Privacy Statement

Data we collect

In order to serve our users, undone collects the following data about you:

• Name
• School
• Classes
• Assignments and associated information, such as due dates and requirements
• Grades
• Student ID number
• Email address
• Phone number (optional)

In order to improve our product, undone servers collect the following analytical data:

• Internet Protocol (IP) address of computer being used
• web pages requested
• referring web page
• browser used
• date and time
• time on site

We do NOT collect:

• Geographical information tied to mobile devices
• Addresses or Social Security Numbers
• Passwords
• Information related to school behavior, such as tardies, absences, and detentions

How we collect data

We collect two types of data in two ways and for two different uses. The first is data that you specifically ask us to collect on your behalf: classes, assignments, grades on assignments. We are able to collect this through a process called OAuth, where you authorize us to login to your LMS (Google Classroom, Blackbaud, etc.) on your behalf to pull that data. This data belongs to you and we keep it only as long as needed in order to properly provide our service. Collecting this data is essential to the function of undone. The second type of data is about how you interact with our site/app. This is data such as what you’re clicking on, how long you’re spending on the app, and how often you’re using it. This is called user analytics and it helps us improve our product. We anonymize this data, meaning we don’t know how you specifically behave on our app, only general trends and behaviors of large groups of users. We use this data to improve our app.

How your personal information is (and is not) used

We collect information about you - specifically, which classes you’re in, what assignments you’ve got, and what your grades are for those assignments. We use this data to organize and prioritize a “to do” list for you and help you optimize your studying. We delete this data as soon as it no longer is integral to the service we are providing.

Who we share your data with

No one who you don’t authorize. You may opt to share your grades and assignments with parents and other allied professionals (tutors, learning specialists). We do not, nor will we ever, share or sell data about you.

How we protect your data

We use a three-pronged approach to data security: some data we don’t ever collect, what we collect we delete quickly, and we encrypt our data collection and storage processes of sensitive data. We don’t collect certain sensitive data about you (address, phone number, social security number). For sensitive data we do collect, we use encryption software to keep it safe. Additionally, we only hold your personal data for as long as needed and then we delete it.

Opting out

We require certain data to do our jobs. If you are not comfortable with us accessing your assignments and data related to grades, our product is not a good fit for you. Additionally, the user analytics that we anonymize are essential to our product improvement, so this is required functionality. To opt out (and discontinue using our service), click here.

Data retention

We hold your assignment and grade data for as long as needed to provide our service. For data related to who you are as a user (name, student ID), this is stored on our encrypted servers as long as you are a registered user.

Compliance with State and Federal Laws

undone complies with all state and Federal laws regarding the collecting and managing of personal data. Under SOPIPA, we do not use your data to build a profile of you for advertising or any other commercial purpose, and we do not run targeted ads to students or parents based on your data — full stop. When we retain non-personal data, like the assignments teachers post, we strip it of anything that identifies you or your school. If you, your school, or your district asks us to delete your data, we will.

If you're under 13, COPPA applies. In most cases, your school has authorized undone on your behalf, which stands in for individual parental consent — but only because we use your data solely to provide undone's service to your school, not for any other commercial purpose. We don't use data collected this way to build advertising profiles, and we don't keep it past the point where it's needed for your school's use of undone.

How to contact us