Privacy policy

• Account: your email address and a hashed password.
• Profile: your major, catalog year, graduation year, degree length, and the requirement checkboxes you tick in the audit.
• Plan: the courses and placeholders in each quarter, and each course's status (planned, in progress or completed).
• Prior credit: AP exams and scores, transfer courses and other credit you enter.
• Schedules: the class sections you save for a quarter.
• Grades: only if you turn on “Import grades” when importing a transcript. It is off by default.

We don't ask for your NetID, student number or UW password, and the site never signs in to any UW system on your behalf.

When you import an unofficial transcript, our server reads it in memory to pull out the course list, then discards it. The file and its text are never written to disk, logged or stored, and the name and student number on it are thrown away. You review the result first, and only the courses you confirm are saved.

Other users can't see your data: the database only lets each account read its own rows. Passwords are hashed and can't be read by anyone.

We never sell your data, share it for advertising, or use it to train AI models.

• Supabase hosts the database and handles sign-in. Data is stored in the United States (US West).
• Vercel hosts the website and API.
• Resend delivers account emails, such as confirmations and password resets.

These providers process your data only to run the site.

• Sign-in cookies keep you logged in. The site doesn't work without them.
• Your browser's local storage remembers interface choices on that device: theme, panel sizes, collapsed sections and schedule section picks. They never leave your device.

There are no analytics, advertising or tracking cookies.

• Export: download everything listed above as JSON from the Account page.
• Delete: deleting your account on the same page immediately and permanently removes your account and all of its data from the database.
• Correct: you can edit or remove anything in your plan at any time.

Our hosts keep standard request logs (such as IP address, time and page) for a short period to debug problems and stop abuse. They do not include your plan or transcript. Deleted data may remain in our hosts' backups until those backups expire.

All traffic is encrypted in transit, and the database is encrypted at rest by our host.

The site is meant for college students and is not directed at children under 13.

If this policy changes in a way that matters, we'll update this page and the date at the top. Questions or requests: rchhab08@uw.edu.