Privacy

Privacy policy

ClassPing holds your timetable, your deadlines and your grades. That is genuinely personal, so this page says exactly what is stored, where it goes, and how to get rid of it.

Last updated 9 September 2026

1.The short version

  • No advertising, no ad trackers, no analytics package, no third-party pixels.
  • Nothing is sold, rented, or shared with anyone for their own purposes.
  • Your planner lives on your own device first, and is synced so you can open it on another one.
  • You can export everything, and you can delete everything, from Settings.
  • It is stored honestly rather than perfectly: this is a solo student project, and section 9 says what that means.

2.What ClassPing stores

It stores more than a to-do list, and it is worth seeing the list in one place. Your weekly timetable with room numbers is, in effect, a map of where you are during the week.

AccountYour email address, your name if you give one, your profile photo if you upload one, and the account identifier your sign-in provider issues. If you use Google sign-in, Google tells ClassPing your email, name and photo.
TimetableYour classes: name, subject colour, the days and times they run, and the room.
WorkAssignments, exams and reminders, titles, deadlines, types, checklists, completion, recurrence, and the dates you plan to work on them.
GradesThe marks and weights you enter, and the grading scale you choose, including a custom scale if you build one.
NotesClass notes and quick notes, and which class or task they belong to.
Study activityCompleted focus sessions and their length, plus XP, streaks, trophies and the state of the pet and the weekly boss.
PreferencesTheme and accent, semester dates, quiet hours, reminder lead times, and your device timezone, which is needed so a server-sent reminder arrives at the right hour.
Calendar feedsAny .ics feed you save: its URL, your label for it, and when it last synced. See section 4.
NotificationsIf you turn on push, the subscription your browser issues, an endpoint URL and its encryption keys. Plus your email reminder preferences, any unsubscribe, and a small ledger of which reminders already went out, so the same one is not sent twice.
FeedbackWhatever you type into the feedback form, with the name and email you choose to attach. It is emailed straight to the developer's inbox and is not stored in a database.
Server logsOrdinary request logs kept by the hosting platform, IP address, time, and the route hit, used to keep the thing running and to rate-limit abuse.

ClassPing does not ask for your date of birth, your student ID, your address, your phone number or any payment details, because it does not need them.

3.Where it lives, and who else touches it

Your planner is written to your own device first, which is why the app works offline. Beyond that, ClassPing is assembled from a handful of services, and each one sees only its own slice:

Your deviceThe whole planner, in browser storage, so it opens instantly and works with no signal.
ClerkIdentity, your email, name, photo and password. Passwords are handled entirely by Clerk and never reach ClassPing's own code.
SupabaseThe planner database: classes, tasks, grades, notes, study sessions, game state and profile preferences. Rows are locked to your account by database policy.
NeonNotification plumbing only: push subscriptions, email preferences, and the sent-already ledgers. No planner content.
VercelHosting and server logs.
Vercel BlobYour uploaded profile photo, when that storage is enabled. See section 5.
ResendDelivering reminder and digest emails. It sees your email address and the contents of those emails.
Browser push servicesApple, Google or Mozilla, depending on your browser. They carry a push notification to your device, so they see the notification and the fact that one was sent.
Your school's feedIf you import one, ClassPing's server fetches that URL on your instruction. Your school may log that fetch.
OpenAI (optional AI features)Only after you agree: timetable page images, assignment text with your class names and current date, or the open note's text are sent through ClassPing's server for token counting and suggestions. PDF pages render on your device first. You review results before adding meetings or assignments or replacing note text. Your API requests are not used by ClassPing to train models.

These are service providers doing a job for ClassPing, not partners with their own use of your data. Each has its own privacy terms, and they change vendors less often than this page changes, so if the list ever looks out of date, treat this page as the thing that is wrong and tell me.

4.Calendar feed links

A saved feed link is a key

Canvas, Blackboard, Moodle and Google Classroom publish personal calendar feeds whose URL contains a secret token, so anyone holding the link can read that calendar. When you save a feed so Refresh works, ClassPing stores that link, token and all, in the planner database alongside your other profile settings.

It is stored so the feature can exist, not because it is comfortable. If that is more than you want to hand over, do a one-off import and remove the saved feed in Settings afterwards, or skip the feature and enter your classes by hand.

A saved feed can be deleted from Settings at any time, and deleting your account removes it along with the rest of your profile.

5.Your profile photo

An uploaded profile photo is stored one of two ways. Where file storage is switched on, it becomes a file at a long, unguessable web address, and that address is not access-controlled: anyone holding the link can open the photo without signing in. The link is not published anywhere and is not guessable in practice, but it is a link, and links can be copied. Otherwise the image is held inside your own profile record and is reachable only by your signed-in account.

If that bothers you, do not upload a photo. Deleting your account deletes the file.

6.What ClassPing does not do

  • No advertising, and no data sold, rented or shared for anyone else's marketing.
  • No analytics or product-tracking package. There is no dashboard anywhere counting your screens.
  • No profiles built about you, and no attempt to work out who you are beyond the account you created.
  • No training of machine learning models on your planner, your notes or your grades.
  • No reading your data out of curiosity. Administrative database access exists because deletion and the reminder jobs need it, and it is used for those jobs.
  • No reporting anything to your school. ClassPing has no relationship with your institution.

7.How long things are kept

AI features are optional. Uploaded images, unsaved suggestions and the original text for Undo stay in memory during review. ClassPing does not retain separate AI request copies or log their contents; notes and tasks you save remain in your planner. OpenAI response storage is disabled. OpenAI may still retain API content for abuse monitoring for up to 30 days, with legal and safety exceptions; this feature does not promise zero retention. See OpenAI data controls. Pasting and manual entry do not send your timetable to OpenAI.

  • While your account exists: your planner is kept until you delete it, because that is the point of the app.
  • Deleted items: a deleted class, task, note or grade is recoverable for 30 days, then removed for good.
  • Sent-reminder ledgers: small rows recording that a reminder already went out, kept so it is not sent twice, and removed with your account.
  • Feedback emails: they sit in an ordinary inbox and are kept until they are no longer useful.
  • AI usage: hashed account identifiers, attempt dates and token/cost counters enforce allowances. Detail older than 30 days is removed when the next import reservation runs; an aggregate pilot spending total remains. These counters contain no note or task text or timetable images and may remain briefly after account deletion.
  • Server logs: kept on the hosting platform's own schedule, which is short.
  • After you delete your account: planner rows, notification rows, your photo and your sign-in account are removed immediately. Copies may persist briefly in routine encrypted backups before ageing out.

8.Your controls

  • Export everything as a backup file, from Settings. It is yours, on your own disk, in a documented format.
  • Turn push notifications off, and set quiet hours so nothing speaks at night.
  • Turn any category of reminder email off in Settings, or use the unsubscribe link at the bottom of any of them.
  • Remove a saved calendar feed without removing the classes it created.
  • Delete your account, which deletes the data listed in section 3 and ends your access.
  • Ask me what is held about you, or ask me to correct it, using the feedback form.

Depending on where you live you may have formal rights over your data, access, correction, deletion, portability, or objecting to processing. The controls above are how those are exercised here, and the feedback form is how to ask for anything they do not cover. There is no charge and no argument.

9.Security, honestly

Everything travels over HTTPS. Sign-in and passwords are delegated to a specialist provider rather than home-rolled. Planner rows are locked to their owner by database policy rather than only by what the app chooses to ask for. Scheduled jobs and webhooks are authenticated, unsubscribe links are signed, and the calendar fetcher refuses redirects and private addresses.

What that is not

ClassPing is built and maintained by one student. It has not been through an external security audit or a formal certification, and I hold myself to reviewing it honestly rather than to claiming it is unbreakable. No service can promise perfect security, and this one certainly does not. Put nothing in your notes that would seriously hurt you if it leaked.

If something does go wrong in a way that affects your data, I will say so on the site and by email, promptly, and describe what actually happened rather than issue a paragraph of nothing. If you find a flaw, please tell me privately through the feedback form first.

10.Schools, student records and FERPA

FERPA is a United States law that governs how schools and their contractors handle student education records. ClassPing is neither. It is not operated by an institution, not under contract with one, and not a school official acting on any institution's behalf, so it does not hold education records and FERPA does not apply to it.

What that means for you in practice: the grades in ClassPing are numbers you typed in for yourself, not your school's record of them, and importing a calendar feed pulls a copy under your own credentials rather than through any arrangement with your institution. Nothing in ClassPing is reported back to your school.

If an institution ever wanted to adopt ClassPing for its students, that would be a separate written agreement with its own terms, and this page would say so.

11.Children

ClassPing is for college and university students and is not directed at children under 13, who may not create an account. If you believe a child under 13 has signed up, tell me through the feedback form and I will delete the account and its data.

12.Cookies and local storage

ClassPing sets no advertising or tracking cookies. The cookies it does set are the session cookies your sign-in provider needs to keep you signed in.

It also uses your browser's local storage heavily, to hold your planner on the device so the app works offline. Clearing your browser's site data for classping.space clears that copy. Your synced data comes back when you sign in again, but anything you created offline and never synced does not, so export a backup first.

13.Where the servers are

ClassPing is operated from the United States and its data is stored on infrastructure in the United States. If you use it from elsewhere, your information is transferred there, and the privacy laws that apply may differ from your own country's.

14.Changes and contact

When this policy changes, the date at the top changes. If a change means collecting something new or using it in a new way, I will flag it in the app rather than quietly editing this page.

To ask what is held about you, to have it corrected or deleted, or to report a problem, use the feedback form, which reaches me directly. The terms of use cover the rest of the relationship.