Privacy Policy

Account Information

When you create a BlockPlan account, we collect your email address and password (stored securely via Supabase Auth). If you sign in through a third-party OAuth provider (such as Google), we receive your name and email address from that provider.

Course Materials & Content

You may upload syllabi (PDF or images), lecture notes, textbook excerpts, and other study materials. We store this content in our database to provide our services, including AI-generated study materials.

User-Generated Content

This includes tasks, study plans, calendar blocks, flashcards, quizzes, notes, course information, grades, and feedback you create within the app.

Usage Data

We collect basic usage information such as pages visited, features used, and general interaction patterns to improve the service. We do not use third-party analytics or tracking scripts.

We use your information to:

• Provide and operate BlockPlan's core features (task management, calendar scheduling, study planning)

• Generate AI-powered study materials (summaries, flashcards, quizzes, practice problems, diagrams) from your uploaded course content

• Process payments and manage your subscription

• Send essential account notifications (password resets, subscription changes)

• Improve and develop new features for the service

• Respond to your feedback and support requests

We do not sell, rent, or trade your personal information to third parties.

OpenAI

Your course materials, uploaded content, and related text are sent to OpenAI's API to generate study materials (summaries, flashcards, quizzes, diagrams, etc.). OpenAI processes this data according to their API data usage policies. See Section 4 for more details.

Stripe

We use Stripe to process subscription payments. Your payment information (credit card numbers, billing address) is collected and stored directly by Stripe — we never store your full payment details on our servers. We only retain a Stripe customer ID to manage your subscription.

Supabase

Our application data (your account, tasks, study materials, and generated content) is stored in a PostgreSQL database hosted by Supabase. Supabase also handles authentication, including secure password hashing and session management.

Vercel

BlockPlan is hosted on Vercel. Vercel processes incoming web requests and may collect standard server logs (IP addresses, request timestamps) as part of normal web hosting operations.

This is an important section to understand. When you use BlockPlan's AI features (study material generation, syllabus parsing, AI Tutor Chat, diagram generation), the following data may be sent to OpenAI for processing:

• Text content from uploaded documents (syllabi, notes, textbook excerpts)

• Images of documents or hand-drawn illustrations you upload

• Your course names, task titles, and related academic content

• Chat messages you send to the AI Tutor

What this means for you

We use OpenAI's API, which has its own data handling policies. As of this policy's effective date, OpenAI's API data usage policy states that data sent through the API is not used to train their models. However, OpenAI's policies may change, and we encourage you to review OpenAI's current privacy policy and API data usage policies directly. We do not send your email address, password, or payment information to OpenAI.

We take reasonable measures to protect your information, including:

• Passwords are hashed and never stored in plain text (handled by Supabase Auth)

• All data is transmitted over HTTPS/TLS encryption

• Database access is restricted through Supabase row-level security policies

• Payment data is handled entirely by Stripe, a PCI-DSS compliant payment processor

While we strive to protect your data, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security.

We retain your data for as long as your account is active. This includes your account information, tasks, study materials, AI-generated content, and calendar data.

Account Deletion

You can delete your account at any time from the Settings page. When you delete your account, we permanently delete your profile, tasks, study sessions, calendar blocks, courses, notes, and all associated data from our database. Stripe will retain your payment history in accordance with their data retention policies and legal obligations. Content previously sent to OpenAI for processing is subject to OpenAI's data retention policies.

Inactive Accounts

We may delete accounts that have been inactive for an extended period (12+ months) after sending a notice to your registered email address.

BlockPlan is designed for college students and is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If we learn that we have collected information from a child under 13, we will delete that information promptly. If you believe a child under 13 has provided us with personal information, please contact us at support@block-plan.com.

You have the following rights regarding your data:

Access

You can view all of your data within the app at any time (tasks, study materials, courses, calendar, settings).

Deletion

You can delete your account and all associated data from the Settings page. You can also delete individual tasks, study sessions, courses, and notes at any time.

Export

You can export your study materials as PDF or DOCX files and your calendar schedule as an .ics file.

Correction

You can edit your account information, tasks, and study materials at any time within the app.

For any data requests that cannot be handled through the app, contact us at support@block-plan.com.

BlockPlan uses minimal cookies:

Authentication Cookies

We use session cookies to keep you signed in. These are essential for the app to function and are set by Supabase Auth.

No Third-Party Trackers

We do not currently use third-party analytics services, advertising cookies, or tracking pixels. We do not track you across other websites.

If we add analytics or tracking in the future, we will update this policy accordingly.

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by updating the effective date at the top of this page. We encourage you to review this page periodically to stay informed about how we protect your data. Continued use of BlockPlan after changes constitutes acceptance of the updated policy.

If you have questions or concerns about this Privacy Policy or your data, please contact us:

• Email: support@block-plan.com

• Website: block-plan.com