the relevant text is sent to an AI model to produce the result. Our AI providers process this data only to answer your request and do not use it to train their public models. AI answers can be wrong — always check important dates and policies against your official course materials.

Who helps us run CollegeOS

We share data only with service providers who need it to run the service, under contracts that limit how they use it:

• Lovable Cloud — hosting, database, file storage and sign-in.
• Stripe — payment processing, tax and fraud prevention.
• Google — optional sign-in and calendar features, and AI processing.
• AI model providers — to process syllabi and answer questions.
• Email and push notification delivery services.
• Canvas (Instructure) — only if you connect your Canvas account.

We may also disclose information if required by law, to protect someone's safety, or as part of a merger or acquisition (in which case this policy would continue to apply).

Students and school records

CollegeOS is a personal tool you choose to use. It is not operated by or on behalf of your school, and the information you add is yours. If a school partners with us in the future, we will follow applicable education privacy laws, including FERPA, for data we receive from that school.

Age

CollegeOS is meant for people 13 and older. We don't knowingly collect data from children under 13. If you believe a child under 13 has an account, contact us and we'll delete it.

How long we keep data

We keep your data while your account is open. When you delete your account in Settings, your personal data and uploads are erased right away (backups roll off within 30 days), except what we must keep for legal, tax or fraud-prevention reasons (such as payment records).

Your rights and choices

• Download a copy of all your data or delete your account yourself, anytime, in Settings → Your data. You can also correct most information directly in the app.
• Turn off notifications, disconnect Canvas or calendars, and stop sharing with your support circle anytime.
• California residents have rights under the CCPA/CPRA, including the right to know, delete, correct, and opt out of sale or sharing. We do not sell or share personal information for advertising.
• People in the EU, UK and other regions may have similar rights under local law, including the right to complain to a data protection authority.

For anything else, or if you can't sign in, email Lisandra@myrebelventures.com. We'll respond within 30 days and won't treat you differently for using your rights.

Security

Data is encrypted in transit, access is restricted to your own account by default, and connection tokens are stored encrypted. No system is perfectly secure, but we work to protect your information and will notify you if a breach affects your data as required by law.

Changes and contact

If we make important changes, we'll tell you in the app or by email before they take effect. Questions? Email Lisandra@myrebelventures.com.