Privacy Policy
Almost everything stays on your device. Data leaves your device only when you choose.
- No user accounts
- No advertising or tracking SDKs
- Syllabus text isn’t stored
Where your data goes
This summary helps you read the policy. The full policy below is what applies.
On your device
Courses, topics, notes, quizzes, assignments, grades, photos and voice notes are stored on your device and are not sent to us. No user accounts.
Data stored on your deviceOn-device intelligence
Reading text from photos and PDFs, transcribing voice notes, Quiz Me and Weekly Plan all run on your device. None of it is sent to us or to Anthropic.
On-device intelligenceSyllabus import, only when you start it
Only the extracted text goes over HTTPS to our parsing service on Cloudflare Workers, which passes it to Anthropic’s Claude API. We don’t store it. An abuse counter keyed to your IP address is deleted after about 25 hours.
Syllabus parsing (data that leaves your device)Moodle & Canvas, if you connect
Your device talks directly to your school over HTTPS. Credentials stay in your device’s Keychain, and you can disconnect at any time.
Moodle and CanvasiCloud sync, off by default
If you turn it on, your study data syncs across your own devices through your private iCloud account. We have no access to it.
iCloud sync (optional)This website
One cookie remembers your choice. Analytics only if you accept: no visitor ID or IP address in our analytics table, and events are deleted once they are more than 180 days old.
This website
How data moves
On this page
- Who we are
- The short version
- Data stored on your device
- On-device intelligence
- Moodle and Canvas
- Syllabus parsing (data that leaves your device)
- iCloud sync (optional)
- Permissions
- What we don’t do
- Legal bases (GDPR / UK GDPR)
- International transfers
- Retention
- Your rights
- Minimum age
- Security
- Changes to this policy
- Contact
- This website
Who we are
Link to Who we areGapTracker (“the app”) is developed by Ehab Marrid, Israel (“we”, “us”). We are the data controller for the limited personal data described below. Contact: support@gaptrackerapp.com.
The short version
Link to The short versionAlmost everything stays on your device. Data leaves your device only when you choose:
- the text of a syllabus you import for automated parsing;
- the direct connection to your school’s Moodle or Canvas, if you set one up;
- sync to your own iCloud account, if you turn it on.
GapTracker has no user accounts, no analytics, and no server that stores your study data.
Data stored on your device
Link to Data stored on your deviceThe following is stored locally on your device and is not sent to us:
- Courses, exam dates, credits, target grades and colors
- Study topics, their severity and status, your study notes, and saved quizzes with your scores
- Assignments, due dates, grade weights, subtasks and submission status
- Study sessions, timers, streaks and statistics
- Grades, GPA and past-semester courses
- Data imported from Moodle or Canvas
- Photos and voice notes you attach to a topic
- Your notification settings
Deleting an item, or uninstalling the app, removes it from your device.
On-device intelligence
Link to On-device intelligenceReading text from photos, scanned pages and PDFs, transcribing voice notes, generating quizzes with Quiz Me, and creating a Weekly Plan all happen on your device, using Apple’s on-device frameworks and Apple Intelligence. This content is never sent to us, to Anthropic, or to Apple’s Private Cloud Compute. The first time you transcribe in a new language, Apple may download a speech model to your device; no personal data is sent when that happens.
Moodle and Canvas
Link to Moodle and CanvasIf you connect Moodle or Canvas, your device talks directly to your institution over HTTPS. There is no GapTracker server in between, and we never see your school data.
- You sign in on your institution’s own page, or paste a token or calendar-feed link. We never see your password.
- Credentials are kept in your device’s Keychain.
- With your permission, the app may refresh your data in the background and notify you about new or changed assignments.
- You can disconnect at any time in Settings.
Your institution’s own privacy policy also applies to that connection.
Syllabus parsing (data that leaves your device)
Link to Syllabus parsing (data that leaves your device)When you import a syllabus, the app extracts its text on your device and sends only that text over HTTPS to our parsing service, which runs on Cloudflare Workers. The service forwards the text to Anthropic PBC’s Claude API. Anthropic returns a list of topics and grading details, which you review before anything is added.
- We do not store your syllabus text, and we keep no request logs.
- To prevent abuse, we keep a request counter keyed to your network (IP) address and the date. It is deleted automatically after about 25 hours and is not linked to you or to your syllabus.
- Anthropic does not train its models on API data and keeps it only as needed to operate its service (Anthropic Privacy Policy (opens in a new tab)).
- Cloudflare carries the request as our hosting provider and may process connection data such as your IP address (Cloudflare Privacy Policy (opens in a new tab)).
- If the service is unavailable, parsing happens on your device and no text leaves it.
iCloud sync (optional)
Link to iCloud sync (optional)Sync is off by default. If you turn on “Sync with iCloud”, your study data and notification settings are synced across your own devices through your private iCloud account, under Apple’s Privacy Policy (opens in a new tab). We have no access to it.
Permissions
Link to PermissionsEach permission is used only for its feature, on your device:
- Notifications: study reminders, exam and assignment alerts, and focus-session alerts.
- Calendar (write only): adding study blocks you create.
- Camera and Photos: scanning or attaching a syllabus or notes.
- Microphone: recording voice notes.
- Background App Refresh: keeping Moodle/Canvas deadlines and reminders up to date.
What we don’t do
Link to What we don’t doWe do not use analytics, advertising or tracking SDKs, and we don’t use advertising identifiers or track you across apps and websites. We have no user accounts, and we do not sell or share your personal information.
Legal bases (GDPR / UK GDPR)
Link to Legal bases (GDPR / UK GDPR)- Syllabus text: processed to provide the parsing you ask for (performance of a contract, Art. 6(1)(b)).
- IP request counter: processed to prevent abuse (legitimate interests, Art. 6(1)(f)).
- Support emails: processed to answer you (legitimate interests, Art. 6(1)(f)).
International transfers
Link to International transfersSyllabus text passes through Cloudflare’s global network and is processed by Anthropic in the United States. These transfers rely on the EU Standard Contractual Clauses and, where applicable, the EU–US Data Privacy Framework (and its UK extension).
Retention
Link to Retention- Syllabus text: not stored.
- IP request counter: about 25 hours.
- Support emails: kept only as long as needed to help you.
- On-device data: kept until you delete it.
Your rights
Link to Your rightsDepending on where you live (for example the EU, the UK, California or Israel), you can ask to access, correct, delete, restrict, object to or port your personal data, and you can complain to your data-protection authority. California residents can ask to know, correct or delete their data. We do not sell or share personal information, and we won’t treat you differently for using your rights. Because we hold almost no data about you, most of your data can be managed directly in the app. To make a request, email support@gaptrackerapp.com.
Minimum age
Link to Minimum ageGapTracker is intended for users aged 13 and older. In the EEA and the UK, users under 16 (or the local age of digital consent) should use the app with a parent’s or guardian’s permission. We do not knowingly collect personal data from children under 13.
Security
Link to SecurityAll network connections use HTTPS. Learning-platform credentials are stored in the device Keychain. Your study data stays on your device or in your own iCloud account.
Changes to this policy
Link to Changes to this policyWe will post updates on this page and change the date above. For material changes, we will give notice in the app or on this page before they take effect.
Contact
Link to ContactEhab Marrid, Israel · support@gaptrackerapp.com
This website
Link to This websiteScopeThe policy above covers the GapTracker app. This section covers only this website, gaptrackerapp.com.
This website sets one necessary first-party cookie named gaptracker_analytics_consent to remember whether you accepted or declined analytics. It lasts for up to one year and is not used to identify you.
If you choose “Accept analytics,” the website records, for each event, the event name and label (a page view, or an interaction such as an App Store, feature or share click), the page path, broad device class, browser locale, referring domain and the time of the event. It does not store a visitor ID, advertising ID, full referrer URL or IP address in the analytics table. Events are deleted automatically once they are more than 180 days old. Choosing “Necessary only” prevents these analytics events.
If you accept, the website also loads Cloudflare Web Analytics, which measures page speed and visits without cookies or fingerprinting. Choosing “Necessary only” stops it too.
You can change your choice at any time through “Cookie settings” in the footer.
Website analytics run only with your consent (Art. 6(1)(a) GDPR), and you can withdraw it at any time. The consent cookie is strictly necessary to remember your choice. This website is hosted on Cloudflare, which carries each request as our hosting provider and may process connection data such as your IP address (Cloudflare Privacy Policy (opens in a new tab)). To protect the site from automated abuse, Cloudflare runs an invisible security check in your browser and may set a strictly necessary security cookie (cf_clearance) that can last up to a year. The controller for this website is the same as for the app (see “Who we are”).
What we record if you accept analytics
| What | Example | Kept for |
|---|---|---|
| Event name and label | page view · App Store, feature or share click | 180 days |
| Page path | /gpa-calculator | 180 days |
| Broad device class | mobile, tablet or desktop | 180 days |
| Browser locale | en-US | 180 days |
| Referring domain | google.com | 180 days |
| Time of the event | 2026-09-30 14:05 UTC | 180 days |
| Not stored in the analytics table: visitor ID · advertising ID · full referrer URL · IP address | ||
Cookies
| Name | Purpose | Lasts | Type |
|---|---|---|---|
gaptracker_analytics_consent | Remembers whether you accepted or declined analytics | Up to one year | First-party, necessary |
cf_clearance | Set by Cloudflare, our hosting provider, after its security check, to protect the site from automated abuse | Up to one year | Cloudflare, necessary for security |
Your controls
Website analytics:
This websiteApp data: delete an item, or uninstall the app
Data stored on your deviceMoodle or Canvas: disconnect at any time in Settings
Moodle and CanvasPrivacy requests: support@gaptrackerapp.com
Your rights
What changed
- · Current version
- · Previous version
- · First published, with the app’s release
Ehab Marrid, Israel · support@gaptrackerapp.com
