Privacy policy

Schoolbag is operated at getschoolbag.com. For any question about your data or this policy, write to us at support@getschoolbag.com.

Account: the name and email address of each adult in the family, and the password (stored only in encrypted form).

Children: the first name and grade of each child added by parents.

Imported school data: homework, announcements, attachments, forms and links synced from Google Classroom through Schoolbag Chrome Extension, files you upload manually, and the timetable imported in iCal/ICS format.

Study content: summaries, lesson guides and exercises generated from those documents, plus conversations with the assistant.

Reminders and calendar: due dates, class slots and reminders you set up.

Payments: handled by our provider Paddle. We never see or store your card number.

Audience measurement: on public pages only, we count page views with a random per-tab id (erased when the tab closes), the referrer category and the device type — no cookie, no IP address, no typed text; Do Not Track is respected. Inside the family space we only record named usage events (for example "document added"), never their content, kept for 395 days.

To run the service: organize homework, prepare revision guides, answer the assistant's questions and display the calendar.

To help you: the AI assistant receives your family's school data (lessons, homework, assessments) to give useful answers. Your conversations are not used to train AI models.

To manage your subscription and free trial.

To send only necessary emails: family invitations, password resets and essential account information. No advertising, ever.

The Chrome extension only reads what your child already sees in their own Classroom browser session. Access tokens are never stored in clear text nor logged, and every session can be revoked anytime from the settings.

Schoolbag is not affiliated with Google. Data imported from Classroom stays private to your family.

Data is hosted on Lovable Cloud (Supabase infrastructure) with encryption in transit and at rest. Each family can only reach its own data: access is isolated household by household at the database level.

Imported documents and files live in private storage; only signed-in members of your family can open them.

We never sell your data and we show no advertising.

We rely on a small number of providers: hosting and database (Lovable/Supabase), artificial intelligence (Lovable AI gateway), payments (Paddle) and transactional email delivery. These providers process data only to deliver the service.

We disclose data only when legally required.

Schoolbag is designed to be used by a child under the responsibility of an adult in the family who creates the account. The account, subscription and data deletion remain under parental control.

Collected data is limited to what the school service needs: no advertising profiling, no resale.

Your data is kept while your account is active. If you cancel, you can request deletion; without a request, data is deleted after a 90-day grace period meant to allow reactivation.

At any time you can: view and correct your family's information, request an export of your data, revoke an extension session, and ask for permanent deletion of your household and all of its data by writing to support@getschoolbag.com.

If this policy changes significantly, we will let you know by email or in the app before it takes effect.