GraspIQHome

GraspIQ Privacy Policy

Last updated: September 28, 2026

GraspIQ (“the extension,” “the app,” “we”) is a study assistant that works inside Canvas LMS. This policy covers both the Chrome extension and the GraspIQ web app it connects to, since they share the same account and backend. It describes what data we actually touch, not a generic template.

What the extension does with your Canvas session

The extension reads course data (course names, syllabus, assignments, files, modules, announcements) directly from Canvas’s own API, using your existing logged-in Canvas session in your browser, the same way Canvas’s own pages load your data. It only does this on*.instructure.compages and only while the side panel or popup is open or actively fetching. The extension does not read pages outside Canvas, does not track your general browsing, and does not run in the background scraping data you haven’t asked it to load.

Canvas file content (lecture slides, notes, readings) is fetched the same way, from inside your Canvas session, and sent to the GraspIQ backend to generate the summary, study guide, or practice questions you asked for.

What we send to the GraspIQ backend, and why

The extension sends the following to the GraspIQ backend (over HTTPS) when you use a feature:

  • Course content you’re working with (syllabus, assignments, modules, and file content) to generate study guides, cram plans, practice tests, practice questions, and file summaries.
  • Chat messages you type, plus the course context needed to answer them.
  • Practice test answers you submit, for grading.

We do not send Canvas data the backend doesn’t need for the feature you’re using. For example, generating a study guide from files you specifically selected sends only those files’ content, not your whole course.

What gets stored, and where

  • Account info: your email and Canvas base URL (e.g. yourschool.instructure.com), stored in our database (Supabase) so you don’t have to reconnect every session. If you connected a Canvas API token before Canvas discontinued that feature, we still store it for accounts that set one up previously.
  • Course files you generate from: when you select a file to generate a study guide, cram plan, practice test, practice questions, or summary, we store the file’s extracted text in chunks, along with a numerical representation (embedding) used to find relevant passages later, not the original file itself. This lets GraspIQ search your course materials when answering later questions. Each file is stored once per course.
  • Generated content: study guides, cram plans, practice tests/questions, and their results (scores, topics you got right or wrong) are stored so you can revisit them and so spaced-repetition scheduling works.
  • Chat history: sent to Claude for context within a session; we do not currently store a persistent chat transcript beyond what a single session needs to answer follow-up questions.
  • Extension-local data: the sign-in token that connects the extension to your account is stored in the browser’s local extension storage (chrome.storage.local) on your device only. It is not synced to Google’s servers and is not accessible to Canvas or any other website.

Who else sees your data

We use the following services to provide GraspIQ’s features. Each only receives the specific data needed for its job:

  • Anthropic (Claude API): processes chat messages, course content, and file text you send to generate summaries, study guides, practice tests, and grading feedback.
  • OpenAI: processes the extracted text of course files you generate from, to create the embeddings used for search.
  • Supabase: hosts our database and handles account authentication.
  • Resend: sends the optional daily email reminder (your email address and a count of cards due for review, no course content).
  • Stripe: if you subscribe to GraspIQ Pro, handles your payment details directly; we never see or store your card number.

We do not sell your data, and we do not use it for advertising.

Sharing features you control

If you use shared study guides, the content you explicitly choose to share becomes visible to whoever you share it with (via the link). This only happens when you take that action, never automatically.

Data retention and deletion

We keep your data for as long as your account is active. There is currently no self-serve “delete my account” button in the app. To request deletion of your account and associated data, contact us at simonlunay@gmail.com.

Children’s privacy

GraspIQ is built for college students and is not directed at children under 13. We do not knowingly collect data from children under 13.

Changes to this policy

If what we collect or how we use it changes in a way that matters, we’ll update this page and change the “Last updated” date above.

Contact

Questions about this policy: simonlunay@gmail.com.