Privacy Policy

GradeLikeMe is operated by [OWNER REVIEW REQUIRED] — legal name or business entity, based in Clovis, California, United States. You can reach us at [OWNER REVIEW REQUIRED] — privacy email for privacy questions or [OWNER REVIEW REQUIRED] — support email for support. Mailing address: Available upon valid legal request.

This policy covers the GradeLikeMe website and application. It does not cover your institution's systems, your learning management system, or any third-party site you reach from here. Where your institution has its own agreement with you about student records, that agreement continues to apply.

• Account information: your email address and authentication credentials, or the basic account details Google returns if you use Google sign-in.
• Grading preferences: display name, discipline, teaching-voice notes, default tone, style, and length, standing directions, and custom feedback rules.
• Assignment setups: course, assignment name, instructions, total points, and rubric criteria with descriptors.
• Support and privacy communications you send us, including anything you type into a request form.
• Payment-related information only if and when paid plans launch. No payment processor is integrated in the application today.

When you paste or upload work for review, that text is held in your browser for the session and transmitted to the AI provider listed below for the duration of the drafting request. We ask you to submit de-identified work only. The application does not write submitted work, generated drafts, or scores to its database.

Like most web applications, technical information is generated when you use GradeLikeMe: IP address, browser and device characteristics, timestamps, diagnostic and error logs, authentication events, and essential cookies. Approximate location may be inferred from an IP address by our hosting provider. [OWNER REVIEW REQUIRED] — confirm the precise log fields and retention windows kept by the hosting and gateway providers before describing them further.

• To create and secure your account and keep you signed in.
• To save and sync your assignment setups, rubrics, and grading preferences.
• To generate the draft feedback and rubric structure you request.
• To keep records of the policy version you accepted and of privacy requests you file.
• To detect, investigate, and prevent abuse, fraud, and security incidents.
• To respond to support requests and to fix defects.
• To meet legal obligations and to establish or defend legal claims.

We rely on performing our agreement with you, our legitimate interest in operating and securing the service, your consent where you gave it, and compliance with law.

• Lovable

  Application build, hosting, and the AI gateway that routes model requests

  Information involved: Requests to the application, diagnostic logs, and the text sent for AI drafting while a request is in flight

  Retention of gateway request logs by Lovable: [OWNER REVIEW REQUIRED] — confirm with Lovable's current terms.

• Supabase (provided through Lovable Cloud)

  Account authentication and the database that stores assignment setups, rubrics, preferences, consent records, and privacy requests

  Information involved: Email address, authentication events, assignment/rubric/preference records, consent records, privacy request records

• Google — Gemini model family (accessed through the Lovable AI gateway)

  Generates draft feedback and converts pasted rubric text into structured criteria

  Information involved: The assignment, rubric, grading preferences, and the submitted work text for the duration of the request

  Whether this provider retains or trains on submitted content: [OWNER REVIEW REQUIRED] — verify the current provider terms that apply through the Lovable gateway before making any statement about model training.

• Google — Sign-in (OAuth)

  Optional 'Continue with Google' sign-in

  Information involved: Email address and basic account identifiers returned by Google when a user chooses Google sign-in

• Google Fonts

  Serves the site typefaces

  Information involved: IP address and browser information are visible to the font host when a page loads

• Cloudflare (edge runtime used by the hosting platform)

  Runs server-side application code and serves requests

  Information involved: Network-level request metadata such as IP address and timestamps

  Exact hosting regions and log retention: [OWNER REVIEW REQUIRED].

Draft feedback and rubric extraction are produced by a Google Gemini model reached through the Lovable AI gateway. Whether that provider retains submitted content or uses it to train models under the terms that apply through the gateway has not been verified by us: [OWNER REVIEW REQUIRED]. We will not claim that your content is, or is not, used for model training until that is confirmed for every applicable provider.

Paid subscriptions are not active. No payment processor, checkout, or card handling exists in the application today. Intended processor once billing launches: Paddle (selected, not yet integrated). We will update this section, and describe card handling accurately, before any charge is made.

Stored in our database

• Account email address and authentication records (held by the authentication provider).
• Grading profile: display name, discipline, teaching-voice notes, default tone, style, length, standing directions, and custom rules.
• Assignment setups: course, assignment name, instructions, total points, rubric criteria and descriptors, and feedback settings.
• Consent records: the policy version accepted, which documents were acknowledged, an optional marketing choice, and a timestamp.
• Privacy and support requests you submit through the app: the request type, your message, and a timestamp.

Not written to our database

• Submitted student work is not written to the database by the application. It is held in your browser during the session and sent to the AI provider only for the duration of a drafting request.
• Generated feedback drafts are not written to the database by the application.
• Scores or grades you enter are not written to the database by the application.

Database and authentication records are held by Supabase through Lovable Cloud. Hosting regions: [OWNER REVIEW REQUIRED].

Account records, grading preferences, assignment setups, consent records, and privacy requests are kept while your account is active. When you delete your account from the app, your grading profile and assignment setups are removed and the account is closed. Backups, diagnostic logs, and provider-side request logs may persist for a period we do not currently control or measure: [OWNER REVIEW REQUIRED] — set and publish a specific retention window.

You can review and edit your grading profile and assignment setups in the app at any time. You can also request access, correction, an export, or deletion, and report a privacy or security concern, from the Contact, Data Access & Deletion page. We verify identity by requiring you to be signed in to the affected account before completing a request, and we do not send personal information to an unverified email address. Some information may be retained where needed for legal obligations, billing records, fraud prevention, or security.

We do not sell personal information. We do not share personal information for cross-context behavioral advertising, and we do not use it for targeted advertising. There is no advertising network in the application.

The application uses essential cookies and similar browser storage for authentication and security. No analytics or advertising trackers are present in the code today. Details are in the Cookie Notice.

We use access controls scoped to your account at the database level, encrypted connections provided by our hosting and database providers, and server-side handling of API credentials so they are never exposed to the browser. No system is completely secure, and we do not claim that GradeLikeMe is. We have not completed an independent security audit or certification.

Our providers may process information in the United States and potentially other countries. Specific transfer locations and safeguards: [OWNER REVIEW REQUIRED].

Depending on where you live, you may have rights to know, access, correct, delete, obtain a copy of, or limit certain uses of your personal information, and to be free from discrimination for exercising those rights. California residents, and residents of other states with comprehensive privacy laws, can exercise these rights through the data request page. We do not assert that any specific statute applies to this business, because applicability depends on thresholds we have not established: [OWNER REVIEW REQUIRED]. We honor requests regardless.

GradeLikeMe is intended for faculty and other authorized adults. Accounts are for people 18 or older. The service is not directed to children, and we ask that no student-identifying information — of any age — be submitted. If you believe a child provided information to us, contact [OWNER REVIEW REQUIRED] — privacy email and we will remove it.

We will update this page and the "Last updated" date when this policy changes. Material changes will be communicated in the application.

Privacy: [OWNER REVIEW REQUIRED] — privacy email · Support: [OWNER REVIEW REQUIRED] — support email · Mail: Available upon valid legal request