Privacy Policy

1. Information We Collect

Account Information: When you create an account, we collect your email address for authentication via magic link sign-in.

Device Information: We collect a device identifier (UUID), device name, and platform type to manage your registered devices and enforce subscription device limits.

LMS Credentials: Your Canvas API token and Learning Suite session credentials are stored locally on your device in encrypted secure storage. These credentials are never transmitted to our servers.

Course Data: Courses, assignments, announcements, grades, and documents synced from your learning management systems are stored locally on your device.

Chat Messages: When you use the AI chat feature with our managed service, your messages are transmitted through our servers to third-party AI providers and are stored on our servers until you delete them.

API Keys (BYOK): If you use the Bring Your Own Key tier, your API keys are stored locally on your device in encrypted secure storage and are never sent to our servers. Messages in BYOK mode are sent directly from your device to your chosen AI provider.

2. How We Use Your Information

We use the information we collect to:

• Sync your courses, assignments, and documents from Canvas LMS and BYU Learning Suite
• Provide AI-powered chat assistance about your course materials
• Track usage to enforce subscription tier limits
• Manage your account and registered devices
• Process payments through Stripe
• Sync your settings and chat history across your devices

3. Third-Party Services

We use the following third-party services to operate CourseSync:

• AI Providers (OpenAI, Anthropic, Google): Your chat messages are forwarded to these providers to generate AI responses. Each provider has its own privacy policy governing how they handle data.
• Stripe: Processes subscription payments. We do not store your payment card details.
• Cloudflare: Hosts our backend services.
• Resend: Sends authentication emails (magic links) to your email address.

4. Data Storage & Security

Local Data: Credentials, API keys, and preferences are stored in platform-encrypted secure storage (Keychain on iOS/macOS, EncryptedSharedPreferences on Android). Course data, documents, and embeddings are stored in a local database on your device.

Server Data: Our backend stores your account information, device registrations, usage counts, subscription status, and chat messages. Backend data is hosted on Cloudflare infrastructure.

5. Data Retention

• Chat messages are retained on our servers until you delete them.
• Usage counts reset at the beginning of each billing period.
• When you delete your account, all associated data is permanently removed from our servers, including chat messages, device registrations, and usage history.
• Local data on your device can be cleared at any time through the app settings.

6. Children's Privacy

CourseSync is intended for users aged 13 and older. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child under 13 has provided us with personal information, please contact us at support@coursesync.dev and we will promptly delete that information.

7. Cookies & Session Data

CourseSync stores Learning Suite session cookies locally on your device to maintain your authenticated session. These cookies are stored in encrypted secure storage and are only used to communicate with BYU Learning Suite on your behalf. They are not shared with any third party.

8. Your Rights

You have the right to:

• Access your data through the app
• Delete your account and all associated data at any time via Settings > Manage Account
• Clear local data (courses, documents, chats) at any time via Settings > Data Management
• Remove individual devices from your account
• Opt out of managed AI services by using the BYOK tier, which sends messages directly to your chosen provider without passing through our servers

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by updating the "Last updated" date and, where appropriate, providing notice within the app.