AI Campus Privacy Policy

AI Campus is a school-managed learning service. This policy explains the information the service handles, why it is needed, where limited external processing occurs, and how an account holder can request deletion.

Information handled by AI Campus

• Provisioned account identity: account username, display name, generated user ID, password hash, role, and school.
• School class enrollment and teaching-assignment data.
• Assessment records including exam questions, attempts, submitted answers, scores, and grading.
• Lecture transcripts, notes, summaries, topics, quizzes, citations, and processing failure state.
• Optional teacher audio used to create lecture materials.
• Device storage including app-private offline cache and session state.
• Server operational logs and database backups needed to operate and recover the service.

How information is used and shared

AI Campus uses this information to authenticate school-provisioned accounts, apply role-based and same-school access, deliver classes and teaching material, run assessments, show results, and recover interrupted lecture processing.

When a teacher chooses transcription, the selected recording is sent to the configured Groq-compatible transcription service. Transcript text, topic, language, and other teacher-provided teaching content needed to generate notes, summaries, or questions are processed through OpenRouter.

Local storage, retention, and deletion

The Android app keeps session state and offline lecture content in app-private storage. Live account and school data remains while needed to provide the service or until an authorized deletion is completed. Isolated database backups expire within 30 days.

Operational events are kept in size-bounded rolling server logs. Older entries are replaced as the configured log files fill, so log retention is not expressed as a fixed number of days.

After a deletion closes, minimal completed or canceled request-ledger metadata is retained for 90 days so deletion can be replayed safely if an older backup is restored. It contains school and user identifiers, role, and completion time, not the person's username or display name.

Account holders can request deletion in the app or through the public AI Campus account deletion page. The role-specific disposition and timing are explained there.

Signed-out privacy correspondence

If someone chooses the signed-out email path, the sender address and correspondence are handled through a separate support channel and deleted 90 days after the request is closed. That correspondence is not copied into the AI Campus application database. The Android app does not collect email addresses.