Privacy Policy

Last updated: June 7, 2026

CoursePlanner.ai (“CoursePlanner”, “we”), a product of DeGenito Innovations, is built privacy-first. This policy explains what we collect, why, and the control you have. We do not sell your personal data.

1. Local-first by default

Your workspace — courses, deadlines, notes, aid items, and similar — is stored in your own browser (local storage) on the device you use. By default it never reaches our servers. You can export it as a file or delete it entirely at any time from the in-app data menu.

2. What we collect (only if you choose)

• Account (optional): if you create an account for cloud sync, we store your email address and a securely hashed password (PBKDF2; we never see your plain password), plus an encrypted copy of your workspace so it can sync across your devices.
• Waitlist (optional): if you join the waitlist we store your email and the role/school you provide, only to notify you about the product.
• Tutor profiles (optional): if you list yourself as a tutor, the details you enter (name, subjects, rate, contact, school, state) are shown to logged-in students.
• Parent access (optional): if you generate a share code, a parent can view only the scopes you explicitly grant; you can revoke it anytime.

3. What we never collect

We never ask for or store your Social Security number, your FSA ID password, or your bank/account numbers. We do not auto-submit the FAFSA. If you connect Canvas, your Canvas access token stays in your browser and is used only to fetch your data through our proxy — it is never stored on our servers.

4. Cookies

We use a single essential cookie (cp_sess) only after you sign in, to keep you logged in. It is HttpOnly, Secure, and SameSite=Lax. We do not use advertising or cross-site tracking cookies. Site analytics are provided by Cloudflare Web Analytics, which is cookieless.

5. Third parties

• Cloudflare — hosting, security, cookieless analytics, and the AI model that powers Athena.
• Stripe — payment processing, only if/when you subscribe to Premium. We never see your full card details.
• Canvas / Google — only if you choose to connect them, and only with the access you grant.

6. AI (Athena)

When you use AI features, we send a compact, relevant summary of your request to the AI model to generate a response. We don’t use your content to train models. Athena is not a medical, mental-health, legal, or financial professional; its output is informational.

7. Your rights

You can export or delete your data at any time. To delete a cloud account or request data removal, email hello@courseplanner.ai. Depending on where you live (e.g., GDPR/CCPA), you may have rights to access, correct, or delete your information; we honor these requests.

8. Children

CoursePlanner is intended for college students who are 18+ or enrolled in a postsecondary institution. We do not knowingly collect data from children under 13. A separate, consent-compliant flow is required for younger users.

9. Changes & contact

We’ll update this policy as the product evolves and revise the date above. Questions? hello@courseplanner.ai.

This is a pre-launch policy provided for transparency and is not legal advice. See also our Terms of Service.