Privacy Policy

ClassPlan is a study planner for university students. It reads the syllabi you upload and turns them into a single ranked plan of what is due, what is next, and where to be.

This policy explains what personal data we collect, why, who we share it with, and the rights you have over it. We take privacy as an ongoing responsibility and will update this policy as our practices change.

ClassPlan is operated by Forge Lab. We are based in the United States, and your data is processed there. If you want to exercise any of the rights below, write to classplan@theforgelab.com.

We collect only what the product needs to work:

• Account details — your name, your school email address, and the school it belongs to. You create these when you sign up.
• Your coursework — the classes you join, syllabus files you upload, and the assignments, due dates, class times and locations extracted from them or entered by you. This includes any personal events you add to your schedule.
• Edits you make — in shared classes we record who changed what and when, so a class can see its own history and undo mistakes.
• Notification settings and device tokens — if you enable push notifications, the token that lets us deliver them to your phone.
• Billing details — subscription status, plan and renewal date. Card details go directly to our payment processor; we never see or store them.
• Technical data — IP address, browser or device type, and pages viewed, recorded in ordinary server logs and used to keep the service running and secure.

We do not sell personal data, and we do not use it for advertising.

We use your data to provide the service: to build your schedule, to keep shared classes in sync, to send the reminders you asked for, to bill you if you subscribe, and to answer support requests. We also use aggregate, non-identifying usage information to understand which features are worth improving.

Where the law requires a legal basis, ours is the performance of our contract with you for providing the service, your consent for optional notifications, and our legitimate interest in keeping the service secure and improving it.

When you upload a syllabus, its contents are sent to a third-party AI provider to extract assignments, due dates and class times. That processing is automated and is used only to produce your schedule. We do not use your syllabus content to train AI models, and our provider is contractually bound not to do so either.

Syllabi are written by your instructors and may contain their names and contact details. Please do not upload documents containing sensitive personal information you would not want processed this way.

When a classmate adds the same course as you, you are placed together in one shared class that you can both edit. Within a shared class, other members can see your name against edits you make, and the assignments, due dates and class details you add.

They cannot see your email address, your other classes, your personal events, your notification settings or your billing information.

If a classmate posts something abusive, inappropriate or deliberately destructive, use the Report option in the item's History tab. Reports go to our team for review and we act on them promptly.

We send service email (sign-in, billing, and account notices) and, if you turn them on, reminders about upcoming deadlines, classes and events. You control reminder types in your profile, and can turn them off at any time.

Push notifications are delivered through Apple and Google's notification services, which require us to share a device token with them. Turning off notifications on your device stops delivery.

We share personal data only with the service providers that help us run ClassPlan. Each is bound by contract to use it solely to provide that service to us, and never for their own purposes. By category, these are:

• Cloud hosting and database providers — who store your account and schedule data and run our authentication.
• Payment processors — who handle subscription billing. They collect card details directly under their own privacy policies; we never receive them.
• Messaging providers — who deliver our email and push notifications, and therefore receive your name, email address and device tokens.
• AI service providers — who perform the automated syllabus extraction described above.
• Internal collaboration and support tools — where our own team receives operational alerts, such as a new sign-up or a content report, which include the relevant name and email address.

We have not listed each provider by name here, but we will tell you which specific companies process your personal data if you ask us at classplan@theforgelab.com.

We may also disclose data where required by law, to enforce our terms, to protect the rights or safety of our users or others, or in connection with a merger or acquisition. We will not otherwise share your data with anyone for their own independent use.

We use cookies and browser local storage for essential purposes only: keeping you signed in, remembering your schedule view preferences, and remembering that you have dismissed a notice. We do not use advertising or cross-site tracking cookies.

ClassPlan is intended for students attending schools in the United States who live in the United States. It is operated from the United States, and your data is stored and processed there.

We do not offer ClassPlan to people outside the United States, and it is not designed to meet the requirements of privacy laws outside the US. If you access it from another country, you do so on your own initiative and your data will still be processed in the United States. If you are in a country whose law gives you rights we have not described here, contact us and we will do what we reasonably can.

We do not sell your personal information, and we do not share it for cross-context behavioural advertising. We never have.

Several US states — including California, Colorado, Connecticut, Texas and Virginia — give residents rights over their personal information. Depending on where you live, those may include:

• the right to know what personal information we collect and how we use it;
• the right to a copy of the information we hold about you;
• the right to correct information that is wrong;
• the right to have your information deleted;
• the right to opt out of sale or targeted advertising — which for us is automatic, because we do neither;
• the right not to be discriminated against for exercising any of these rights.

Most of these you can exercise yourself: your schedule and classes are editable in the app, notification settings are in your profile, and account deletion is described below. For anything else, write to classplan@theforgelab.com and we will respond within 45 days. We may need to verify your identity before acting on a request, and you may use an authorised agent. There is no charge for reasonable requests.

If you are a California resident, you may also ask us for the categories of personal information we have collected, the sources it came from, the purposes we use it for, and the categories of third parties we disclose it to. Those are described in What we collect and Who we share data with.

You can delete your account at any time from My Account. Deletion is immediate and permanent — we cannot restore a deleted account.

Deleting your account removes your profile, your class memberships, your personal events, your event registrations, your notification settings and device tokens, and your billing records. Any active subscription is cancelled at the same time.

One thing is deliberately kept: assignments, class times and course details you added to a shared class remain, with your name removed. Other students rely on that shared schedule, and removing it would delete their coursework along with yours. If you need specific content removed as well, contact us and we will handle it case by case.

We may retain a minimal record of the deletion, and any transaction records we are legally required to keep for tax and accounting purposes.

Your data is stored on servers in the United States operated by the providers listed above. We keep your account data for as long as your account exists. Server logs are kept for a short period for security and debugging. Content reports are retained after review so we can recognise repeat problems.

Data is encrypted in transit. Access to production systems is limited to people who need it. Passwords are stored hashed by our authentication provider and are never visible to us. No system is perfectly secure, but we work to protect your data and will notify you and the relevant authorities if a breach affects you.

ClassPlan is intended for university students and is not directed at children under 13, consistent with the Children's Online Privacy Protection Act. We do not knowingly collect personal information from children under 13. If you believe a child has given us personal information, contact us and we will delete it.

We will update this policy as our practices change and revise the effective date above. For material changes we will notify you in the app or by email.

For any privacy question, request, or complaint, contact classplan@theforgelab.com.