Privacy & Terms

1. Information we collect

We collect only what we need to run the planner:

• Account info — email address and password hash, or a Google identifier if you sign in with Google. A birth year for age safeguards, a parent or guardian email when approval is required, and consent choices and timestamps. Optionally a display name and school name.
• Academic data you provide or sync — assignment titles, due dates, class names, grades, test scores, course names, and notes you save.
• Integration tokens — OAuth tokens for Google Calendar, Notion, Canvas, Schoology, and StudentVue so we can read and write the resources you connect. Integration credentials are stored encrypted in the application database and sent to the relevant provider to authenticate the connection, including scheduled synchronization. Hosting and database providers process stored data to operate the service. Disconnecting stops future synchronization; previously imported content remains until deleted.
• Optional reminders data — phone number, carrier (for SMS-gateway delivery), browser push-notification subscription, and a random install identifier for the desktop app, only if you turn reminders on. You can turn each of these off at any time.
• Study and learning records — focus-timer activity, streaks, study progress, tutor conversations, uploaded documents, practice results and preferences used to support your learning. Family learning profiles may include a learner nickname, selected interests or world, grade or skill choices, and reviewed practice evidence. These records are personal data when linked to an account.
• Operational and security information — server and error logs may include account identifiers, IP addresses, browser details, timestamps and error context. They are not necessarily anonymous.
• Optional product analytics and feedback — with analytics permission, route patterns, event counts and limited properties are recorded on our own servers using an account or random visitor identifier. A random identifier is pseudonymous, not anonymous. Optional surveys store answers you choose to submit. We do not use session-replay, screen recording, heatmaps, keystroke loggers, advertising trackers, or retargeting pixels. No third-party analytics script runs in your browser. See the Cookie Policy for the analytics choice.

2. How we use information

We use the data above strictly to:

• Show your assignments and generate personalized study schedules.
• Power AI Tutor responses based on your courses and workload.
• Sync the calendars, task lists, and gradebooks you ask us to.
• Send reminders by browser push, desktop-app notification, email or SMS, only through the channels you turn on.
• Diagnose bugs, prevent abuse and improve reliability.
• Personalize study and practice suggestions from your learning and activity records. These suggestions are not official grades, diagnoses, or decisions about school admission or eligibility.
• Send account and security messages. Optional newsletters require a separate, dated opt-in; declining them does not restrict the planner. Under-13 and unknown-age accounts are excluded from newsletters. You can unsubscribe using the email link or Settings.

We do not sell student data. Ever. We do not use student data to train advertising models, target ads, run retargeting pixels, build advertising profiles, or resell analytics. Learning personalization is used to support study, not advertising. Service providers process the information described below to deliver the product.

3. Data sharing & disclosure

We do not sell or rent your data. We share it only in these limited cases:

• Services you connect — when you link Google Calendar, Notion, or an LMS, IntelliPlan acts as a client of those services on your behalf, using only the scopes you authorize.
• Service providers — hosting, database, email, AI, payment, error-monitoring and communication providers process the information needed for the configured feature. See §7. Provider retention, access and data-use terms depend on the service and account configuration; we do not claim that every provider has zero retention or that every contract has been independently verified.
• People you choose to share with — confirmed Study Buddies receive the limited activity described below. Parent/teacher links use the sharing controls shown to the student. Study-group members can see group content, display names, assigned work and presence. Shared links can be viewed by people who receive them; avoid including sensitive information in shared content.
• Legal compliance — when required by law, valid legal process, or to prevent fraud or imminent harm.
• Schools (FERPA) — see §5.

Optional Study Buddies sharing

Study Buddies is off by default. Before enabling it, each student must read the sharing notice and actively agree. We record the notice version and time of that agreement. Older opt-ins without this agreement stay paused until the student agrees to the current notice. Sending or confirming a request does not enable sharing by itself.

After both students agree and a request is confirmed, each confirmed buddy can see the other's display name, whether they studied today, focus minutes today (time recorded by the focus timer), and the pair's current and longest shared streak, whether both studied today, and whether the streak is at risk. Shared streaks can include recorded study days from before joining or resuming sharing. These numbers can reveal study habits and days off. Buddies can also send limited nudges. Grades, assignments, classes and email addresses are not shared through Study Buddies.

You can use IntelliPlan without Study Buddies. Turning it off immediately pauses activity sharing and stops new nudges; turning it on again requires agreement and resumes sharing with existing confirmed buddies. Removing or blocking a buddy stops sharing with that person. A reminder already queued may still arrive after you turn it off, remove or block a buddy. We cannot erase information someone already saw or saved. Account deletion removes buddy links and nudge records involving that account.

Study Buddies is unavailable to students under 13, even with parental or school authorization, students with unknown age, non-student accounts, and accounts awaiting required parental consent. Student opt-in does not replace required parental consent or the school permission described below.

Where IntelliPlan is used in a school context, student data will not be shared, transferred, or disclosed to any other entity without the explicit written permission of the school district, except as required by the user's own connected integrations or by law.

We will never share, sell, transfer, or otherwise disclose student data to a third party for marketing, advertising, behavioral profiling, or any commercial purpose unrelated to providing IntelliPlan to that student.

4. Students under 13 (COPPA)

The general student-account flow requires parental approval for anyone whose birth year could indicate an age under 13. A Family adult account may also hold a learner profile for supported child learning activities; that profile is separate from an independent student account. An adult must have authority to provide a learner's information. School authorization cannot be inferred from a student's school email or a school internet-use permission.

• During sign-up we ask for a birth year, not a full birth date, and use the youngest possible age for that year. If parental approval is required, a pending account containing signup details is stored and product access is held while a notice is sent to the parent. Opening an email link does not approve or delete the account: the parent must make an explicit choice on the review page. We record the notice version and approval time. Email approval is the current account gate; it is not a claim that an independent identity-verification provider has verified the adult.
• A school may authorize a limited educational use where legally permitted, after receiving notice of the collection, use and disclosure practices and establishing the required arrangement. General permission to use the internet does not establish IntelliPlan-specific authorization. Existing school and parental requirements are not replaced by accepting these terms.
• We collect only the minimum information needed to deliver the service and do not condition participation on disclosure of more than is reasonably necessary.
• Parents may at any time review the personal information collected from their child, have it deleted, or refuse to allow further collection. Contact the address in §13; we respond within 10 business days.
• If IntelliPlan is used with students 13 or younger through a school, each student gets their own individual account. We do not allow shared or class accounts for under-13 students.

5. FERPA & school-supplied data

When IntelliPlan is used in a school context, data you import from an LMS (Canvas, Schoology, StudentVue) may include records covered by the Family Educational Rights and Privacy Act (FERPA). An LMS connection alone does not make IntelliPlan a “school official” under FERPA. That exception depends on the educational institution's authorization, required control over records, and restrictions on use and redisclosure. Until such an arrangement is established, this policy does not claim that status. For authorized school use:

• We use educational records solely to provide the planning and study tools the student requested.
• Use and redisclosure must remain within the school authorization and applicable law. A student's sharing choice alone does not authorize disclosure of school-controlled records.
• We honor district or institutional requests to delete student records promptly — typically within 7 days, never more than 30.
• Districts may request a full data export of records pertaining to their students by emailing the address in §13.

6. Data security

• The production service is intended to be accessed over HTTPS. Local development connections are different; do not send personal data through an untrusted connection.
• We do not store passwords in readable form — only salted bcrypt hashes, which cannot be reversed back into your password. OAuth tokens are stored in an encrypted database column.
• Application administration requires authorized access. Infrastructure access controls, access logs and backup settings must be verified separately with the configured hosting providers.
• Sensitive endpoints are protected against brute force with per-IP rate limits.
• We follow industry best practices but no system is completely secure, and we cannot guarantee absolute security.

7. Third-party services

Depending on configuration and the feature you use, providers can receive account, technical, academic, prompt, document, image or audio information needed for that feature. AI prompts and uploads may contain personal information; do not include information about other people without authority. Model output may be stored with your study records. Provider processing can occur in the United States and other countries.

We do not submit your content for model training as a product feature. Provider data-use commitments must match the contracted service: unpaid consumer or developer services are not interchangeable with an approved student-data processing arrangement. Changing AI providers is not permission to expand data use.

• Google (sign-in, Calendar, Drive, Classroom, optional reCAPTCHA security checks, and Gemini AI where configured) — policies.google.com/privacy
• Anthropic (Claude AI inference) — anthropic.com/privacy
• Groq (configured AI inference, transcription and speech) — Groq data controls.
• Microsoft (connected Outlook and OneDrive) — Microsoft privacy statement.
• Sentry (error monitoring when configured) — Sentry privacy policy.
• Pollinations (optional generated media; receives generation prompts) — Pollinations.
• Jitsi hosting provider (group voice rooms; receives connection and voice information when you join). IntelliPlan records group-room presence, not the voice audio itself. Other participants can still hear or independently record a conversation.
• Notion — notion.so/Privacy-Policy
• Canvas (Instructure) — instructure.com/policies/privacy
• Resend (email and SMS gateway) — resend.com/legal/privacy-policy
• Supabase (database hosting) — supabase.com/privacy
• Railway (hosting) — railway.com/legal/privacy

See the Cookie Policy for the full list of what is stored in your browser, what each item does, how long it lasts, and how to change your choice.

You decide which integrations to connect. Disconnecting an integration in Settings revokes its token locally. We recommend you also revoke access in the provider's own security settings for completeness.

Google Workspace API limited-use disclosure: Our use of any raw or derived user data received from Google Workspace APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

8. Your rights & controls

• Export your data — Settings → Export Data downloads a CSV of your assignments and tasks.
• Disconnect integrations — Settings → Integrations.
• Delete your account — Settings → Account → Delete Account. All associated records are removed within 30 days; backups age out within 90.
• Opt out of reminders — use Settings → Phone & reminders to turn them off. SMS uses an email-to-carrier gateway; replying STOP is not an IntelliPlan-managed unsubscribe mechanism.
• Request a copy of all personal information we hold about you by emailing the address in §13.
• Schools and parents may request deletion or export of student records on behalf of their student; we respond within 10 business days.

9. Data retention & deletion

Account-linked study records are kept to provide the account's features until deleted or no longer needed. Account deletion removes the application records covered by the deletion flow, integration credentials and owned uploads. Group content created for other members may remain after the departing user's ownership and membership links are removed. Contact us if retained shared content includes your personal information.

Email suppression records retain the minimum address information needed to honor an unsubscribe and prevent renewed contact. Payment, security and legal records may need separate retention where required by law. Provider logs and backups follow the applicable service settings; the deletion and backup commitments in §8 remain commitments, not a claim that every provider copy disappears immediately.

Optional product-event retention defaults to 180 days. The current purge runs when an administrator opens the analytics dashboard; an automatic scheduled purge has not been verified. Turning analytics off deletes the event records associated with the current account or visitor identifier. Clearing a cookie alone does not delete server records. Operational error logs are separate from optional analytics.

You can request deletion of your data at any time by emailing the address in §13 or by using the delete account option in Settings.

10. Accessibility

• Text-to-speech — the AI Tutor and lesson views include a “Read aloud” toggle that uses the browser's built-in speech synthesis, controllable from Settings → Accessibility.
• Visual supports — high-contrast mode and large-text mode are available from Settings → Accessibility and persist across sessions; seven color themes are available.
• Reduced motion — “Reduce motion” toggle disables animations; we also honor the prefers-reduced-motion media query automatically.
• Reading-level adjustment — the Tutor and lessons module accept a “Simpler reading level” preference that rewrites explanations at a lower grade level.
• Multilingual support — the Tutor accepts and replies in multiple languages, including Spanish, French, Mandarin, Hindi, and Arabic.
• Keyboard navigation — all primary navigation, the command palette, the scheduler checklist, and modal dialogs are reachable and operable by keyboard alone.
• Screen-reader compatibility — UI elements use semantic HTML and ARIA labels where appropriate.

10a. Cookies & browser storage

We use cookies to keep you signed in and to remember your settings. Optional first-party analytics uses the ip_vid visitor cookie only with analytics permission; signed-in activity can instead be linked to the account. Analytics is off by default and can be declined or withdrawn on the Cookie Policy page. We do not run advertising cookies or third-party analytics scripts.

• Strictly necessary — your sign-in session, the “stay signed in” token, and the cookie that records your cookie choice. These cannot be switched off, because without them there is no sign-in.
• On-device preferences — your theme, accessibility settings, study-session progress and dismissed prompts are kept in your browser's localStorage. Some preferences and study activity also synchronize to your account or are submitted when you use a feature; local storage alone is not a promise that the same information never reaches a server. Browser speech features may depend on browser or operating-system services.
• No advertising cookies — we run no ad tech, no retargeting pixels, and no cross-site tracking of any kind.

The complete list — every name, its purpose, who sets it, and how long it lasts — is on the Cookie Policy page, along with the controls to change your mind. That page is generated from the same list our code checks before storing anything, and is checked by tests. New providers or storage must be reviewed before introduction.

11. School review and authorization

IntelliPlan is seeking permission from Northshore School District and Lakeside. No approval, endorsement, executed school contract or accessibility certification is represented here. A school's general internet permission is not permission for IntelliPlan to process student records.

Before a school deployment, the operator and school must establish the permitted data, purposes, providers, retention, deletion, access, incident response and sharing arrangements. School authorization and restrictions must be enforced in the product; publishing this page is not a substitute for those controls.

The service includes accessibility settings described in §10. Their presence is not a claim of independently audited WCAG conformance. Schools can contact us for a review of the actual features and limitations.

12. Changes to this policy

We will update this policy when our practices change. Existing accounts receive a versioned in-app notice describing material updates. Acknowledging a notice is not a substitute for feature-specific consent or parental/school permission. Before a material change expands how previously collected information is used or disclosed, we will provide the required notice and obtain consent or authorization where required. The operator must separately arrange any email or advance notice required by law, a school contract or prior commitments.

12a. International users and privacy rights

The service is operated from the United States. Depending on your location and the applicable law, you may have rights to access, correct, export or delete your information, restrict or object to processing, withdraw consent, and complain to your local data-protection authority. Contact us using §13; we verify authority to access an account and handle requests within applicable legal deadlines. A parent or school request does not give unrestricted access to another person's records.

Local rules can require parental permission at ages above 13. The US age gate alone does not establish eligibility in every country. International school and child use requires review of local age, privacy, online-safety and transfer requirements. Where applicable, transfers require an appropriate legal safeguard and service-provider agreement; this page does not represent that every international transfer arrangement has already been completed.

12b. Business ownership changes

A proposed acquisition is not permission to sell student data. Any necessary transfer in a merger, acquisition or restructuring must be permitted by applicable law and school agreements, preserve the privacy commitments that apply to the information, and bind the successor to those commitments. Any materially different use requires the notices and permissions applicable to that change. Due diligence should use aggregated or redacted information wherever possible.

13. Contact

Service brand: IntelliPlan. This name does not represent that an LLC has been formed.
Email: uanirudh0811@gmail.com
Parents, school officials, and district reviewers may use the same address for COPPA, FERPA, NSD Digital Resource Review, data-export, and data-deletion requests. We respond within 10 business days.