Legal

Privacy Policy

Last updated: 27 July 2026

This Privacy Policy explains how Gradelytics ("we", "us", or "our") handles information when you use our website and dashboard application (collectively, the "Service"). We are committed to protecting your privacy and being transparent about our data practices.

1. Information We Collect

1.1 Information You Provide Directly

When you use Gradelytics, you may provide the following types of information:

• Academic Data: Module names, academic years, part/semester numbers, marks, and classifications that you manually enter or upload via screenshots
• Screenshot Images: Images of results tables that you upload for AI-powered data extraction
• Chat Messages: Questions and conversations you have with the AI chat assistant

1.2 Information Collected Automatically

• Usage Data: Basic analytics such as pages visited and features used, collected through standard web server logs
• Device Information: Browser type, operating system, and screen resolution for compatibility purposes

2.1 Cloud Storage (account users)

When you create an account, your academic records, achievements, and AI chat history are stored securely in the cloud using Supabase (a PostgreSQL-based backend-as-a-service). This means:

• Your data is tied to your account and protected by row-level security — only you can read or modify your own records
• Your data syncs across all devices and browsers where you sign in
• You can delete individual modules, clear all data, or clear chat history at any time from the dashboard

2.2 Local Browser Storage (no-account users)

If you use the app without an account, your data is stored exclusively in your web browser's localStorage. This means:

• Your data stays on your device and is not synced across devices
• Your data persists until you clear your browser data or use the "Delete All" function

2.3 AI API Communications

Certain features require sending data to third-party AI APIs for processing:

• Screenshot Extraction: When you upload a screenshot, the image is sent to a third-party vision AI model (currently hosted via NVIDIA NIM) for analysis. The image is processed in real-time and is not stored by the AI provider after processing.
• Grade Predictions: When you request a grade prediction, your academic data (module names, marks, and grades) is sent to a large language model API to generate predictions. This data is sent per-request and is not retained.
• AI Chat: When you use the AI chat assistant, your conversation messages along with your academic data context are sent to a large language model API to generate responses.

3. How We Use Your Information

We use the information we collect for the following purposes:

• To provide and operate the Service, including displaying your academic data, generating statistics, and rendering charts
• To process screenshot uploads and extract academic data using AI
• To generate grade predictions and personalised academic insights
• To power the AI chat assistant with relevant context about your academic performance
• To maintain and improve the Service's functionality and user experience
• To detect and prevent abuse or misuse of the Service

4. Data Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. Your data may be shared only in the following limited circumstances:

• Third-Party AI Providers: As described in Section 2.2, data is sent to third-party AI APIs for extraction, prediction, and chat features. These providers process data on a per-request basis and do not retain it.
• Legal Requirements: We may disclose your information if required to do so by law or in response to valid legal processes.
• Business Transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction, subject to the same privacy commitments.

5. Data Security

We take reasonable measures to protect the security of the Service:

• All data transmitted between your browser and our servers uses HTTPS encryption
• AI API communications are encrypted in transit
• Account data is stored in Supabase, which provides row-level security so each user can only access their own records
• Authentication is handled by Supabase Auth (password hashing, session management, and optional email confirmation)

However, no method of electronic transmission or storage is 100% secure. We cannot guarantee the absolute security of your data.

6. Your Rights and Choices

You have the following rights regarding your data:

• Access: Your data is visible to you at all times within the dashboard
• Modification: You can edit any module at any time through the dashboard interface
• Deletion: You can delete individual modules or use the "Delete All" function to remove all data at once
• Export: You can download all your academic data as a CSV file at any time
• Chat History: You can clear all AI chat messages at any time using the clear chat function

7. Cookies and Tracking

Gradelytics uses minimal cookies and tracking technologies:

• We do not use advertising cookies or third-party analytics trackers
• We do not use cookies for behavioural advertising or cross-site tracking
• Essential cookies may be used for the basic operation of the Service

8. Children's Privacy

The Service is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided personal information to us, please contact us at hello@gradelytics.com and we will take steps to delete such information.

9. International Data Transfers

The Service is operated from servers that may be located in different countries. When you use AI features, your data may be transmitted to and processed in countries other than your own. By using the Service, you consent to the transfer of your information to these countries, which may have different data protection laws than your jurisdiction.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make changes, we will update the "Last updated" date at the top of this page. We encourage you to review this Privacy Policy periodically. Your continued use of the Service after changes are posted constitutes your acceptance of the updated policy.

11. Third-Party Links

The Service may contain links to third-party websites or services (such as social media platforms). We are not responsible for the privacy practices or content of those third-party sites. We encourage you to review the privacy policies of any third-party sites you visit.

12. Data Retention

Account data is retained for as long as your account exists. Deleting a module, clearing chat history, or using "Delete All" removes that data from your account. Without an account, data is stored in your browser's localStorage and is retained for as long as you keep it. AI API providers may retain anonymised usage logs for a limited period as required by their respective policies.

13. Your Consent

By using Gradelytics, you consent to this Privacy Policy and agree to the data practices described herein. If you do not agree with this policy, please do not use the Service.

14. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:

• Email: hello@gradelytics.com

We will respond to your enquiry within 30 days.