Privacy Policy

Overview

CoreMax provides a student operating system that helps you organize courses, deadlines, grades, and study tools. This Privacy Policy explains what information we collect, how we use it, and your choices.

Information we collect

Depending on how you use CoreMax, we may collect:

• Account information — such as your email address, name, and profile details you choose to provide (major, expected graduation term, student ID, avatar).
• Course materials you upload — including syllabi, notes, and other class files you submit to the service.
• Academic data you enter or we extract — including class names, assessment titles, due dates, grade weights, scores, and target grades.
• Content generated for you — such as study guides, quizzes, flashcards, and resume drafts created using our AI features from materials you provide.
• Mobile phone number — if you enable SMS notifications (see SMS / mobile messaging below).
• Usage and technical data — such as login activity and basic request logs needed to operate and secure the service.

How we use your information

We use the information above to:

• Power CoreMax features — calendar deadlines, grade tracking, class notes, AI study tools, and resume tools.
• Authenticate your account and keep your data private to you.
• Send optional notifications you request (including SMS, if enabled).
• Maintain, secure, and improve the service, and comply with legal obligations.

We do not use your uploaded course materials or grades to train public AI models for unrelated third parties. AI features process content you provide to generate outputs for your account.

SMS / mobile messaging

If you provide a mobile number and enable SMS notifications, CoreMax may send you text messages about upcoming assignments, exams, and related reminders.

• We do not share mobile information or messaging consent with third parties or affiliates for marketing or promotional purposes. This includes phone numbers and any consent status related to SMS/text message communications.
• Message frequency varies based on your upcoming assignment due dates and notification settings, typically up to a few messages per week.
• Message and data rates may apply.
• You can opt out of SMS notifications at any time by disabling them in Profile settings or by replying STOP to any message.

For help with SMS, reply HELP to any message or contact us at the email below.

How we store your data

CoreMax stores account and application data using Supabase (hosted Postgres database, auth, and file storage). Access is protected with authentication and row-level security so that your classes, grades, and uploads are associated with your user account.

We retain your data while your account is active. You may request deletion of your account and associated data by contacting us.

Data protection

We use technical controls to protect personal and account data, including:

• Row-Level Security (RLS) in our Supabase database so that authenticated users can only access their own records (classes, grades, uploads, profile, and related data).
• Authentication is required to access personal application data. Public pages (such as this Privacy Policy) do not expose your account information.
• Google Calendar OAuth tokens (access and refresh tokens) are encrypted at rest using a dedicated encryption key before they are stored. We use these tokens only to sync calendar events you authorize.
• Data is transmitted over HTTPS/TLS in transit.
• Phone numbers collected for SMS are used only for verification and optional due-date reminders. We do not sell or share them for marketing.

AI features and Google API data

CoreMax uses the Claude API (Anthropic) to power AI features such as study guides, quizzes, and resume generation. These AI features process only the course materials, notes, and content you directly upload or provide for that purpose — Google Calendar data is never sent to or processed by any AI model. Google Calendar API access is used solely to create and display calendar events reflecting assignment and exam due dates; this data is not used to train, improve, or fine-tune any AI/ML model. Our use of data received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Sharing

We share data only with service providers that help us operate CoreMax (for example, hosting, database, AI processing, and SMS delivery), under agreements that limit use to providing those services. We do not sell your personal information.

Your choices

• Update profile details in Profile settings.
• Disable SMS notifications in Profile settings or by replying STOP.
• Contact us to request access to or deletion of your account data.

Contact

For privacy questions, contact: maxwelllirowa1@gmail.com