Privacy

We store your email address, the school you typed (if any), the time you signed up, and the exact consent sentence you ticked:

“We store your email only to send you an invite and product news about Coursepill. You can ask us to delete it any time.”

We keep that sentence so we can show you agreed to hear from us, which Canada's anti-spam law requires. We use your email only to send you an invite and product news about Coursepill. Every email will have an unsubscribe link, and you can ask to be removed at any time.

To create an account we store your email address and a scrambled (hashed) version of your password — never the password itself. If you sign in with Google instead, Google tells us your email address and name; we don't get your Google password or access to anything else in your Google account.

We also store what you tell us when you join: the name you'd like us to use, your school, your time zone, whether your school uses Canvas, and the invite code you used. To keep bots out, sign-up and sign-in forms may use Cloudflare Turnstile, which checks your browser without tracking you across sites.

Coursepill is for adults: you confirm you're 18 or older when you join, and we don't knowingly collect data from anyone younger.

You add your course material by uploading it. Coursepill doesn't connect to your school's Canvas or any other learning system. If that changes, it will be read-only, it will never submit or post anything, and this page will say so first.

When you upload slides, PDFs or documents, or paste in text, we store those files and the text taken from them in your account, where only you can see them. Files you attach to a question in Ask are stored the same way and sent to the AI model with that question. Upload only material you have the right to use (see the Terms).

We also store what you create in Coursepill: your learning profile settings, questions you ask, practice attempts, flashcard reviews, levels and which items you've marked as studied. If you turn on notifications, we store the address your browser gives us for sending them.

To write summaries, lessons, answers and questions, we send the relevant passages of your course material to an AI model provider (currently Google's Gemini API). We send only what's needed for the request in front of you. We don't use your material to train any model of our own, and we don't share it with anyone for their marketing.

We use Google's paid API, under terms where Google doesn't use your prompts or the answers to improve its products. Google keeps requests for a limited time only to detect abuse.

For each AI request we log, against your account, what it was for (a summary, an answer, a level), which model handled it, and how many tokens it used — not the content. We use this to count your credits and set fair limits. It's kept with your account and deleted with it.

We use a small number of service providers, only to run Coursepill:

• Supabase — our database and file storage, hosted in Canada (Montréal).
• Vercel — hosts the website. Requests may pass through servers outside Canada.
• Google — the AI processing described above, and Google sign-in if you use it. Both may happen outside Canada.
• Cloudflare — the Turnstile check on sign-up and sign-in forms, when it's switched on.
• Stripe — payments, if you buy a plan or credits. Stripe handles your card details; we never see or store them. We keep your Stripe customer id and which plan you're on. Stripe may process payments outside Canada.
• An email delivery service — to send sign-up confirmation and password reset emails.

We don't sell personal information, and we don't use advertising or third-party analytics trackers.

If you sign in, we set cookies that keep you signed in. Your light or dark mode choice is saved in your own browser. That's all — no tracking cookies.

Waitlist details are kept until you unsubscribe or ask us to remove them. App data is kept while you have an account.

You can delete your account yourself on the Account page. That removes, straight away and permanently, your account, your courses, synced and uploaded files, everything generated from them, your progress, and your waitlist entry if you had one. Copies in our providers' routine backups expire on their own schedule.

You can ask to see the personal information we hold about you, get a copy of it, correct it, or have it deleted. You can edit your name and school and delete your account yourself; for a copy of your data (we'll send it as a file) or anything else, email hello@coursepill.com and we'll reply within 30 days. If you're not satisfied with our answer, you can contact the Office of the Privacy Commissioner of Canada.