Privacy policy

What Campus OS stores

• Your account: your email address, your password as a bcrypt hash (never the password itself), your time zone, and your name if you add one.
• Canvas, if you connect it: your Canvas address and access token (encrypted), your courses, assignments, due dates and submission status, and the text of course files, pages and syllabi it imports. Files you upload yourself keep only their text; the file is deleted once the text is read.
• Schoology, if you connect it: your Schoology address and API key and secret (encrypted), your Schoology user ID and time zone, your courses, assignments, due dates, whether you've turned work in, which work is graded, and the text of course files and pages it imports.
• Brightspace or Blackboard, if you connect one: your calendar link (encrypted, since it works like a password for your calendar), and the classes, due dates and exams on that calendar, with any class names you change.
• Gmail, if you connect it: read-only access tokens (encrypted). Each sync reads the inbox messages from the last 60 days that it hasn't seen yet. For school-related messages it keeps the sender, subject, date, a short summary and the message text. For everything else it keeps only the sender, subject and date, so it can skip that message next time.
• Lectures: audio you record in the app or upload, stored in Vercel Blob at a hard-to-guess link, plus its transcript and the notes generated from it. Campus OS uses your microphone only while you're recording, and only after you allow it.
• What you add yourself: notes, schedule, resources, exams, availability, and the flashcards you make on a class's Study tab (with which ones you've marked learned).
• Connected apps, if you connect one (ChatGPT): which app, when you connected it and last used it, and its access tokens as one-way hashes (never the tokens themselves).
• Your plan, if you subscribe: which plan, its status and renewal date, and the ID Stripe or Apple uses for the subscription. Campus OS never sees or stores your card number.

Outside services

• Vercel hosts the app and stores lecture audio.
• Prisma Postgres hosts the database.
• Anthropic (Claude) writes AI answers, lecture notes, flashcards and assignment breakdowns, sorts email, and reads scanned PDFs. It receives only what each feature needs, such as a class's notes and assignments, an email's text, or a lecture transcript. Anthropic doesn't train its models on API data by default.
• AssemblyAI transcribes lecture audio. Campus OS deletes each transcript from AssemblyAI as soon as it's saved in Campus OS.
• Anthropic and AssemblyAI get nothing until you allow AI features, which Campus OS asks before you first use one. You can turn them off any time under Account → AI features; with them off, email is sorted without AI and nothing is sent to either service.
• Resend sends password reset emails. It gets your email address and the reset link, only when you ask for one.
• Stripe processes payments on the website, and Apple processes payments in the iPhone and iPad app. Your payment details go straight to them.
• ChatGPT (OpenAI), only if you connect Campus OS to ChatGPT and tap Allow. ChatGPT can then read, when a request in your chat needs it: your name and email address, your classes (meeting times, professor, room and current grade), assignments with their directions, due dates, status and steps, exams, your notes and lecture notes, and the text of your course files. It can't change anything in Campus OS and never gets your password, your school connections or your Gmail. What it reads becomes part of your ChatGPT conversation, under OpenAI's privacy policy. Disconnect any time under Account → Connected apps; changing your password disconnects it too.
• Google (Gmail) and your school's learning system (Canvas, Schoology, Brightspace or Blackboard) are where your data comes from. Campus OS only reads from them. It can't send, delete or change your email, or change anything in your courses.

Campus OS doesn't sell your data, show ads, or use your data to train AI models.

Google user data

Campus OS's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Gmail data is used only to show you your school-related email and to suggest schedule changes that you approve.

Deleting your data

• Everything: Account → Delete account. This removes your account and all of its data, deletes your lecture audio and any transcripts still at AssemblyAI, and revokes Campus OS's Gmail access at Google. It also cancels a subscription bought on the website. One bought in the app is billed by Apple, so cancel it in your device's Settings → your name → Subscriptions.
• Gmail only: Email → Disconnect deletes the stored tokens and revokes access at Google. You can also remove Campus OS at myaccount.google.com/permissions.
• Canvas only: Connect → Canvas → Disconnect deletes the stored token. Delete the token in Canvas as well, under Account → Settings → Approved Integrations.
• ChatGPT only: Account → Connected apps → Disconnect stops ChatGPT from reading your account. What it already read stays in those ChatGPT conversations; delete them in ChatGPT.
• Schoology, Brightspace or Blackboard only: Connect → that system → Disconnect deletes the stored key or calendar link. To stop the key or link working entirely, reset your API key on Schoology's /api page, or turn off or reset calendar sharing in Brightspace or Blackboard. Classes and assignments already brought in stay in Campus OS until you delete them or your account.

Security

Passwords are hashed with bcrypt. Canvas tokens, Schoology keys, calendar links and Gmail tokens are encrypted with AES-256-GCM. Sessions are stored as keyed hashes, so a copy of the database alone can't sign anyone in. All traffic uses HTTPS.

Contact

Questions or requests about your data: support@campus-os.net

Changes

If this policy changes, the date at the top changes with it.