Privacy Policy

Who is responsible

calMOG is operated by calMOG Team as an independent project rather than a registered company. For any privacy question or request, contact team@wolfachi.com.

What calMOG collects

Only what the app needs to work. Specifically:

• Account details — your email address, and the full name you enter at signup. Passwords are handled by Supabase Auth and are never visible to calMOG.
• Academic data you create — semesters, courses, deadlines, grading breakdowns, and course policies.
• Syllabus files you upload — the PDF itself, the plain text extracted from it, and the structured items derived from that text.
• Usage records — a timestamped row each time you run PDF text extraction or AI extraction. These exist to enforce rate limits and keep processing costs bounded.
• Operational logs — standard server logs from the hosting provider, which include request metadata such as IP address and user agent.

There is no advertising, no tracking or analytics script, and no third-party cookie. The only cookies set are the ones Supabase uses to keep you signed in.

How syllabus text is processed

This is the part worth reading carefully. When you choose to run extraction on a syllabus, calMOG sends the text of that syllabus to OpenAI's API so a model can identify deadlines, weights, and policies. The PDF file itself is not sent — only the extracted text, capped at roughly the first 30,000 characters.

This only happens when you upload a syllabus and run extraction. It is never done to your manually entered deadlines, and never in the background.

OpenAI processes that text under its own API terms and privacy policy, which govern how long it retains API data and what it may use it for. Those terms are OpenAI's to change, not calMOG's — please read them directly if this matters to you. If you would rather no syllabus text left calMOG at all, add your deadlines manually instead of uploading a syllabus.

Don't upload documents containing sensitive personal information. A syllabus is expected to be ordinary course material.

Who else processes your data

calMOG relies on a small number of service providers. Each one only receives what it needs:

• Supabase — Authentication, database, and file storage. Your email address, account data, academic data, and uploaded syllabus files. Privacy policy
• Vercel — Application hosting and delivery. Request metadata such as IP address and user agent, in operational logs. Privacy policy
• OpenAI — Extracting deadlines and policies from syllabus text. The text extracted from syllabus PDFs you choose to process. Privacy policy

Your data is not sold, rented, or shared with anyone else. Other calMOG users can never see your courses, deadlines, or files: every database row and every stored file is scoped to your account and enforced at the database level.

How long data is kept

Your data is retained while your account is active, and deleted when you delete your account. There is no separate expiry — nothing is quietly aged out from under you.

Two limited exceptions:

• Operational and security logs kept by the hosting provider are retained for a short period on their normal schedule. These are used to keep the service running and to investigate abuse.
• Data already sent to a processor— such as syllabus text sent to OpenAI — is retained according to that provider's own policy. Deleting your calMOG account removes it from calMOG, but calMOG cannot reach into a third party's systems on your behalf.

Usage records used for rate limiting are automatically removed after 90 days.

Your choices

Both of these are self-service, in Settings — no request needed:

• Export everything.“Export my data” downloads a JSON file containing every row calMOG holds about you.
• Delete your account.“Delete my account” permanently removes your account, every semester, course, deadline, grading item, and policy, and deletes your uploaded PDFs from storage. This is immediate and cannot be undone.

You can also delete individual courses, semesters, or syllabi at any time, or use “Clear all data” to empty your account without deleting it. For anything else, email team@wolfachi.com.

Security

Uploaded files live in a private storage bucket that is only reachable with your own session. Database access is restricted per-user with row-level security, so a request authenticated as you cannot read anyone else's rows. Traffic is served over HTTPS.

That said: calMOG is a small independent project. It is built carefully, but it does not come with the security guarantees, audits, or uptime commitments of a commercial service. Please treat it accordingly.

Children

calMOG is intended for university and college students. It is not directed at children under 13, and accounts should not be created for them.

Changes to this policy

If this policy changes materially, the “last updated” date above will change with it. Continuing to use calMOG after a change means you accept the updated policy.

See also the Terms of Service.