Privacy Policy

Introduction

Welcome to Bracken ClassRoom ("we," "our," or "us"). We are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our learning platform.

Information We Collect

Personal Information

We collect the following personal information:

• Name and email address
• Profile picture (optional)
• Account credentials (encrypted)
• Learning progress and study session data
• Tasks and goals you create

Google Calendar Integration

When you choose to connect your Google Calendar, we collect and store:

• Google OAuth tokens (access and refresh tokens)
• Google Calendar event IDs for tasks you sync
• Your calendar preferences and sync settings

Important: We only request the minimum necessary permissions to sync your tasks to your calendar. We do NOT access, read, or store any other calendar events or personal calendar data beyond the events we create for your tasks.

Automatically Collected Information

• Browser type and version
• Device information
• IP address
• Usage patterns and activity logs
• Session timestamps

How We Use Your Information

We use the collected information to:

• Provide and maintain our learning platform services
• Track your learning progress and study sessions
• Sync your tasks to your Google Calendar (if enabled)
• Personalize your learning experience
• Send you important updates and notifications
• Improve our platform and develop new features
• Ensure platform security and prevent fraud
• Comply with legal obligations

Google Calendar Integration

Our Google Calendar integration is optional and user-controlled:

• Permission: We only request access to create, modify, and delete calendar events (not read your entire calendar)
• Control: You can enable or disable sync at any time
• Data Usage: We only create calendar events for tasks you explicitly create in Bracken ClassRoom
• Deletion: When you disconnect, all tokens are deleted and event IDs are removed
• Security: OAuth tokens are stored encrypted in our secure database

Bracken ClassRoom's use and transfer of information received from Google APIs adheres to Google API Services User Data Policy, including the Limited Use requirements.

Data Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following circumstances:

• With Your Consent: When you explicitly authorize us to share information
• Google Calendar: Task information is sent to Google Calendar when you enable sync
• Service Providers: With trusted third-party services that help us operate our platform (e.g., hosting, database)
• Legal Requirements: When required by law or to protect our rights and safety
• Business Transfers: In connection with a merger, acquisition, or sale of assets

Data Security

We implement industry-standard security measures to protect your data:

• Encrypted password storage using bcrypt
• Secure HTTPS connections
• Encrypted OAuth tokens in database
• Regular security updates and monitoring
• Access controls and authentication
• Secure cloud infrastructure

Your Rights and Choices

You have the following rights regarding your data:

• Access: Request a copy of your personal data
• Correction: Update or correct inaccurate information
• Deletion: Request deletion of your account and data
• Data Portability: Request your data in a portable format
• Opt-Out: Disable Google Calendar sync or disconnect at any time
• Object: Object to certain data processing activities

To exercise these rights, please contact your platform administrator or use the account settings in the application.

Data Retention

We retain your information for as long as your account is active or as needed to provide services. When you delete your account or disconnect Google Calendar:

• Personal data is permanently deleted within 30 days
• Google OAuth tokens are immediately deleted
• Learning progress data may be retained for analytics (anonymized)
• Backup copies are deleted within 90 days

Cookies and Tracking

We use essential cookies and similar technologies to:

• Maintain your session and keep you logged in
• Remember your preferences
• Analyze platform usage and performance
• Improve user experience

You can control cookies through your browser settings, but disabling them may affect platform functionality.

Children's Privacy

Our platform is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If we discover that a child under 13 has provided us with personal information, we will delete it immediately.

International Data Transfers

Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place to protect your data in accordance with this Privacy Policy and applicable laws.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date. Continued use of the platform after changes constitutes acceptance of the updated policy.

Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact us: