Privacy Policy — Term Tracker

Overview

Term Tracker V2 (“Term Tracker”, “we”, “us”, or “the app”) is a client-first academic performance dashboard. We are designed to store your data locally on your device by default. Cloud sync and Google Calendar integration are optional features that require you to sign in with Google.

Data We Store Locally

The following data is stored entirely in your browser's local storage:

Academic terms, assessments, marks, and weighted calculations
Programme and subject configurations
PDF and Excel import data you upload
AI-generated tips, flashcards, and grading results
Calendar sync preferences and settings

This data never leaves your device unless you explicitly enable cloud sync. You can clear it at any time by clearing your browser data or using the app's reset function.

Cloud Sync & Data Storage

If you choose to sign in with Google, your data is synced to a Supabase database for cross-device access. When cloud sync is active:

Your academic data (terms, marks, settings) is stored in a Supabase user_data table, keyed by your authenticated email address.
Row Level Security (RLS) policies ensure that only you can read and write your own data — no other user, including anonymous users, can access it.
Sync is opt-in. If you do not sign in, all data remains local-only.

Google OAuth & Permissions

When you sign in with Google, we request access to the following:

Basic profile & email — used to identify your account and as the key for cloud sync data.
Google Calendar (read & write events) — requested only when you explicitly choose to connect your calendar. This allows the app to create and update events for assessment deadlines and study reminders. This permission can be revoked at any time.

We do not request access to your contacts, files, or any other Google data beyond what is listed above.

AI Features

When you use AI-powered features (exam grading, study tips, flashcard generation, mark estimation), the text you submit is sent to our serverless API routes for processing. This data is used solely to generate the requested response and is not stored on our servers after the request completes. No AI training is performed on your data.

Third-Party Services

The app uses the following third-party services:

Supabase— authentication and database for cloud sync. Your data is subject to Supabase's Privacy Policy.
Google— OAuth authentication and Calendar API. Subject to Google's Privacy Policy.
Vercel— hosting and analytics. Subject to Vercel's Privacy Policy.

Data Retention

Local data is retained in your browser until you clear it or reset the app. Cloud-synced data is retained for as long as your account is active. You can delete all cloud data at any time by signing out and requesting deletion, or by clearing your data within the app.

Cookies

The app does not use advertising or tracking cookies. Supabase authentication uses local storage tokens to maintain your session. No third-party tracking cookies are placed.

Children's Privacy

Term Tracker is designed for students, including those under 13. We do not knowingly collect personal information beyond what is necessary for the educational features described above. No data is used for marketing or profiling.

Your Rights

You have the right to:

Access your data (available directly in the app)
Export your data (via the app's export feature)
Delete your data (clear local storage or sign out of cloud sync)
Revoke Google access at Google Account Permissions

Security

All data in transit is encrypted via HTTPS. Cloud data is protected by Supabase Row Level Security policies that ensure only the authenticated owner can read or modify their data. OAuth tokens are managed by Supabase and are never exposed to the client beyond the active session.

Contact

If you have questions about this Privacy Policy or your data, please reach out through the app's help or feedback channels.

Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated revision date.