Legal
Privacy Policy
Effective May 14, 2026
1. Overview
myECFS ("we," "our," or "us") is a student-built dashboard for Ethical Culture Fieldston School students. This Privacy Policy explains what data we collect, how we use it, and your rights regarding that data. We take privacy seriously and collect only what is necessary to provide the Service.
2. Information We Collect
2.1 Account Information
When you sign in with Google, we receive your name, email address, and profile photo URL from Google OAuth. myECFS is intended for Ethical Culture Fieldston School students and is meant to be used with your @ecfs.org account.
2.2 Schedule Data
If you upload your class schedule (an ICS file exported from your school calendar), we parse and store the schedule data in our database so it can be displayed on your dashboard and used to answer questions via the AI assistant.
2.3 Sport Selections
You may select which sports you participate in for fall, winter, and spring seasons. This is stored in your profile and used to fetch your team's upcoming schedule.
2.4 AI Conversations
Messages you send to the AI assistant are transmitted to Anthropic's API along with contextual information (your schedule, today's lunch menu, upcoming athletics events). These messages are subject to Anthropic's privacy policy. We do not persistently store conversation history.
2.5 Cached School Data
We cache dining menus and athletics schedules fetched from public ECFS sources. This data is shared across all users (it is not personal data).
3. How We Use Your Information
- To provide the Service — display your schedule, answer AI assistant queries, show your team's upcoming games
- To authenticate you — verify you have an active ECFS account
- To improve the Service — error logs may contain non-personally-identifiable diagnostic information
We do not sell, rent, or share your personal data with third parties for marketing purposes.
4. Third-Party Services
The Service relies on the following third-party processors:
- Supabase — database and authentication infrastructure. Data is stored in Supabase's hosted PostgreSQL service (US region).
- Google OAuth — used only for sign-in. We do not access your Google Drive, Gmail, or other Google data.
- Anthropic — your AI assistant messages and contextual school data are sent to Anthropic's Claude API to generate responses.
- Jina AI — used server-side to render JavaScript-based school pages (athletics schedules, lunch menus) for parsing. No personal data is sent to Jina.
5. Data Retention
Your profile, schedule data, and sport selections are retained until you delete your account. Cached dining and athletics data is overwritten daily. We do not store AI conversation history beyond the current browser session.
6. Data Security
We use Supabase Row Level Security (RLS) to ensure each user can only access their own profile data. All data is transmitted over HTTPS. However, no system is completely secure — use the Service accordingly.
7. Children's Privacy
The Service is designed for high school students (grades 9–12) at ECFS and is intended for use with an @ecfs.org school account. We do not knowingly collect data from children under 13 without school authorization. If you believe a minor's data has been collected improperly, please contact us.
8. Your Rights
You may:
- Access your data by signing in and viewing your dashboard
- Delete your account and all associated data through Settings → Sign Out (full deletion requests: email us)
- Update your schedule or sport selections at any time through the Settings panel
9. Cookies and Local Storage
We use browser session storage to remember demo mode between page refreshes. Supabase uses a cookie or localStorage token to maintain your authenticated session. We do not use advertising or analytics cookies.
10. Changes to This Policy
We may update this Privacy Policy from time to time. We will update the effective date above. Continued use of the Service after changes constitutes acceptance of the revised policy.
11. Contact
Questions or requests regarding your privacy can be directed to benhfink@gmail.com.