Privacy policy

The short version

• Backpack only collects what it needs to show you your classes, homework, and grades.
• We never sell your information or share it with advertisers.
• Backpack is read-only with Canvas. It never turns work in, changes anything, or messages anyone.
• You must be 13 or older to use Backpack.
• You can delete your account and everything in it any time from Settings.

What we collect

• Account info: your name, email, and a scrambled (hashed) version of your password. If you sign in with Google, we store the ID Google gives us instead of a password.
• Canvas data: your classes, assignments, due dates, and grades, pulled from your school’s Canvas using the access token you paste in. The token is stored encrypted.
• Things you add: classes and homework you type in, notes, study sets, calendar events, goals, and photos or files you upload for study help.
• AI usage: how many AI actions you use per day, so we can apply plan limits. If you add your own Anthropic key, it is stored encrypted.
• Device info for alerts: if you turn on push notifications, the subscription your browser gives us so we can send them.

How we use it

To run the app: show your homework and grades, spot grade changes, build practice quizzes from your notes, and send the alerts you asked for. That’s it.

AI features

When you use a study tool (quiz, flashcards, explain, homework photo help), the notes or photo you chose are sent to Anthropic, the company that makes the AI model, to generate the result. They process it to answer the request and do not use it to train their models. Backpack is built to help you learn, not to do graded work for you.

Who can see your data

• You. Only you can see your classes, grades, and notes.
• Services that run Backpack: Vercel (hosting), Neon (database), Vercel Blob (file storage), and Anthropic (AI). They store or process data only to provide the service.
• The Backpack admin can see account emails, plan level, and AI usage counts in order to run the app — not your grades or notes.
• We do not sell data or share it with advertisers, and we do not share it with your school.

Age

Backpack is for students 13 and older. We do not knowingly collect information from anyone under 13. If you believe a child under 13 has an account, contact us and we will delete it.

Your choices

• Disconnect Canvas any time in Settings. Your classes stay but stop updating, and the token is removed.
• Turn off alerts in Settings or in your phone’s notification settings.
• Delete your account in Settings → Account. This removes your account, classes, assignments, notes, study sets, uploads, and alerts right away.

Security

Connections are encrypted (HTTPS). Canvas tokens and API keys are encrypted in the database. Passwords are hashed and never stored as plain text.

Changes

If this policy changes in a meaningful way, we’ll update the date at the top and note it in the app.

Contact

Questions or deletion requests: ask the Backpack admin.