Privacy Policy

Account information. Email, username, and password (we never store your actual password, only a one-way cryptographic hash of it), or, if you sign in with Google or Apple, your Google or Apple account ID instead of a password. Also your display name, school, grade, class year, homeroom, a short bio and a profile photo if you add them. We ask for your birthdate at signup to confirm you're 13 or older, and keep it with your account. Accounts made before we started asking are asked once, the next time they open Kaddy. Other people on Kaddy can't see your birthdate. From it we keep an age range (13-15, 16-17, 18-19 or 20+) that moves up on your birthday, which we use for age rules between adults and students under 18: an adult can't send a student a friend request, or be put in a new group chat with one they aren't friends with, unless both are verified at the same school, and contact details sent between them in a group chat are flagged for our moderators. Direct messages aren't checked by any code unless someone reports one. Because many 18 and 19 year olds are still in high school, they count as adults only toward students 15 or younger. If you gave your birthdate before October 5, 2026, we kept only the age range, and it doesn't change on its own; if that range was 18+, the app asks for your birthdate once. An answer under 18 doesn't move an 18+ account under 18: it stays an adult account while we check it, and we don't keep that date. We may also use your birthdate to mark your birthday in the app, for example with a birthday reward.

School email (optional). If you add one in Settings, we email it a link to confirm it's yours and keep it to show which school you're at. It unlocks your school's student list and posting to your classes (announcements, class notes and decks shared to a class), and marks your teacher reviews as Verified. It isn't used to sign in, isn't shown to other students, and you can remove it anytime.

Academic information you add. Classes, teachers, assignments, due dates, notes, grades and grade weights you choose to track, plus your flashcards, quiz results, study sessions and, if you use Compass, your answers and plan. You type this in yourself or import it from a photo or screenshot. We don't receive anything from your school unless you connect Google Classroom (see below).

Messages and social activity. Direct messages and group chat messages you send to other Kaddy users, including photos, plus message reactions, read receipts, friend requests, and the people you block or report. Also anything you post in Commons: teacher reviews, class announcements, class notes, decks you share to a class, and syllabus policies you choose to share.

Feedback. If you send us feedback from Settings → About & Feedback, we keep your message, and it reaches our team by email with your username and email address so we can reply.

Google Classroom (optional). If you choose to connect Google Classroom, we read your active classes, their assignments and whether you've turned each one in through Google's API, save them in Kaddy, and store access tokens so we can keep them in sync. We only request this if you turn it on. While Google reviews Kaddy's Classroom access, connecting is only open to a few test accounts. You can disconnect it at any time from the Google Classroom card on the Study tab, on the web. See "Google user data" below for more detail.

Parent email (optional). If you set up the parent progress email in Settings → Notifications, we keep that address and send it a weekly summary of your progress until you turn it off.

Usage and device information. Your XP, level and study streak (the count and the days you studied), focus-timer minutes, which tools you open, how many AI credits you've used, when you were last active (for your online status), your time zone and your settings. If you turn on push notifications, a push subscription for that browser or device. Which app you signed up in (the website, the iPhone app or the Android app) and, if a link brought you, which referral, class-invite or campaign link it was. When you sign up, or when a log-in fails, we briefly record your IP address to slow down spam sign-ups and password guessing.

• To operate the app: sign you in, show your classes and assignments, deliver messages, and keep your progress and preferences in sync across visits.
• To power the AI study tools. See the next section for exactly what each one sends.
• To connect you with classmates at your school, and to build the shared teacher directory in Commons, which anyone can browse.
• To send notifications and email: push notifications you turn on, account email like verification and password-reset links, a weekly recap (on unless you turn it off in Settings → Notifications), and the parent progress email only if you set one up.
• To apply each plan's usage limits (like weekly AI credits), which requires counting the AI requests each account makes.
• To keep the community safe: masking swearing, holding some posts for a moderator, flagging some chat messages for one, reviewing reports, applying the age rules above, and limiting repeated sign-ups and log-in attempts.
• In the future, to mark your birthday in the app, for example with a birthday reward.

Kaddy's AI features are powered by Anthropic's Claude API. The first time you use one, Kaddy asks before sending anything, and you can turn AI features off anytime in Settings → Privacy & Safety. Once you've allowed it, what each feature needs is sent to Anthropic so it can write the answer:

• Tutor chat on an assignment: your conversation, plus the assignment's title, class, due date and notes, and the teacher's name if you linked one.
• Ask Kaddy and the AI study plan: your conversation or request, plus a summary of what's coming up: assignment titles, classes and due dates, exam dates, and flashcard decks with cards due.
• Flashcards and quizzes: the notes you type or paste, or a photo of them. A quiz made for an assignment also sends its details, and a retake sends the questions you missed.
• Assignment breakdowns and study guides: the assignment's title, class and notes. Quick add: the text you typed, but only when Kaddy can't work it out on its own.
• Reading photos and screenshots: a photo of an assignment, a syllabus, the board or a planner page, or a screenshot of your Google Classroom to-do list or your school's grade portal. A board photo or grades screenshot also sends the names of your classes so it can match them.
• Compass: your answers to its questions, plus your school, your classes, their teachers' names and your current grades.
• Teacher overviews in Commons: the text of students' reviews of a teacher, without names, to write the short summary shown on that teacher's page. A review you post can be part of that whether or not you've turned on AI features.

We don't add your name, email address or username to these requests. But whatever is in what you send goes along with it: a screenshot of a grade portal or a Classroom page usually shows your name, student ID, school and teachers, and Compass sends your school, teachers and grades on purpose. Photos and screenshots sent to be read aren't kept by Kaddy afterwards, with one exception: a photo you scan while adding an assignment is saved with that assignment until you remove it. Your tutor and Ask Kaddy chats are saved in your account so you can come back to them. Anthropic processes this data to return the AI's answer to you. We don't use your conversations to target ads; Kaddy doesn't show ads.

Kaddy's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Specifically:

• We only request access to Google Classroom data after you explicitly choose to connect it.
• We use that data only to show your Classroom classes, their assignments and what you've turned in, in Kaddy, and keep them in sync. An imported assignment's description is saved in its notes, so, like any assignment's notes, it's sent to Anthropic with your request when you use an AI feature on that assignment (for example the tutor chat or a breakdown).
• We don't sell Google user data, we don't use it for advertising, and we don't use it to train AI models.
• Disconnecting Google Classroom (from the Google Classroom card on the Study tab, on the web) deletes the stored access tokens and stops syncing. Classes and assignments already imported stay until you delete them. Deleting your account removes all of it.

We don't sell your personal information, and we don't share it with advertisers or data brokers. We do share information with a small number of service providers who help us run the app, each only to the extent needed to provide their service:

• Anthropic: processes the content you send to AI features (see "AI features and Anthropic" above).
• Google: if you sign in with Google, Google confirms who you are and sends us your Google account ID, email address and name. If you connect Google Classroom, Google sends us your classes and assignments.
• Neon and Vercel: our database and hosting providers, who store and serve the app's data on our behalf, including the photos you add (profile pictures, chat photos and assignment photos).
• GitHub: keeps our daily database backups, each for 30 days.
• Resend: sends Kaddy's email (verification and password-reset links, security notices, school-email links, the weekly recap, the email when your trial ends, and the parent progress email), delivers feedback you send from Settings to our team with your username and email address, and alerts our team when something is reported or held for review. Those alerts say what kind of thing it was, the reason picked from Kaddy's list, and the age range and account age of the people involved, never names or what was posted. It receives the address each email goes to and what the email says.
• Cloudflare: runs the "are you human" check (Turnstile) on the email sign-up form. It sees your IP address and technical details about your browser.
• Sentry: receives an error report when something in Kaddy breaks: what went wrong, technical details about your device and browser, and sometimes your Kaddy account ID.
• Stripe: processes payments for subscriptions bought on the web. Stripe receives your email address and Kaddy account ID. Your card details go directly to Stripe; we never see or store them.
• Apple and RevenueCat: if you sign in with Apple, Apple sends us your Apple account ID, your email address (or a private relay address if you hide yours) and your name if you share it. If you subscribe in the iOS app, Apple bills your Apple ID and RevenueCat validates the purchase and tracks renewals for us. RevenueCat receives your Kaddy account ID and Apple's transaction details; neither we nor RevenueCat receive your payment method.

We may also disclose information if required by law, or to protect the safety of our users.

• Your name card. Anyone signed in to Kaddy who finds you, for example by searching your exact username, can see your display name, username, profile photo, level, school and how many friends you have. If you signed up with Google or Apple, your username starts out as the part of your email address before the @, and a Google sign-up uses the name on your Google account as your display name; you can change your username in Settings → Account.
• The rest of your profile. Your grade, class year, bio, GPA (if you choose to show it), classes and friends list are shown only to your friends, unless you turn on "Show my profile to everyone" in Settings → Privacy & Safety. Your homeroom is never shown to anyone. When you're online is shown only to your friends and Kaddy's admins, and never to anyone you've blocked or who has blocked you, so someone you unfriend or block stops seeing it. Students who add one of your teachers and whose profile lists the same school as yours can see how many of that teacher's students at your school are online, without names. Nobody you've blocked, or who has blocked you, is counted or can count you. Turn off Activity status in Settings → Privacy & Safety to hide when you're online from everyone.
• Your school. Students at your school who have verified an email address from the school can see your name in the school's student list, unless you turn on "Hide me from my school's student list". Students whose profile lists your school and who add one of your teachers may see you as a suggested classmate, unless you turn on "Hide my classes list".
• Teacher reviews can be read by anyone, even without an account. Your name is shown only to your friends; everyone else sees "A student".
• Class posts. Class notes you post can be read, with your display name, by anyone whose Kaddy profile lists your school. Class announcements and decks you share to a class can be read, with your name, by anyone who adds that teacher to their classes. Kaddy doesn't check that those people really go to your school or take that class, so don't put anything in a class post you wouldn't want a stranger to see.
• Chats. Messages and photos you send are seen by everyone in that chat, which in a group chat can include friends of your friends.
• Leaderboards. You're on the leaderboards unless you turn off "Visible on leaderboard" (it's on for new accounts). Your friends can then see your name and weekly XP on the friend leaderboard, and people who add one of your teachers and list your school can see them on that class's leaderboard. The school leaderboard only shows totals for each school. Playing Match on a deck someone shared is separate: your name and best time can appear on that deck's top 10 for everyone else who has a copy of it, except people you've blocked or who have blocked you. Suspended accounts aren't listed.

Kaddy's admins can see your account and your full profile, the names on teacher reviews, anything that's reported, flagged or held for review, and the few messages just before and after a reported or flagged message so they can judge it in context. They use this to run the app and review reports.

Kaddy is intended for users who are 13 years of age or older, and we ask for a birthdate when you sign up to help enforce that. We don't knowingly collect personal information from children under 13. If we learn that someone under 13 has created an account, we'll delete it. An existing account that gives a birthdate under 13 is suspended right away while we review it, and we don't keep a birthdate under 13. If you believe a child under 13 has a Kaddy account, contact us at the email below and we'll remove it.

We keep your information for as long as your account is active. You can permanently delete your account at any time from Settings → Account → Danger zone → Delete my account. This removes your profile, classes, assignments, grades, notes, flashcards, tutor and Ask Kaddy chats, the messages you sent, your teacher reviews and class posts, your friends list, and your Google Classroom connection. It also cancels a subscription bought on the website; one bought in the iOS app is billed by Apple, so cancel it in your Apple ID settings. This action can't be undone. Copies in our daily database backups are deleted automatically within 30 days.

A few things are kept after an account is deleted:

• Moderation records. Moderation records may be kept where needed for safety or legal reasons. When a reported or flagged message is deleted, by a moderator or by the person who sent it, we keep a copy (with any photo) for our moderators, and the same goes for a class note or shared deck that was held or reported. A reported or flagged message is also kept as a copy (with any photo and the name it was sent under) if its sender deletes their account, or if the chat it's in is deleted, and a held or reported class note or shared deck is kept as a copy if its author deletes their account. The same goes for a teacher review or class announcement that was held or reported, whether it's deleted on its own or with the account. Their other class notes, shared decks, reviews and announcements are deleted with the account, and no copy is kept. If the person who reported a message deletes their own account first, their report is withdrawn, and no copy is kept unless someone else also reported it or it was flagged.
• Your trial record. A one-way code made from your email address or your Google or Apple account, and the date your free trial started, so a new account can't restart the trial. It isn't your email address itself.
• Photo files. Photos can be stored in Vercel's file storage at a long, random web address that isn't behind a sign-in. Deleting a photo, its message or your account removes it from Kaddy, but the file itself may stay in that storage, where anyone who already has the link could still open it. Email us if you want a file erased.
• Technical records tied only to your old account ID, like past sign-in sessions and a log of who friend requests were sent to and which were declined.
• Traces in other people's views. The short AI summary on a teacher's page may still reflect your reviews until it's next updated, and your name may still appear as the title of a direct-message chat in the other person's chat list.
• Feedback emails. Feedback you sent from Settings stays in our team's inbox.
• Whatever our service providers keep under their own policies, like payment records at Stripe or Apple.

• Access/export: Settings → Data & Legal → Download your data gives you a file with your profile, classes, assignments and grades, flashcards, notes, quests, tutor and Ask Kaddy chats, and the messages and teacher reviews you've written. It doesn't yet include chat or assignment photos, your friends list, class announcements or your Compass plan; email us if you need those.
• Correction: edit your profile, classes, and assignments directly in the app. Your birthdate can't be changed in the app; email us if it's wrong.
• Privacy: in Settings → Privacy & Safety, choose who can send you friend requests, whether your profile shows to everyone, whether anyone sees when you're online, and whether you appear in your school's student list, and manage who you've blocked.
• AI features: turn them off in Settings → Privacy & Safety to stop sending anything to Anthropic. Kaddy asks again before your next AI request.
• Deletion: delete your account from Settings, or contact us.
• Notifications: turn push notifications and the weekly recap email on or off in Settings → Notifications.

Passwords are never stored in plain text, only a salted cryptographic hash. Each sign-in is a session we keep on our server, so we can end it: logging out ends that session, changing your password signs out your other devices, "Log out of all devices" ends every session, and each one runs out after 90 days at most. No method of transmission or storage is 100% secure, but we work to protect your information using practices like these.

If we make material changes to this policy, we'll update the date at the top of this page and, where appropriate, notify you in the app.

Questions about this policy, or a request to access, correct, or delete information (including on behalf of a child) can be sent to intellibloomapp@gmail.com.