Your family information stays yours.

Effective August 19, 2026. This notice covers the Schoolday staging service. Live Gmail and AI processing are disabled while Google verification, security assessment, and provider reviews are completed. Questions or deletion requests can be sent to aratner92@gmail.com.

Who Schoolday is for

Schoolday is a general-audience service for adult family owners. It is not directed to children. An adult controls each family account and any connection to Gmail.

Information Schoolday uses

Schoolday stores account and family details you provide, such as parent contact information, children, schools, preferences, reminders, events, and actions. If live Gmail access is later enabled and an adult family owner chooses to connect it, Schoolday will request only the read-only Gmail scope. That permission cannot send, draft, edit, or delete email.

Connected Gmail messages and attachments will be processed transiently to identify school-related communications and create visible family reminders, events, and actions. Original email bodies and attachment contents are not intended to be stored in the Schoolday database. Schoolday keeps validated structured facts and minimal source details—such as sender, subject, received time, and Gmail message and thread references—so the adult family owner can review the source in Gmail.

How information is used and shared

Information is used only to provide, secure, support, and improve the user-facing Schoolday service. Schoolday does not sell Google user data, use it for advertising or credit decisions, or use it to train or improve a generalized or foundation AI model.

The staging service uses Cloudflare for application hosting and isolated processing, Supabase for authentication and database storage, and Google for user-authorized Gmail access. Before Gmail processing is enabled, any use of AWS KMS for credential protection and OpenAI for transient extraction must pass the documented security and privacy approval gates. Resend may deliver requested family notifications, and Stripe may process subscription billing; neither is permitted to receive Gmail OAuth credentials or original Gmail message bodies.

Schoolday personnel do not routinely access Gmail content. Any exceptional access must be narrowly authorized for security, legal compliance, or message-specific support requested by the adult family owner, and must be audited.

Google Limited Use

Schoolday's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Retention and deletion

OAuth connection transactions expire after about 10 minutes and are targeted for cleanup within 24 hours. Raw Gmail content is designed to exist only in memory for the current processing attempt. Completed processing jobs are retained for up to 30 days, notification delivery records for up to 90 days, product analytics for up to 13 months, and security audit records for up to one year. Structured family facts and source references remain until the adult family owner deletes Gmail-derived data or the account.

Disconnecting Gmail fences new work, stops the mailbox watch, attempts provider token revocation, and destroys the encrypted local credential. Confirmed account deletion removes active Schoolday family data within 30 days. Encrypted database backups are targeted to expire within 35 days; deletion tombstones are designed to prevent deleted accounts from reappearing after a restore.

Your choices

The adult family owner can disconnect Gmail, delete Gmail-derived data, remove family information, or request account deletion. Gmail and any future Calendar permissions are separate. Schoolday never signs forms, sends school replies, makes payments, or accepts legal or medical terms on a family's behalf.