Privacy Policy

Ozyplan helps students keep track of their coursework. To do that it handles school information that matters, so this policy explains, in plain language, what we collect, why, who else touches it, how long we keep it, and what you can do about it. It covers the Ozyplan website and app at www.ozyplan.com, the Ozyplan Canvas Sync browser extension, and the emails we send.

The short version

• We collect what you give us, and — if you connect Canvas — the coursework your own Canvas account can already see, including your own submission status, score and grade where Canvas shows them to you.
• We use it only to run Ozyplan for you: your list, your plans, what changed, and the AI features you use.
• We never sell it, never use it for advertising, and never share it with your school, teachers or parents.
• Some coursework text is processed by our AI provider, OpenAI, to read requirements and write plans.
• You can export everything or delete your account yourself, at any time.

Who runs Ozyplan

Ozyplan is an independent service operated in the United States. It is not run by, affiliated with, or endorsed by your school, your school district, or Instructure, the company that makes Canvas. When this policy says "we" or "us", it means the people who operate Ozyplan. You can reach us at vidyasetu.support@gmail.com.

Information you give us

• Your account — your name, email address and password. Your password goes to our sign-in provider, which stores only a scrambled (hashed) version; we never store it in readable form.
• Optional profile details — if you choose to add them: your grade or year, school, weekly study time, time zone and academic goal. They are used to fit plans to you.
• Coursework you add — classes you create, and files you upload (syllabi, handouts, slides, spreadsheets, photos of worksheets), plus the text we extract from them.
• What you do in the app — work you tick off, plan steps you mark done or not useful, the time you have tonight, classes you keep or set aside, and questions you ask about a task.
• Messages to us — whatever you send when you email us.

Information from your school's Canvas

Connecting Canvas is optional. There are three ways to do it; each is read-only, and each reads only what your own Canvas account can already see:

• Ozyplan Canvas Sync, our Chrome extension (the main way, described in detail below).
• A Canvas calendar feed — a link you paste from Canvas. It gives us the dates and titles in that calendar, and we keep the link so we can check it again.
• An advanced fallback for students who cannot install the extension: a Canvas access token you create and paste in (or, where it is offered, Canvas's own sign-in). We store that token encrypted and use it only to read your coursework.

From whichever way you connect, we can receive:

• Your classes — names, identifiers, terms, time zones and how grades are weighted.
• Coursework and rules — assignments and quizzes with their instructions, requirements, rubrics, points and every due, unlock and lock date; assignment groups, weights and drop rules; and whether work counts toward the final grade.
• Course materials — modules and their requirements, pages, the syllabus, announcements, the opening post of discussions, course calendar events, links, and course files you can open, including their contents.
• Your own progress — where Canvas shows it to you: whether work is submitted, graded, late, missing or excused, when it was submitted or graded, and your own score or grade. We use this so Ozyplan does not tell you to do work you have already done, and can flag work that is missing.
• Identifiers — your Canvas user ID and the address of your school's Canvas, so a sync is always saved to the right account.

We do not receive discussion replies, Canvas inbox messages, class rosters, other students' work or grades, quiz questions, or anything teacher-only. We keep a record of what each item looked like when we last saw it, so we can tell you what changed.

Ozyplan Canvas Sync (browser extension)

Canvas Sync is an optional Chrome extension. Before it connects, Ozyplan shows you what it reads and how it is used, and it does nothing until you press Allow. After that, it reads coursework from your school's Canvas using the session already signed in on your own computer, sends it to your Ozyplan account, and keeps it up to date in the background until you disconnect it.

• Which classes — this school year's, and only ones that behave like academic classes. Before importing, it asks Canvas a few structural questions about each enrolment (how many assignments, whether they carry points, when they were due, whether there is a syllabus) and sends us those counts and dates, not the content. Clubs, information pages and past years are left out, and you can see what was set aside, and why, on your Canvas page.
• What it never collects — it never asks for or stores your Canvas password, your school login or your two-factor codes, and it never copies or sends your Canvas cookies to us. It does not collect your browsing history or content from unrelated websites.
• Read-only — it never submits, posts, edits, deletes, grades, or otherwise changes anything in Canvas. It has no more access to Canvas than your own account does.
• How it recognises Canvas — when you open its window on a web page, it checks whether that page is a signed-in Canvas by looking for a few Canvas page markers and asking that same site who is signed in. The answer stays in your browser unless the page is Canvas.
• How it stays connected — it creates an Ozyplan-only credential and keeps it in Chrome's storage for the extension, so background syncs can reach your account. We store only a one-way hash of it. It is not your Canvas password or cookie, and disconnecting revokes it.
• What it keeps in your browser — that credential, the address of your Canvas, the classes waiting for you to choose, and a summary of the last sync. Your coursework itself is not kept in the extension.

Browser permissions, and why each one exists

These are the permissions the published extension requests. Chrome shows them to you when you install it, and this is the same list given to the Chrome Web Store.

• storage — remembers which Ozyplan account this browser is connected to and which classes to keep in sync, so you are not asked twice.
• alarms — runs the background refresh on a schedule. Chrome shuts the extension down when idle, so an alarm is the only way to wake it.
• scripting — runs a small script inside a Canvas tab, to recognise it as Canvas and to download course files within your own session.
• activeTab — lets your click on the toolbar icon give the extension access to that one tab, instead of standing access to everything.
• Access to https://*.instructure.com — the standard Canvas web address, so the usual case works without a second prompt.
• Access to ozyplan.com — Ozyplan itself, where your coursework is sent and where the extension is connected to your account.
• Optional access to other sites — some schools run Canvas on their own web address. The extension can ask for access to other sites, but nothing is granted at install: when you are on a school-hosted Canvas, it asks Chrome for that one address, and Chrome shows you exactly which site. You can say no, and you can remove it later in Chrome's extension settings.

The extension does not request access to your cookies, browsing history, downloads or other tabs, and it runs no code downloaded from the internet — everything it runs ships inside the package Chrome reviewed.

Chrome Web Store Limited Use

The use of information received from Google APIs will adhere to the Chrome Web Store User Data Policy, including the Limited Use requirements. In practice: information Canvas Sync collects is used only to keep your coursework in Ozyplan accurate and up to date and to provide the Ozyplan features built on it; it is passed to others only when that is necessary for that purpose (the service providers listed below), to comply with the law, or to protect against fraud and abuse; it is never sold, never used for advertising, and never used to decide creditworthiness or for lending; and people do not read it except as described under "Who can see your information".

Information collected automatically

• Technical logs — like most websites, our hosting providers record basic request information (such as IP address, browser type, the page asked for, and the time) to deliver pages and keep the service secure.
• Sync records — when each sync ran, whether it finished, counts of what it found, and error details that name the affected item, so problems can be fixed.
• Product events — records such as "account created" or "Canvas connected", with small, non-sensitive details (a plan name, a count, an error type). They never contain your coursework, file contents or AI prompts.
• AI usage records — which AI feature ran, the model, the amount of text processed and its cost, so we can keep usage fair and costs under control.

Cookies and browser storage

Ozyplan uses cookies only to keep you signed in and to keep sign-in secure. It also saves a few preferences in your browser's storage — your light or dark theme, how much time you said you had tonight, prompts you have dismissed, and that you allowed Canvas Sync. We do not use advertising cookies, analytics cookies, tracking pixels or any third-party tracker, so there is nothing to opt out of.

How we use information

• To create and secure your account and sign you in.
• To bring in and organise your coursework, keep it in sync, and show what changed. Changes are found by comparing what Canvas showed before with what it shows now; no AI is involved in that part.
• To read requirements and deadlines out of your coursework and write your lists, plans and study materials with AI (see below).
• To keep usage fair, prevent abuse, and fix problems.
• To answer you when you contact us.
• To comply with the law.

We do not use your information for anything unrelated to helping you with your schoolwork.

AI processing

Ozyplan uses OpenAI's API to read coursework and write plans. When a feature needs it, we send OpenAI the relevant coursework text (for example a syllabus, an assignment's instructions, or the list of work due soon) and the optional profile details that shape a plan (grade or year, academic goal, weekly study time, time zone). We do not send your name or email address.

We do not use your coursework to train AI models. Under OpenAI's API terms, data sent through its API is not used to train OpenAI's models unless the customer opts in, and Ozyplan does not opt in. OpenAI keeps API data for up to 30 days to monitor for abuse, then deletes it unless the law requires otherwise.

To suggest study resources, our servers also look up short topic phrases from a plan (for example “implicit differentiation”) on YouTube and Wikipedia. Those lookups carry the topic phrase only — never your name, email, account or coursework.

Automatic analysis of your coursework

Some analysis happens without you pressing anything. When coursework is first imported, Ozyplan reads the material it judges most useful, so your plan is not empty when you arrive. On accounts with the full plan, it also keeps working in the background afterwards, reading new coursework a small amount each day. This only ever uses coursework already in your own account, skips material that has not changed, and stops when nothing useful is left. Automatically analysed coursework is treated exactly like coursework you analyse yourself. Disconnecting Canvas stops it.

The evening email

The evening email is not switched on yet. When it is, it will be off unless you turn it on in Settings. It lists the work due soon and anything that changed in your classes — titles, class names and dates from your own account — on school nights, and only when there is something to list. Every email will have a link that switches it off without signing in.

Who we share information with

We share information only with the service providers that run Ozyplan for us, and only what each needs to do its job. They process it on our behalf, not for their own purposes.

• Supabase — our database, sign-in system and file storage. Your account, coursework and files are stored there, in the United States (East US).
• Vercel — hosts the website and runs our servers, in the United States.
• OpenAI — processes coursework text for the AI features, as described above.
• Resend — delivers our emails, such as sign-up confirmation and password reset. It receives your email address and the message.
• YouTube and Wikipedia — receive short topic phrases only, as described above.
• Stripe — would process payments if paid plans go on sale. Nothing is for sale today, so Stripe receives no information about you.

We do not sell your personal information, and we do not share it for advertising. We do not use it to decide creditworthiness or for lending. We never give it to your school, teachers, parents or anyone else, except: when you ask us to; when the law requires it (such as a valid court order); to protect someone's safety or investigate fraud or abuse; or to a company that takes over Ozyplan, which would have to keep the promises in this policy — and we would tell you first.

Who can see your information

Your information is private to your account: the database only returns your own records to you. Ozyplan's operator can technically access the database to run the service, but does not routinely look at anyone's coursework or grades. We look at a specific person's information only when that person asks us to (for example, to help with a problem), when it is needed to investigate a security issue or abuse, or when the law requires it. Otherwise we only look at statistics that do not identify anyone.

Security

We use reasonable safeguards suited to school information: everything travels over HTTPS; database rules stop any account from reaching another account's records; uploaded and imported files are kept in private storage and opened through short-lived links; Canvas access tokens from the advanced fallback are encrypted; the extension's credential is stored only as a hash; and our database provider encrypts stored data. No system is perfectly secure, and we do not claim otherwise. If a breach affected your information, we would tell you as the law requires.

How long we keep it

• Your account and coursework — for as long as your account exists. We do not delete accounts for being inactive.
• Product events — kept for measuring how Ozyplan is used. When you delete your account, they are kept only without any link to you.
• Hosting logs — kept by our providers for a short time (on our current plans, about an hour at Vercel and about a day at Supabase).
• OpenAI — up to 30 days, as described above.
• Backups — we occasionally keep a backup copy of the database so the service can be recovered after a failure. A backup can contain information for up to 30 days after you delete it; backups are then destroyed.

Disconnecting Canvas, and deleting what was imported

These are two separate actions, and it matters which one you want.

• Disconnecting — from the extension or from your Ozyplan account — revokes the connection and stops all future syncing and automatic analysis. It does not delete the coursework already imported, which stays in your account so your existing plans keep working. Removing the extension from Chrome also stops syncing and clears what it kept in your browser.
• Deleting a class or a file removes it from your account. Deleting your account removes everything described next.

Deleting your account

You can delete your account yourself from Settings → Privacy & data. It takes effect immediately: your profile, classes, uploaded and imported files, imported coursework and their change history, AI results and plans, Canvas and calendar connections, the extension's link to your account, usage records and any plan record are deleted, and your files are removed from storage. Product events are kept only without any link to you, and copies can remain in hosting logs and backups for the periods listed above. After deletion, any credential still in the extension can no longer reach your account.

Your choices and rights

• See and download — download a copy of your data (a JSON file) from Settings → Privacy & data.
• Correct — edit your profile and classes in the app, or ask us to fix something you cannot.
• Delete — delete classes, files or your whole account yourself, or ask us to.
• Stop collection — disconnect Canvas or a calendar feed at any time.

Depending on where you live, you may have other rights under privacy law. Email vidyasetu.support@gmail.com with any request, and we will answer within 30 days. We may need to confirm the request comes from the account holder before acting on it.

Students under 18, and children

Ozyplan is made for high-school students. It is not meant for children under 13, and we do not knowingly collect personal information from anyone under 13. If we learn that we have, we will delete it. If you believe a child under 13 has an account, email vidyasetu.support@gmail.com.

If you are between 13 and 17, please use Ozyplan with the permission of a parent or guardian and read this policy with them. A parent or guardian may contact us about their teen's account; we will verify the request before acting on it.

Schools and student records

Ozyplan is used by students directly: you decide to connect your own Canvas account, and your school is not our customer and does not share records with us. Because of that, we are not acting as a "school official" for your school. We do not claim any certification or formal compliance audit (including FERPA, COPPA or GDPR). If a school or district wants to use Ozyplan, please contact us first — that would need a separate written agreement.

Users outside the United States

Ozyplan is designed for students in the United States, and your information is stored and processed in the United States. Ozyplan Canvas Sync is offered in the Chrome Web Store only in the United States. If you use Ozyplan from elsewhere, your information will be transferred to the United States.

Changes to this policy

When Ozyplan changes, this policy will too, and the "Last updated" date above will change. If a change affects how we use information you have already given us, we will tell you in the app or by email before it takes effect.

Contact

Questions or requests about privacy: vidyasetu.support@gmail.com. Related pages: Terms of Service and AI & Academic Disclaimer.