What we hold, and what we do with it
This is a plain description of how CampusClear works today, written by the people who built it. It has not yet been reviewed by a lawyer. We are publishing it because you deserve to know what happens to your information before you decide to trust us with it, not because it is finished.
What this product holds
A student’s coursework, assignments, grades, attendance and the school calendar entries we can read from the school systems you connect. A date of birth for the student, because we will not track a child under thirteen. Your email address and a display name. Nothing else about anyone is collected for its own sake.
We hold the login you give us for a school portal so we can keep reading it on your behalf. It is encrypted in a separate vault, it is never displayed back to you or to anyone else, and it is only ever the login of the person signed in — never anyone else’s.
What we never hold
Card numbers, partial card numbers, or billing addresses. No payment provider is connected to this application, and no card detail has ever reached it, its database, or its logs.
Anything a teacher said about the student as an individual, any medical, psychological or family-circumstance note, and any judgement about a child’s character. The system that suggests reasons a grade moved is structurally forbidden from producing those — not discouraged from it, unable to store one.
Who can see it
You, and no one else. There is no hidden view of your record and no silent monitoring. Every table holding it is protected at the database level, so a mistake in our own code is refused a second time by the database rather than passed through.
We do not sell it. We do not share it with advertisers. There is no advertising or analytics code in this product at all — not a tracker we have turned off, none present.
Getting it back, and getting rid of it
You can export everything we hold about you at any time, from the settings page. The file is a minor’s academic record — treat it like a report card.
You can delete the account from the same page. Deletion removes the account’s records, the stored school login from the vault, and any report cards you uploaded. It is not a flag that hides the data — the rows are gone, and we run a check that fails our own build if anything survives.
Where this is still unfinished
We have not yet had a lawyer review this. Some of what a full privacy policy must cover — how we would notify you of a breach, which state student-privacy laws apply where you live, and the precise position on FERPA and COPPA — is not settled here, and we are not going to pretend otherwise by writing confident text about it.