Privacy Policy

Account Information

When you create an account, we collect:

• Email address
• Password (stored as a secure hash — we never store your plain-text password)
• School name
• Year in college
• Whether you identify as a first-generation college student

User-Generated Content

We collect content you create within the app, including:

• Audio recordings of lectures
• Transcripts and AI-generated summaries of those recordings
• Essay drafts and Socratic tutoring chat history
• Coach conversation history
• Course, assignment, exam, project, and schedule data you enter

We use your information to:

• Provide and operate the SchoolMastery app and its features
• Process audio recordings and generate transcripts and summaries
• Power the AI motivational coach and essay writing assistant
• Personalize your experience based on your academic profile
• Communicate with you about your account

We do not sell your personal information. We do not use your data for advertising.

When you record a lecture, your audio file is transmitted to our servers and stored in our cloud storage. Audio recordings are retained for playback and download through the app. They are not automatically deleted after transcription.

You are responsible for obtaining any required consent from other parties before recording. By using the recording feature, you confirm that you have the right to record in your environment.

SchoolMastery offers an optional feature that connects to your Canvas account to automatically sync your courses and assignment due dates.

What we access

If you choose to connect Canvas, you provide us with a personal access token that you generate yourself within your own Canvas account settings. Using this token, we retrieve a read-only list of your active courses and assignments, including assignment names, due dates, and course names. We do not access grades, submissions, files, messages, or any other Canvas data beyond courses and assignments.

What we don't do

We never write to, modify, or submit anything in Canvas. This connection is one-way and read-only. We do not share your Canvas token or synced course data with any third party.

How your token is stored

Your Canvas access token is encrypted and stored securely. It is used solely to periodically sync your course and assignment information into SchoolMastery. See Section 7 for our general data retention and deletion practices.

Your control

You can disconnect Canvas at any time from Settings. Disconnecting permanently deletes your stored access token from our systems. Previously synced assignments will remain in your SchoolMastery schedule unless you delete them manually.

Institutional data

Because this integration is authorized by you individually (not through your school), it does not involve any institutional agreement with your school or Canvas administrator, and your school does not have visibility into your use of SchoolMastery. Because you authorize this connection yourself and no other students' data is accessed, this feature is designed to avoid implicating FERPA-protected education records belonging to other students.

To provide AI-powered features, your content is processed by the following third-party services:

• OpenAI — audio transcription (Whisper) and text processing (GPT-4o-mini)
• Anthropic (via OpenRouter) — AI coach responses and essay tutoring (Claude)
• OpenRouter — API routing layer for AI model access

Content you submit to these features (audio, text, chat messages) is transmitted to these services for processing. Please review their respective privacy policies:

• OpenAI: https://openai.com/policies/privacy-policy
• Anthropic: https://www.anthropic.com/privacy
• OpenRouter: https://openrouter.ai/privacy

Your data is stored using Supabase, a cloud database and storage platform. We implement reasonable technical measures to protect your information. However, no method of transmission or storage is 100% secure.

We retain your data for as long as your account is active. If you wish to delete your account or request deletion of your data, please contact us at apps@xlsigma.com. We will process deletion requests within 30 days.

SchoolMastery does not use cookies for tracking or advertising. We do not use any third-party analytics services. Session authentication is managed via a secure token stored locally on your device.

SchoolMastery is designed for college students and does not restrict access based on age. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal information, please contact us at apps@xlsigma.com and we will delete it.

Parents or guardians of users under 18 who have questions about their student’s data may contact us at apps@xlsigma.com.

We may update this Privacy Policy from time to time. We will notify you of material changes by updating the “Last Updated” date above. Continued use of the app after changes constitutes acceptance of the updated policy.