DueVinci
Terms of Use ← Back to App
Student Privacy & Data Protection

Privacy Policy & Data Retention

Last Updated: August 20, 2026

1. Overview & Commitment to Student Privacy

At DueVinci, student data privacy and transparency are foundational. We designed DueVinci to help you manage courses, track study goals, and calculate grades without exposing your personal information to third-party ad brokers or unauthorized access.

💡 Key Principle: You own all your coursework, assignments, and notes. We never sell your data, we do not show advertisements, and we do not use your academic submissions to train public AI models.

2. Information We Collect

  • Account Credentials: Your student email address and an encrypted password hash managed through Supabase Auth.
  • Academic Information: Course titles, unit codes, assignment descriptions, due dates, grades, study timers, and custom calendar schedules that you input or import.
  • Coursework Files & Syllabi: Syllabus PDF files or schedule screenshots uploaded specifically for automated AI parsing.
  • Local Preferences: Non-identifiable interface preferences (dark/light theme, date format, GPA target scale, timer audio preferences) saved in your browser's localStorage.

🤖 3. Artificial Intelligence & Google Gemini API Processing

DueVinci includes an optional AI-powered syllabus importer to help you automatically convert syllabus documents or schedule screenshots into structured units and lessons.

✓ What is sent to Gemini:

Only the text or image content of the syllabus/schedule you explicitly upload. This is used solely to extract assignment titles, unit structures, and dates.

✗ What is NEVER sent:

Your account password, grades, student ID numbers, profile metadata, or any other personal student information.

Zero AI Model Training

In accordance with Google Cloud’s API enterprise privacy terms, data sent to the Gemini API is processed transiently in memory to generate your schedule and is never retained by Google or used to train Google's foundation AI models. Furthermore, all AI requests are routed through server-side secure edge functions, ensuring your client browser never exposes sensitive keys.

🛡️ 4. Data Security, Row Level Security (RLS) & Storage

DueVinci utilizes enterprise-grade infrastructure powered by Supabase (PostgreSQL).

🔒
End-to-End Encryption: All communications between your browser and our servers are encrypted in transit using TLS 1.3/HTTPS, and all database volumes are encrypted at rest using AES-256.
🛡️
PostgreSQL Row-Level Security (RLS): Every database table enforces cryptographic tenant isolation. No user can read, query, or mutate another user's courses, grades, or assignments under any circumstance.

⏱️ 5. Data Retention Lifecycle & Database Backups

Active Retention

Your academic records (courses, assignments, calendar events, grades) are retained in production database tables for as long as your account remains active and registered.

Immediate Soft & Hard Deletion

When you delete an individual assignment, unit, or class from your dashboard, it is immediately and permanently removed from our active database tables.

Disaster Recovery Backups

For operational continuity and disaster recovery, automated, encrypted database snapshots are maintained by Supabase on a rolling retention window of 7 to 30 days. Once this rolling retention window elapses, older backup snapshots are automatically overwritten and destroyed.

🗑️ 6. Self-Service Account & Data Deletion

You have complete autonomy over your personal data. We provide an immediate, self-service deletion mechanism directly within your DueVinci dashboard.

How to Delete All Your Data at Any Time:

  1. Click on the Settings button in the bottom-left sidebar of the DueVinci app.
  2. Under the Profile tab, locate the Danger Zone section.
  3. Click Delete Account & All Data and confirm by typing DELETE.

Executing this command permanently purges your courses, assignments, calendar events, study notes, and local storage tokens.

7. Local Storage & Cookies

DueVinci uses browser localStorage and session cookies strictly for essential functionality (such as remembering your theme, completed walkthrough state, and study timer preferences). We do not use third-party tracking pixels, marketing beacons, or cross-site behavioral cookies.

8. Contact & Questions

If you have questions, concerns, or requests regarding this policy or how your data is handled, please reach out to the developer at DueVinci Project Support.