Privacy Policy

1. Introduction

UPGrade ("we," "our," or "us") is a student life management application operated by Albright Forge. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our web application at upgrade.albrightforge.com (the "Service").

2. Information We Collect

We collect the following types of information:

• Account Information: When you sign in with Google or Apple, we receive your name, email address, and profile picture from your identity provider.
• Google Calendar Data: With your permission, we access your Google Calendar events (read-only) to display them within UPGrade. We do not modify your calendar.
• Google Classroom Data: With your permission, we access your Google Classroom courses, coursework, and submission statuses (read-only) to display assignments and grades. We do not modify your Classroom data.
• School Information System (SIS) Data: If you choose to connect your Focus SIS account, we access your grades, assignments, and course information using credentials you provide.
• User-Created Content: Data you create within UPGrade, including journal entries, goals, to-do items, calendar events, and messages.
• Payment Information: Payment processing is handled entirely by Stripe. We do not store credit card numbers or banking information on our servers.

3. How We Use Your Information

• To provide and maintain the Service
• To display your calendar events, assignments, and grades in a unified dashboard
• To sync data between your connected services and UPGrade
• To process payments and manage subscriptions
• To communicate with you about the Service
• To improve and optimize the Service

4. Data Storage and Security

Your data is stored securely using Google Cloud Firestore with strict security rules that ensure only you can access your own data. All data transmission is encrypted using HTTPS/TLS. School credentials (Focus SIS) are encrypted at rest using AES-256 encryption before storage.

5. Data Sharing

We do not sell, trade, or rent your personal information to third parties. We may share data with:

• Service Providers: Firebase (authentication & database), Vercel (hosting), and Stripe (payments)
• Legal Requirements: If required by law or to protect our rights

6. Google API Services User Data Policy

UPGrade's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We only use Google data to provide and improve UPGrade features directly visible to you. We do not use Google data for advertising, and we do not allow humans to read your data unless required for security purposes, to comply with law, or with your explicit consent.

7. Your Rights

You have the right to:

• Access and download your personal data
• Request deletion of your account and associated data
• Disconnect any connected service (Google, Focus SIS) at any time
• Revoke Google permissions via your Google Account settings

8. Children's Privacy

UPGrade is designed for students aged 13 and older. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child under 13 has provided personal information, please contact us for removal.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the updated policy on this page with a new "Last updated" date.

10. Contact Us

If you have questions about this Privacy Policy or your data, please contact us at: albrightassistant@gmail.com