Privacy Policy

Personal AI keys

If you enable your own Google, Anthropic or OpenAI API account, your key stays in tab memory until reload or sign-out. Gradelyy sends it through Supabase to the selected provider to authorize your requests. Your selected provider receives your messages and permitted context under its own pricing, quota, retention and data-use terms. This also applies to source excerpts and generation. Personal connections require explicit activation and provider charges may apply.

Internal AI and chat history

Internal chat, quiz and lesson generation, and course proposals send your submitted text and selected course context through Supabase and OpenRouter to Google Gemma 4 (Google AI Studio). Scores are excluded from automatic context unless you enable sharing for the selected course in that session, including when scores are stored locally. Moodle event titles, dates and your done markers are shared only after you match the calendar course and give separate session permission. Feed links and event descriptions are excluded. Attaching a lesson page includes only a bounded public text excerpt. Saved page markers and practice results are optional under separate session permission; they are not university grades. Chat history is bounded and stored only in this browser, scoped to your account. A limited recent context is sent per request. Gradelyy stores usage counters separately, without messages or grades. Routing excludes providers that collect data for training; providers may retain requests for security under their terms. This is not a promise of zero retention. Clearing local history does not erase provider records. Do not add credentials, confidential material or unrelated personal records. Quizzes and lessons remain drafts until saved or published. Published lessons are public. Proposed courses require review and confirmation. AI answers may contain errors.

Chat attachments

Chat attachments are read on your device. When you send a message or start draft generation, selected text excerpts and file names go through Supabase and OpenRouter to the AI provider. Original file bytes and extracted text stay in memory for the open chat. Chat history may retain file names and AI answers. Check excerpts for personal or confidential data before sending. Provider retention policies apply to submitted text. Generated materials require review, and publishing a lesson makes that lesson public.

Public lessons and external media

Published lessons and their embedded practice quizzes are public, including through shared links. Supabase stores the lesson catalogue, JSON files and a pseudonymous publication-owner identifier for publication limits and ownership. The lesson project is hosted in the Mumbai region. Lesson progress and practice results are stored only in account-scoped browser storage on this device and do not update university grades. Clearing site data can remove that progress. Public lessons may remain available after account deletion. When you load an embedded YouTube or Vimeo player or an external image, your browser connects to that provider, which may receive network and device information under its own privacy policy. Video players load only after you choose to load them. To report a lesson or request removal, include its shared link in a message to olzhasassemgazy@gmail.com.

1. Who operates Gradelyy

Gradelyy is operated by an independent developer. The service currently provides the contact details above; it does not publish a registered company name, business address, or official university affiliation. Contact us with questions about this policy or your information.

2. Information we handle

Depending on the features you use, Gradelyy may handle:

• Account and profile details, such as your authentication-provider user ID, name, email address, nickname, university, major, profile image, and profile visibility settings.
• Course information, including course names and codes, grading structures, university, and whether a course is shared. Course structures marked as shared can be visible to other Gradelyy users at the selected university. Your grades and private syllabus files are not included in shared course listings.
• Academic records, such as scores, locks, targets, and related course preferences. In cloud grade mode, score values are encrypted at rest in your account at the application layer using AES-256-GCM and a server-held key. Connections also use transport encryption. This is not end-to-end encryption, and authorized service operators and systems with access to the key can technically decrypt the scores. Lock status is stored as account-scoped course metadata.
• In local grade mode, only scores and score locks are kept in user-scoped browser storage. Account, profile, course, and other course metadata can still be stored on the service. Browser storage can be lost if you clear site data, use private browsing, change browser or device, or lose access to that browser profile. Keep an export or other backup if the product offers one; do not assume local records are recoverable by Gradelyy.
• Information you add to public-facing features, such as a public profile, follows, shared course structures, or quizzes saved to the shared library. Public profile pages may show profile details, follower/following counts, and collections of shared courses or quizzes. They do not show grades.
• Files and content you provide, including legacy syllabus attachments already saved to the private file store, quiz content, Moodle calendar URLs, and support messages. Selections in the external syllabus-import flow stay in your browser for you to attach in ChatGPT or Gemini. The separate chat attachment flow reads selected documents on your device and sends chosen excerpts to AI when requested.
• Notification information, including browser push subscription details and an in-app notification history. Background push is optional and requires your permission. The browser or operating system controls whether a delivered notification is displayed.
• Basic service and security data may be processed by our hosting, authentication, database, file-storage, scheduler, and AI providers to operate the features you request.

3. How we use information

We use information to authenticate you; provide and maintain your account; save courses and preferences; calculate academic-planning estimates; show the public content you choose to share; operate notifications, quizzes, and integrations you request; secure, troubleshoot, and improve the service; respond to support requests; and carry out account deletion or other requests. We do not use your private grades to populate public profiles, shared course listings, or community analytics.

4. Sharing and visibility

Your grades and private academic records are scoped to your account. Other users cannot retrieve them through public profile or shared-course features. Your profile and content you explicitly publish may be visible to other users, as described in the feature. Shared course visibility includes the course identity and grading structure, not personal grades or attached syllabus files. Please review content before making it public.

We use service providers to operate Gradelyy: Clerk for authentication, Vercel for hosting, Neon for the database, Vercel Blob for previously saved private syllabus attachments, and Cloudflare for scheduled Moodle checks. Internal AI requests are processed through OpenRouter and Google, as described above. When you choose to use ChatGPT or Gemini for syllabus assistance, you share the selected file with that provider yourself. These providers may process information in countries other than your own. Their handling is subject to their own terms and privacy policies.

We may disclose information when needed to protect the service or its users, respond to a valid legal request, or comply with applicable law. We do not sell personal information as a business model.

5. Retention and deletion

We keep information while needed to provide the service and for the purposes described here. You can request account deletion in the app. A deletion request starts a seven-day grace period during which you can cancel it. After the period, the scheduled cleanup removes personal database records, private syllabus files, and the associated authentication identity. Public courses and quizzes may remain available without creator attribution, and an anonymized moderation/audit record may be retained where applicable.

Records removed from the active database may remain in provider backups or other systems subject to their retention periods. Local browser records may remain until you clear that browser's site data.

6. Your choices and requests

You can review and update profile details in the app, choose whether a course or profile content is public where those controls are available, disable browser notifications, clear in-app notification history, and request account deletion. You may contact us to request access to, correction of, or deletion of personal information, or to ask a question. We may need to verify that you control the account before responding. Some records may need to be retained where applicable law requires it or where they are necessary to resolve a security or legal issue.

Privacy and data-localization rules vary by jurisdiction. We will consider requests under the laws that apply to the service and your situation; this policy by itself does not establish legal compliance or promise storage in a particular country.

7. Security

We use account authentication, owner-scoped server access, encrypted connections, and application-layer encryption at rest for cloud-stored score values and transport encryption for connections. No internet service or browser storage can be guaranteed completely secure. Protect your account credentials and device, and tell us promptly if you believe your account has been accessed without permission.

8. Cookies and browser storage

Gradelyy and its authentication provider use cookies and similar browser mechanisms needed to sign in, maintain sessions, and protect the service. The app also uses browser storage for preferences and, in local grade mode, scores and locks. Clearing cookies or site storage may sign you out or remove locally stored information. We do not describe non-essential advertising or analytics cookies here because the current product does not rely on them for these features.

9. Children and age

Gradelyy is an academic-planning tool and is not designed specifically for children. If you are under the age at which you may consent to online services in your location, use the service only with any parent or guardian involvement required by local law. We do not set a universal minimum age in this policy.

10. Changes and contact

We may update this policy as the service changes or when required. We will update the effective date on this page. Material changes may also be announced in the service. For privacy questions or requests, email olzhasassemgazy@gmail.com or message @iuvein on Telegram.