Legal

Privacy Policy

Effective August 27, 2026

1. Overview

myECFS ("we," "our," or "us") is a student-built dashboard for Ethical Culture Fieldston School students. This Privacy Policy explains what data we collect, how we use it, and your rights regarding that data. We take privacy seriously and collect only what is necessary to provide the Service.

2. Information We Collect

2.1 Account Information

When you sign in with Google, we receive your name, email address, and profile photo URL from Google OAuth. myECFS is intended for Ethical Culture Fieldston School students and is meant to be used with your @ecfs.org account.

2.2 Schedule Data

If you upload your class schedule (an ICS file exported from your school calendar), we parse and store the schedule data in our database so it can be displayed on your dashboard and used to answer questions via the AI assistant.

2.3 Sport Selections

You may select which sports you participate in for fall, winter, and spring seasons. This is stored in your profile and used to fetch your team's upcoming schedule.

2.4 Tasks and Google Classroom Data

You may create tasks in myECFS. If you grant the optional Google Classroom permissions, we read your courses, coursework, your own submissions, and grades to show assignments and import gradebook rows. Google access tokens remain with Clerk and are not stored in the myECFS database or native app.

2.5 Grades, Notes, and Preferences

Grade-calculator data, your quick note, and dashboard preferences are stored with your profile so the website and native app show the same information. Grade calculations are planning tools and are not official school records.

2.6 AI Conversations

Messages you send to the AI assistant are transmitted to Anthropic's API along with relevant context such as your schedule and open tasks. These messages are subject to Anthropic's privacy policy. We do not persistently store conversation history.

2.7 Cached School Data

We cache dining menus and athletics schedules fetched from public ECFS sources. This data is shared across all users (it is not personal data).

3. How We Use Your Information

To provide the Service — display your schedule, answer AI assistant queries, show your team's upcoming games
To authenticate you — verify you have an active ECFS account
To improve the Service — error logs may contain non-personally-identifiable diagnostic information

We do not sell, rent, or share your personal data with third parties for marketing purposes.

4. Third-Party Services

The Service relies on the following third-party processors:

Clerk — authentication and session management, including Google sign-in.
Neon — hosted PostgreSQL database infrastructure in the United States.
Google OAuth and Classroom — used for sign-in and, with your permission, to read courses, coursework, and your own submission status and grades. We do not access Google Drive or Gmail.
Vercel — application hosting and server-side API infrastructure.
Anthropic — your AI assistant messages and contextual school data are sent to Anthropic's Claude API to generate responses.
Jina AI — used server-side to render JavaScript-based school pages (athletics schedules, lunch menus) for parsing. No personal data is sent to Jina.

5. Data Retention

Your account, profile, schedule, tasks, grade-calculator data, note, preferences, and sport selections are retained until you delete your account. Cached dining and athletics data is overwritten regularly. We do not persistently store AI conversation history. The iOS app keeps a protected last-successful snapshot on your device for offline viewing and removes it when you sign out or delete your account.

6. Data Security

Personal data is accessed only through authenticated server-side APIs that verify the active Clerk user and scope every query to that user's internal profile. Database credentials and Google access tokens are never sent to the website or native app. All network data is transmitted over HTTPS. However, no system is completely secure — use the Service accordingly.

7. Children's Privacy

The Service is designed for high school students (grades 9–12) at ECFS and is intended for use with an @ecfs.org school account. We do not knowingly collect data from children under 13 without school authorization. If you believe a minor's data has been collected improperly, please contact us.

8. Your Rights

You may:

Access your data by signing in and viewing your dashboard
Delete your Clerk account and associated myECFS data through Settings → Delete account
Update your schedule or sport selections at any time through the Settings panel

9. Cookies and Local Storage

We use browser session storage to remember demo mode between page refreshes. Clerk uses secure session storage to maintain authentication. On iOS, myECFS stores a protected offline snapshot and local reminder preference on your device; widgets receive only a limited App Group snapshot and no Clerk credentials. We do not use advertising or analytics cookies.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will update the effective date above. Continued use of the Service after changes constitutes acceptance of the revised policy.

11. Contact

Questions or requests regarding your privacy can be directed to benhfink@gmail.com.