Privacy

Last updated 28 October 2026

This page says what DuePilot stores, what it does not, and how to delete everything. It is written to be read rather than to be defensible, and it describes what the software actually does today, not what it might do.

The short version

DuePilot never sees your school password. You connect your school once, on your phone or in the Windows or Mac app, and our server does the fetching for that one account, so every device shows the same thing. It holds your school sign-in, encrypted, and the assignments and grades it finds for you, so the app can show your GPA and how each class is going. Nothing is ever sold, and nothing is used to train a model. You can delete all of it from inside the app, immediately.

Who we are

DuePilot is made by Anthony Booth, an individual developer in the United States. Questions, complaints, or a request to delete something: [email protected].

How your school is connected

One account, one school connection, the same week on every device. Since version 1.1.12 the Windows and Mac app works exactly like the iPhone app: you sign in on your school's own page in a DuePilot window, and the connection is kept with your account. Before 1.1.12 the computer app kept your school on the computer itself; the first time you open 1.1.12 that connection moves to your account and the computer's copy is removed.

Our server does the fetching. It holds the session created when you signed in on your school's own page, and it stores the assignment titles, classes and due dates it finds, the instructions your teachers wrote for each one (as plain text, so the AI can explain the real assignment), and your grades in each class (the class score, letter, each category's percentage and your recent marks), so your phone can show your week and your grades dashboard. When you open an assignment for notes, it also reads the files and pages that assignment points to, and the syllabus and announcement lines that mention it, so the AI explains the real work. That text is held only briefly to write your notes. It reads only your own work, and it never posts, submits or changes anything at your school.

What is stored, and where

What	Where	Why
Your email address and a hash of your password	Our server	So you can sign in on more than one device. The password itself is never stored and never leaves your device in the clear.
An Apple account identifier, if you use Sign in with Apple	Our server	To recognise you next time. If you use Apple's private relay address, that is the only address we get.
A device identifier we generate	Our server	To tell your installs apart. It is not your phone's advertising ID and not anything Apple or Google assigns.
Your grades, if you connect your school from a phone	Our server	To show your GPA, each class's grade and where you are losing points. Only you see them. Disconnecting your school or deleting your account removes them.
Your first name, school, year and a friend code, if you turn on Rankings	Our server	Classmates you have added see your name. Leaderboards never do: every row on a board reads "Anonymous Rank #4".
One 0–100 score per class, if you turn on Rankings	Our server	It is what places you on a board. It is derived: not a grade, not a percentage from your school, and not reversible into your marks.
Your school sign-in, only if you connect from a phone	Our server, encrypted	To check your school for new work. If the server has no encryption key it refuses to store one at all rather than keeping it in the clear.
Assignment titles, classes, due dates, your teachers' instructions for each, and study notes the app wrote	Our server	So your phone can show your week. Published from your computer, or fetched directly if you connected from a phone.
Practice questions, never their answers	Our server	So you can revise on a phone. The answer key stays on the computer on purpose, and the server strips answer-shaped fields out of anything sent to it.
A count of AI tokens used	Our server	To meter the free allowance. Prompts and answers are not stored.
A push notification token, if you allow notifications	Our server	To send you a reminder. Delete the app or turn notifications off and it stops.
Study notes you choose to Send to class	Our server, for 30 days	Only when you press Send to class. The link shows the title, the class and the first part of the notes to anyone who has it, never your name, and never your teacher's files or any practice answers. It expires after 30 days, and deleting your account deletes it at once.
Who joined with your code	Our server	To give you and them the Pro days you earned. It is never shown to anyone else.

Google Classroom

If you connect Google Classroom, DuePilot asks Google for read-only access to five Classroom scopes, and nothing else. Here is what each one is for, in plain words.

What we ask for	What we do with it
Your courses	To list your classes so your week is grouped by class.
Your coursework	To show you what is due and when.
Your own submissions	To show your own marks back to you. Only yours.
Course materials	Teachers often post the required reading as a course material rather than attaching it to the assignment, so this is where we find what you are actually studying.
Announcements	And just as often they attach it to an announcement instead. Same purpose.

What we deliberately do not ask for. We do not request access to your Google Drive. That means when your teacher attaches a document to an assignment, DuePilot can see that the file exists and give you a link to open it in Classroom, but it cannot read what is inside it. Study notes for that assignment are written from the title and your teacher's instructions instead, and the app tells you so on the page.

We could ask for Drive and write better notes. We decided the trade was not worth it: Drive access is broad, it is hard to explain to a student in one sentence, and a link to Classroom gets you to the same document. We also do not request any scope that would let us see another student's name, work or email address.

Limited Use. DuePilot's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Specifically, and without exception: we do not sell Google user data, we do not use it for advertising, we do not transfer it to anyone except as needed to provide DuePilot to you, and no human at DuePilot reads it. Your Google data is used for one purpose, which is showing you your own schoolwork and writing study material from it. You can revoke DuePilot's access at any time at myaccount.google.com/permissions, and deleting your account removes everything we hold.

What we keep to make DuePilot better

These are kept with your account and used only to run, fix and improve DuePilot, and to describe how students use it in numbers that name nobody (for example, "students using DuePilot hand in more work on time"). We never sell any of it and never use it for ads.

Where you found DuePilot: a friend's invite, a shared study guide, our website or a social post.
The days you open DuePilot, so we know whether people come back.
Which features you use, such as notes, flashcards, practice, rankings and sending a guide to your class, and when you see the Pro screen or upgrade.
Whether reminders and invites you send get opened and lead to someone joining.
Your device type, app version and which school platform you connected, and error reports when something breaks, so bugs get fixed.
When during the day the AI is used, counted across everyone, never as a log of what you asked.

We do not keep the words of your AI questions and answers, and we do not use your phone's advertising ID.

What is never stored on our server

Your school password. You sign in on your school's own page, in a real browser view. DuePilot never sees what you type there. There is no script injected into that page and no form is read.
Answer keys. Practice answers never reach a phone, by three separate mechanisms rather than one.
Payment details. Card numbers go to Stripe and never touch our server.

Who else sees anything

Stripe, if you subscribe. They handle the payment; we store only the identifiers they give us so we know your plan is active.
OpenRouter, if you use the AI features. It routes that one request to the model that answers it. Only the assignment text that request needs is sent. Your name, your email, your grades and your other classes are not. If you point DuePilot at a different provider in Settings, or at a model running on your own computer, that choice replaces this one.
Resend, to send your sign-up confirmation and password reset emails.
Apple, for Sign in with Apple and for push notifications, if you use them.
Fly.io and Cloudflare, they run the server and the website, so they necessarily handle traffic in transit.

That is the whole list. We never sell your information. There are no advertising trackers, no third-party analytics SDKs, and no data brokers. The usage numbers above are counted on our own server.

Google Classroom material is held to a stricter rule than the rest. It is never sent to a model provider whose terms permit training on what it receives. DuePilot checks this before the request leaves your computer and refuses to send rather than sending anyway, and the server refuses the same request a second time. That holds for whichever provider you choose, including your own.

Your school

DuePilot only ever reads from your school's systems. It never writes. It never posts, submits, hands anything in, or changes a setting. A test runs on every build that checks this and the build does not ship if it fails. To your school it looks like you reading your own pages.

Your grades. Wherever you connect, our server reads your grades from your school so the app can show them on every device, and keeps them with your account until you disconnect your school or delete your account. Grades are never sold, never shown to classmates, and never used to place you on a board.

Google Classroom asks you for more than DuePilot uses, and you should know why. The consent screen says DuePilot can "see, create and edit coursework items including assignments, questions, and grades". Creating and editing is permission we do not want and do not use. Google lists four permissions that allow an app to read your assignment titles and due dates: two of them read your whole class's work, and of the two limited to you, the read-only one is missing from Google's own setup console and cannot be registered, so Google refuses to grant it. The one you see is what is left. DuePilot never writes to Classroom, the build fails if a single write call is added to the code, and we will narrow the request the day Google makes the read-only version available.

Deleting everything

You do not have to ask us, and there is no waiting period.

On a phone: open the You tab and press Delete my account.
On a computer: the same: the You tab, Delete my account. To clear what the app keeps on the computer too (its window settings), uninstall it and delete the DuePilot folder in your user directory.

Deleting removes your account, your school connection, everything fetched for you, your score, your rank and your friend list, and cancels any subscription. It happens immediately and it cannot be undone. Backups roll off within 30 days.

How long things are kept

While your account exists. The copy of your week is replaced each time it refreshes rather than accumulating. If you disconnect your school, the stored session and everything fetched with it are deleted at that moment.

Age

DuePilot is for students aged 13 and over, and you confirm that when you make an account. We do not knowingly collect anything from a child under 13. If you believe a younger child has made an account, email us and it will be deleted.

Where the data lives

On servers in the United States. If you are using DuePilot from elsewhere, that is where your information is processed.

Your choices

Rankings are off until you turn them on. Leave them off and no score, school or name of yours is ever shown to another student, and you are on no board at all.
Connecting a school is a choice. Leave it unconnected and paste a calendar link instead, and only your due dates and titles are held. Disconnect any time on the You tab and the school sign-in is deleted straight away.
You can ask for a copy of what is stored about you, email us and you will get it.

Changes

If this changes in a way that affects what is collected, the date at the top changes and the app tells you. We will not quietly widen it. The last change, on 28 October 2026, added the usage information listed under "What we keep to make DuePilot better", along with study notes you choose to send to your class.

Contact

[email protected]