Privacy Policy

Who This App Is For

UMS is intended for users who are at least 13 years old. The app is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided information to us, contact us so we can review and delete it.

Information We Collect

We collect information you provide or generate while using UMS, including your name, email address, account profile details, password authentication data handled through Firebase, and verified account email addresses.

We store the schoolwork and productivity information you add to the app, such as courses, assignments, class sessions, events, notes, course links, due dates, descriptions, locations, and imported Brightspace calendar or PDF data.

If you use Google sign-in, we receive Google account information needed to create or access your UMS account, such as your name, email address, and Google user identifier. If you connect Google Calendar, we request permission to read and write calendar event data needed to sync UMS events with your selected Google Calendar. We store connection details such as your Google email, calendar identifier, encrypted access or refresh tokens, sync status, sync history, and event metadata needed to keep calendars in sync.

If you subscribe or start a paid plan, we store billing status and Stripe customer or subscription references. Payment card details are collected and processed by Stripe, not directly by UMS.

If you enable notifications, we store notification preferences, time zone, reminder settings, scheduled reminder metadata, read or dismissed status, and device permission status where available. The app may also store limited data on your device, such as your auth session, OAuth state and return path, and local notification delivery state.

How We Use Information

We use your information to provide and maintain the app, authenticate accounts, save your schoolwork data, sync calendars when you choose to connect Google Calendar, send account and verification emails, process subscriptions, schedule reminders, prevent unauthorized access, troubleshoot issues, and respond to support or privacy requests.

We do not sell personal information. We do not use your information for third-party advertising, ad tracking, or targeted advertising. We do not use Google user data for advertising, and we do not transfer Google user data except as needed to provide the app, comply with law, protect security, or with your direction.

How We Share Information

We share information with service providers that help operate UMS, including Firebase and Google services for authentication and optional Calendar sync, Stripe for billing, SendGrid for email delivery, and hosting, database, security, and infrastructure providers. These providers process information for us so the app can function.

We may also disclose information if required by law, to protect users or the app, to investigate abuse or security issues, or as part of a merger, acquisition, financing, or sale of assets, subject to appropriate protections.

Your Choices

You can update account profile details, manage connected email addresses, disconnect Google Calendar, change notification preferences, cancel or manage your subscription, and delete your account from the app. You can also revoke Google access from your Google Account settings and manage device notification permissions from your browser or operating system.

When you delete your account in UMS, the app deletes account-linked app data such as courses, assignments, notes, events, connected email records, Google Calendar connection records, notification records, staging access records, and subscription records. The app also attempts to cancel and delete the related Stripe customer or subscription records and remove the Firebase authentication user.

Retention And Security

We keep information for as long as needed to provide the app, maintain records, resolve disputes, enforce agreements, or meet legal and security obligations. We use reasonable technical and organizational measures designed to protect information, including authenticated API access, encrypted storage for Google Calendar tokens, and service providers with their own security controls. No method of transmission or storage is completely secure.

Changes To This Policy

We may update this Privacy Policy as the app or our practices change. If we make material changes, we will update the date above and provide notice as appropriate.