Privacy Policy

Your classes, files, Prof. Hints, mistakes and reports are private to you. Other students never see them. We don't sell your data and there are no ads.

To make predictions better for your course, we add facts from your class to private counts for that course: which topics showed up on the exam, how your quizzes went, how long and how you studied, and your grade. That includes the exam names and topic names you type. Never your files, notes, photos, chat messages or the exam's questions. Other students only ever see totals backed by at least 3 signed-up students (5 for grades, study hours and study methods, rounded), never your own report and never with your name. Reports about an exam wait until 7 days after the last date we know of for it, make-ups and other sections included. It's all stored under your account (not your name or email), so you can turn it off or delete it from the Account page.

You can download, fix or delete your data at any time from the Account page, or ask us through the Contact page.

Class Speedrun is run by [Operator legal name], in Pennsylvania, USA. We decide what happens to the data described here. Reach us through the Contact page.

We don't train AI on your files. Anthropic's business terms say it won't train its AI on what we send unless we allow it, and we haven't. Anthropic is the AI company we use.

We never sell your data, show you ads or use ad trackers.

We never show your files, notes or answers to other students.

• An account. When you first open the app we create a guest account so your work saves without signing up. If you add your email, we store it to send you sign-in links. If you choose Continue with Google instead, we get your name, email address and profile picture from Google, plus an id for your Google account. Never your Google password or anything else in your Google account.
• Your profile: your name and school if you give them (both optional), your time zone, and your course-insights setting.
• What you add: class details (school, course, professor, term, exam names and dates, target grade), the files you upload or text you paste, the text we read from them, your hint notes and photos, and your study activity (quiz answers, flashcard reviews, sprints, mistakes, topic fixes, exam reports, grades and hours studied).
• Course-policy records: the statement you tick when you add a class ("I'll only upload materials my course policies allow."), any line in your files that looks like a course rule about AI tools or sharing materials (we show it to you), and the choice you make about it, with any note you add.
• Invite links: if you invite classmates, the link for your class, when it was made, when it stops working, whether you turned it off, and your first name if you choose to show it. If you join with someone's link, a record that you joined with that link (see Invite links).
• Which parts of the app you've reached at least once (your first ranked list, a sprint, How We Did), so we can see which features students find. We only ever look at totals.
• Usage logs: a record of each AI request (what kind of task, how much text it processed, what it cost), so we can keep the app running and free. Each one also stores a scrambled (hashed) version of your IP address, used only to enforce daily limits. Your IP address is the number your internet connection uses to reach us. We can't turn the scrambled version back into it, and we clear it when you delete your account.
• Page views, counted by Vercel Web Analytics (see Cookies and analytics).
• If you join the paid-plans email list on the Pricing page: that email (see Paid-plans email list).
• Your age statement: when you confirm you're 18 or older, we keep a note that you did, which wording you saw and when. Never your birthday.
• Your agreement: which version of the Terms you agreed to and which version of this policy you said you'd read, how (the box when you added a class or asked for a sign-in link, or the prompt after an update), the exact sentence you ticked (for example "I'm 18 or older, agree to the Terms and have read the Privacy Policy."), and when.
• Whether your browser sends Global Privacy Control (see Your privacy choices).
• Requests you send us: a privacy or help request from the Contact page (your name, email, where you live if you tell us, and what you asked), a copyright notice or counter-notice from the Copyright page, or a request from the For Professors and Schools page. Each keeps what you wrote and how to reach you.

Supabase: our database, file storage and sign-in. It stores your account, files and study data.

Resend: sends the sign-in link emails for us. It receives your email address and the email itself.

Google: only if you choose Continue with Google. Google confirms it's you and shares your name, email address and profile picture with us. Google knows you signed in to Class Speedrun.

Anthropic (Claude, the AI we use): reads your files and writes your rankings, questions and explanations. We send it the text of your files, and images and scanned PDFs as the images themselves. We also send class details (course, professor, exam names and dates, topic names) and what you type into the app, like questions you ask about a topic and notes you ask about. Anthropic says it deletes what we send within 30 days, except content its safety systems flag (kept up to 2 years) or where the law requires.

Tavily (web search): to look up how a professor runs their exams, we send it searches built from your school, course code, course name and professor name, and the addresses of public web pages to read. Never your files, notes or anything else about you. Tavily's own terms let it keep search queries and use them to improve and train AI models, and it may pass them to other search engines. So we treat those details as public and send nothing else. What it finds comes from public web pages. We keep it with the course, so other students in the same course see the same Test Plan.

Vercel: hosts the app. Every page and request passes through Vercel's servers, which see your IP address and browser and may keep server logs. Vercel Web Analytics also counts page views (see Cookies and analytics).

Cloudflare Turnstile: when the sign-in check is switched on, Cloudflare checks that an email sign-in comes from a person and not a script. It sees your IP address and browser details while it checks. It isn't used anywhere else in the app.

Stripe: not used yet. Paid plans aren't open, so no payment details go anywhere. Before they open, this page will say what Stripe receives.

That's the full list. If we add a service that receives your data, we'll add it here first. Each one handles data under its own terms. The AI Disclosure page has more on the AI services.

We may also share data if the law requires it (for example a valid court order), to protect someone's safety, or if the app is sold or moves to a new company. That company would then be bound by this policy for what we already collected.

To run the app you asked for: save your classes, read your files, rank topics, make study material and sign you in.

To make predictions better for your course (course insights), to research how a course is tested, to count page views, and to stop abuse and keep the app secure. These are our legitimate interests, and each one is limited as this page describes. You can turn course insights off.

To send the one "paid plans are open" email, only if you asked for it.

If EU or UK data-protection law applies to you, those are our legal bases (contract, legitimate interests, consent). You can also object to uses based on legitimate interests, and complain to your data-protection authority.

We don't use your data for ads, and we don't make decisions about you with legal or similar effects. A topic ranking is a prediction about an exam, not about you.

Each course (your school and course code, and the professor if you entered one) gets smarter as students use the app. To do that, we add facts from your class to private counts for that course. We call these counts course insights.

• From each post-exam report: which topics showed up (with the kinds of material that pointed to each, like a study guide or a past quiz), whether each prediction we made (Must know, Likely, Maybe, Low priority or Skip) was right, the exam's name and date, how hard it felt, how you studied, the question formats, your hours studied and your grade.
• From the rest of your class: which topics are on your ranked lists, Prof. Hints (only the topic and "on the exam" or "not on it"), topic fixes (renamed, merged, not a real topic), how you do on each topic in quizzes (tries, right answers, mistakes and time per question), your study time per topic, flagged questions (only the topic and the reason), file-type fixes (the old and new type, the file extension and a few generic filename words like "review"), and your semester.
• Topic names: topic names you type or rename can become the course's shared topic names. When your class has a topic the course doesn't have yet, its name (cleaned up, 60 characters at most) and a short AI-written description can be added to the course's shared topic list.
• Course lists: when you pick your school from the list, typing suggests its courses. If yours isn't there, adding it puts the course code (and the course name, if you give one) on that school's shared course list, so the next student finds it. Only the code and name are saved there: nothing about who added it. The school list comes from the U.S. Department of Education's public college directory, and some course lists from schools' public catalogs (codes and titles only).
• What never counts: your files, the text we read from them, your notes, your hint photos or notes, the exam's questions or what they asked, your chat messages, the questions we wrote for you, your name or your email.
• When it counts: reports about an exam this semester wait until 7 days after the latest date we know of for that exam (same course, semester and exam number, so make-ups and other sections count). A student whose exam comes later never gets reports about that exam from the same semester. If an exam has no date, its reports wait until 7 days after the semester ends.
• Who counts: students with established accounts, meaning signed-up accounts at least 7 days old, or at least 1 day old for an account that joined the course with a classmate's invite link when that classmate's own account is at least 7 days old (we use the record of who joined with whose link for this). Guest accounts never count toward the minimums below.
• Who sees what: students in the same course only ever see totals backed by at least 3 established students, like "Appeared on 5 of the last 6 midterms (14 students)". Those totals cover which topics showed up on past exams, topics that always or never showed up, the topics students find hardest in quizzes, what the exam usually looks like, and how often past predictions were right.
• Grades, hours studied and study methods: only shown as averages backed by at least 5 established students, and rounded.
• No one, including other students in your course, can see your own report. The counts are never public and can't be exported.
• How it's stored: each fact is saved under your account's id, not your name or email, so we can remove it when you turn this off or delete your data. That makes it private rather than anonymous: we can connect it to your account, other students can't.
• Quality: to keep the counts honest, reports that keep disagreeing with everyone else, or that arrive in suspicious bursts, count for less. Guest accounts and accounts newer than a few weeks count for less, and school (.edu) email accounts count a little more.
• Your choice: turn off "Help make predictions better for my courses" on the Account page. Everything you added is removed right away, and the course insights are rebuilt without it. You still see course insights either way. Deleting a class or your account removes what it added too.

Get a copy: "Download my data" on the Account page gives you a file with everything stored under your account and a list of your uploaded files.

Fix it: change your name, school and time zone on the Account page. Change a class's school, professor, course name or target grade on the class page, and rename, merge or remove a topic on its topic list. For anything else (like an exam's name or date), send a correction request.

Delete it: delete a class, or everything, from the app (see Deleting your data).

Stop adding to course insights: the setting on the Account page.

Ask us: anyone, with or without an account, can use the request form on the Contact page, or ask someone to do it for them. We aim to answer within about 10 business days. Before acting we check it's you by writing to the email you gave. If we say no to any part, we'll say why, and you can appeal.

Using a right never changes the price you pay or the app you get.

We don't sell your personal information and we don't share it for advertising. There are no ads, so there is nothing to opt out of.

Global Privacy Control (GPC) is a setting in some browsers and browser add-ons that tells each website you visit not to sell or share your data. If your browser sends it, we honor it. That browser sends us no page-view counts, and if you're using the app we keep a note that the signal was on.

You can send classmates a link to add your course to their own account. Here is what that shares and what we record.

• What the link shows: the school, the course code and the course name from the school's list, and your first name only if you type it in. Never your files, notes, grades, reports, professor research, email or last name.
• What a classmate gets: their own class for the same course, nothing copied from yours. They can't see your data and you can't see theirs.
• What we record when someone joins: which link they used, whose link it was, which class it made and when. The person who sent the link sees how many people joined with it, never who. Students in the course see how many have signed up only once it's 3 or more ("fewer than 3 so far" before that). We also use the join record to let a classmate who joined with your link count toward the course's 3 after 1 day instead of 7 (see Course insights).
• How long: a link stops working 150 days after it's made, or as soon as you turn it off. A turned-off link stays (so the count stays right) until you delete that class or your account. A join record goes when the link's class is deleted or either account is deleted.

After an exam you can tell us which topics showed up. Your report stays private to you. The facts from it are counted as described under Course insights.

Cookies: we only use cookies to keep you signed in (and to finish saving a guest account when you add your email). No ad cookies and no tracking cookies.

Your browser also keeps a few app settings on your device, like the last school you picked, study rounds you've finished, and hints saved while you were offline. The Cookie Notice lists them all.

Analytics: we use Vercel Web Analytics to count page views. It doesn't use cookies. Vercel says it tells visits apart with a scrambled code made from each request, which it throws away after 24 hours. It stores the page address, the site you came from, your rough location (country, region and city), and your browser, operating system and device type. Before a page address is sent, we remove class and exam ids and anything after a "?". We only look at totals.

If you join "Tell me when paid plans open" on the Pricing page, we keep that email and a scrambled version of your IP address (to stop spam signups). We use the email only to tell you paid plans are open. It isn't linked to your account.

We delete it 18 months after you sign up at the latest. Deleting everything from the Account page also removes it if it's the same email as your account. To be taken off sooner, use the Contact page.

Your classes, files, notes and reports: until you delete them (or your account).

Invite links and the record of who joined with them: until the class or either account is deleted. A link stops working after 150 days or when you turn it off.

Saved AI results (kept so we don't pay for the same work twice): deleted with your account, and in any case 90 days after they're made.

Daily-limit records: 90 days. Security records: 180 days. AI cost logs and feature counts, which hold no content: about 13 months. Paid-plans email list: 18 months at most.

Your age statement, your agreement record and the Global Privacy Control note: until you delete your account. After that we keep only the small agreement record described under Deleting your data, for 4 years.

Privacy requests sent from the Contact page: 24 months, as the record of how we answered. Requests from professors and schools: 3 years.

Shared course data: Test Plan research (with the pages and findings it found) is deleted 12 months after it was made, except the newest finished research for each course. Old versions of course insights: 12 months (the live copy stays). Shared course topic names that no class uses any more: 24 months after their last update. Course codes students added to a school's course list: deleted once no class has used them for 12 months.

Copyright notices: if someone sends a copyright notice or counter-notice, we keep it, what we removed and each step we took, so we can show how it was handled. Strikes and in-app notices on your account are deleted with your account. The notice record stays, without the link to you. See the Copyright page.

Backups: we sometimes make a full backup copy of the database to keep it safe. Backups are kept on an encrypted drive, and each one is deleted within 30 days (we keep at most the 4 newest), so deleted data is gone from backups within 30 days.

The Data Retention page lists every period in one place.

Delete a class from the bottom of its page. That removes your class, its files and reports, everything the app made from them for you, and what the class added to course insights (the course insights are rebuilt without it). Saved AI results made from it are deleted within 90 days of being made. Shared course topic names and the Test Plan research for the course stay with the course, on the schedule above.

Delete everything with "Delete all my data" on the Account page. That removes every class, file, hint, mistake and report, the saved AI results made for you, a paid-plans list signup with the same email, and everything you added to course insights (the course insights are rebuilt without it). Then it deletes the account itself.

After that, usage logs keep the cost of past AI requests with no link to you, and the scrambled IP address is cleared.

We also keep one small record that the account agreed to the Terms: a one-way scrambled code made from the account's id (it can't be turned back into your email), which document and version, and when. We keep it 4 years, then delete it. It's how we can show what was agreed if there's ever a dispute.

A guest account lives in the browser that made it. If you clear your browser data without adding an email, we can't connect you to it again.

We keep a guest account and everything in it until you delete it, the same as an account with an email. We don't delete unused guest accounts on a timer yet. If we start, this page will say how long first.

The app is made for college students 18 and over. The first time you add a class or ask for a sign-in link, we ask you to confirm you're 18 or older with a checkbox. We never ask for your birthday.

If we learn that someone under 18 is using the app, we close the account and delete its data, as the Terms say.

We don't knowingly collect data from children under 13. If we learn we have, we delete it. If you think a child is using the app, tell us through the Contact page.

The app is run from and hosted in the United States and made for US college students. If you use it from somewhere else, your data is handled in the US, where privacy laws may differ from yours. We don't market outside the US.

Students can only read their own rows in the database, and sensitive records can only be read by our server. Sign-in uses emailed links instead of passwords, and IP addresses are stored scrambled. No system is perfectly secure. If a breach affects your personal information, we'll tell you as the law requires.

Every version has a number and a date, and the Legal page lists what changed.

If we change what we collect, why, or who receives it, we'll tell you in the app before it applies, with a short summary of what changed. We'll ask you to confirm you've read the new version.

Until you do, you can still open your classes to read them, and use the Account page to download, fix or delete your data, or sign out. Adding files, Prof. Hints and new classes, and the AI features (Test Plan research, topic questions, quizzes and re-ranking), wait until you agree.

Email us at help@classspeedrun.ai, or use the Contact page. A real person aims to answer within about 2 business days.