Privacy Policy

1. Who we are
2. What we collect
3. How we use it
4. AI processing
5. Who can see what
6. Who we share it with
7. How long we keep it
8. Deleting your account
9. Security
10. Your choices and rights
11. Children and teens
12. Where data is stored
13. Changes
14. Contact

1. Who we are

Due Next is run by ("we," "us"), based in , USA. This policy explains what information we collect when you use the Due Next website and app (the "Service"), how we use it, who can see it, and your choices. It is part of our Terms of Service.

2. What we collect

Account information

When you sign in with Google or Apple, we receive your name, email address, profile photo (Google) and a unique account ID from that provider. With Sign in with Apple you can choose to hide your email; Apple then gives us a private relay address that forwards to you. We never see your Google or Apple password.

The first time you sign in, we ask for your birth month and year. We use it to check that you're 13 or older and whether you're 18 or older (Clubs are 18+). We don't store your birthday. If you're 18 or older, we save only that answer. If you're under 18, we also save the month and year you turn 18, so Clubs can open for you automatically after that month. We delete it when Clubs open for you. If you signed up before October 2026, Clubs may ask once more.

Content you add

The classes, assignments, readings, due dates, time estimates, notes, grades and scores, grade weights, class meeting times, your class attendance check-ins, office-hours logs, appointments and events you add (for example an advisor meeting: name, type, date, time, place and note), your professors' names and email addresses (read from the syllabus or typed by you; used only to open an email draft in your own mail app when you tap “Ask the professor”), focus-timer sessions and streaks, busy times you enter, look settings and other choices you make in the app. Projected grades are calculated from these in the app.

Syllabus and flyer files

When you upload a syllabus (or, as a club leader or officer, a photo of a club flyer), your device reads the file and turns it into text or page images. That text or those images are sent to our server and to our AI provider to be read (section 4). We do not store the uploaded file. We keep only the classes, assignments or events you choose to save on the review screen.

Clubs

If you use Clubs (18 and older), we store:

• Membership: the clubs you're in or asked to join, your role (leader, officer, coordinator or member), title and team, and when you joined.
• What you post: chat messages (text only), main messages, events you create, tasks, links a leader adds to the club, and money entries and planned expenses you record in a club's Finances tab (amount, category, date, note).
• Events: your RSVPs (going, maybe, can't go) and check-ins. Check-ins use a code or QR code that changes every 30 seconds. This is a club attendance tool, not proof that you were physically there.
• Availability, only if you choose to share it with a club: a grid of free and busy half-hours for a typical week, worked out on your device from your class times, your clubs' meetings and busy times you add. It contains no class names, places or notes.
• Safety and moderation: reports you send (the club's leaders don't see who reported), people you block (saved in your own account), mutes and removals, and the club's activity log of leader actions (section 7).
• If you create a club: the club's name, school and approximate size, and your faculty advisor's name and school email.

Information about club advisors

When a student creates a club, they give us their faculty advisor's name and school email. We use it only to ask the advisor to confirm the club: we send at most three emails and store the advisor's yes or no answer. If you're an advisor and want this removed, contact us.

Plan and usage information

Your plan (Free or Pro), whether you're a founding member and the date your free founding Pro ends (July 1, 2027), whether you had your own Pro when you joined a club (then you get a free seat in that club, and for founding members the date that seat ends), how many syllabus reads you've used this semester, how many flyer reads and “Find tasks” your club has used, and whether you asked to hear about Pro.

Payment information

Website payments are handled by Stripe. When you start a plan, we give Stripe your account email and name so it can create your customer record and send receipts, and Stripe collects your card details (and billing address where tax applies) directly on its own secure page. We receive only what we need to run your plan: your Stripe customer and subscription IDs, which plan you chose, whether it's in a free trial, active, cancelled or unpaid, and the next charge date. We never see or store your full card number. Stripe's own privacy policy applies to the data it holds.

If you subscribe in the iPhone, iPad or Mac app, Apple processes the payment. We receive Apple's signed record of the purchase (which plan, when it started and ends, renewal, refund or cancellation status, and Apple's transaction ID) so we can turn Pro on for the right account. We don't receive your Apple Account email or payment details from Apple.

Email preferences

If you turn on the daily “what's due” email, we store that it's on, the hour and time zone you picked, and a random code for the one-click unsubscribe link. We send it to your sign-in email.

Calendar link (Pro)

If you make a calendar link, we keep a random secret code for it. Any calendar app (Google, Apple, Outlook) that has the link can read your assignments, class times, appointments and club events from it, until you turn it off or make a new one in Due Next → Calendar. Keep the link private.

Canvas connection

Connecting Canvas is optional. If you do, you give us the private calendar link from your Canvas account. We keep the link on our servers, where only our server code can use it, and it isn't shown to anyone. Our server uses the link to read your Canvas calendar when you connect, when you open the app, and when you open the Canvas screen.

From that calendar we keep only each assignment's name, course name, due date and time, and a Canvas ID for the assignment and course, which we use to keep your list up to date. These are saved in your classes like anything else you add. We also save which class you chose for each course. We don't keep anything else in the calendar, such as descriptions or other calendar events. We don't receive your grades, messages, what you've turned in, or your Canvas password.

You can disconnect at any time in Due Next → From Canvas. We delete the link right away, and we stop checking Canvas. Assignments already added stay in your classes until you delete them. Anyone who has your Canvas calendar link can read that calendar, so keep it private. If you think it was shared, you can ask your school how to reset it. Due Next isn't made by or connected with Instructure (the company behind Canvas) or your school.

Phone notifications

If you turn on notifications in the iPhone or iPad app, we store a notification token for your device (a code from Apple and Firebase Cloud Messaging that lets us send reminders to that device), along with the time and time zone you chose. You can turn notifications off in the app or in your device's Settings at any time.

Referrals

If you invite friends or join through a friend's invite, we keep a record of who invited whom, whether the invited friend became a paying subscriber (yes or no, not their payment details), and the rewards earned. The person who invited you can see counts, not your name or details.

How you found us

When you create an account, we save one short label for where you came from, such as "Instagram", "Google", a club's link or "direct", plus the date. It comes from the link you used (for example duenextapp.com/?src=ig) or the app that opened it. We keep only this label, not your browsing history, and we look at it as totals to see which posts and clubs bring new students. It's deleted with your account.

Survey answers

If you choose to answer our short in-app survey, we keep your answers linked to your account so each person is counted once, and we look at them as totals and read any written answers. The survey is optional.

Messages to us

If you use the Contact form or email us, we keep your message, your account email, the page you wrote from, your browser type, and our reply.

Safety and abuse prevention

To stop spam and abuse we keep short-lived counters (for example, messages sent per minute, contact messages per day, wrong club codes per hour) and a log of blocked actions, such as a link in a club name. To limit the Contact form we also store a one-way scrambled (hashed) version of your network address for 2 days. The counters are kept from a day to a few days, and the log of blocked actions for 90 days.

Technical information

Like most online services, our hosting and database providers automatically record basic technical logs, such as IP address, browser and device type, pages requested, timestamps and error reports. We use these only to keep the Service running, secure and bug-free.

Stored on your device

The app saves a copy of your data in your browser (or in the iPhone, iPad or Mac app) so it works offline and loads quickly, and it remembers your chosen look and text size. When you sign out, the app removes that saved copy from the device. We don't use advertising or cross-site tracking cookies. On our public homepage only (not inside the app), we count visits with Cloudflare Web Analytics, which doesn't use cookies and doesn't follow you across sites. It sees things like the page, the site that sent you, your browser type and country, and we look at it only as totals.

3. How we use your information

• To run the Service: show your classes on all your devices, calculate grades, run the timer, read syllabi and flyers when you ask, bring in Canvas assignments if you connect Canvas, and run clubs (chat, events, RSVPs, check-ins, tasks, the Leader Notebook, availability totals).
• To verify clubs with their faculty advisors before they're approved.
• To keep clubs safe: filter strong language, handle reports, let leaders moderate, and let us review and freeze clubs when needed.
• To manage your plan, usage limits and payments, receipts, renewal reminders and refunds.
• To send emails you turned on (like the daily email) and important notices about your account, your club, security, or changes to our Terms or this policy.
• To keep the Service secure, prevent abuse and fix bugs.
• To improve the Service using overall patterns, such as which features are used. We don't read your notes, grades or messages for this.
• To follow the law and enforce our Terms.

We don't send marketing emails without your permission.

4. AI processing

Syllabus and flyer reading use Google's Gemini models through Google Cloud (Vertex AI). When you tap Read, the text or images you submit are sent to Google to produce a list of assignments or events, which comes back to you for review. Nothing is saved until you confirm it.

Leader Notebook. When a club's president, co-president or VP taps Find tasks on a note, the note and the club's member list as first names with last initials and club titles (for example “Nama K. (VP Events)”) are sent to Google's Gemini AI to suggest tasks. No emails or account details are sent. Suggestions are only shown to the club's presidents, co-presidents and VPs, and nothing is assigned until one of them taps Assign. A task assigned to you shows in your own Due Next with the club's name and who assigned it.

• Our server builds the AI's instructions. Your document is treated as data to read, never as instructions, so text in a file can't make the AI do something else. We also check every AI answer and drop anything unexpected.
• AI results can be wrong or incomplete. Always check dates against your syllabus, your school's systems and your instructor.
• Under Google Cloud's terms, Google processes this data on our behalf and does not use it to train its AI models. We don't use your content to train AI either.
• Google may keep the text or images in temporary memory for up to 24 hours to answer faster. If Google's automatic safety checks flag a request as possible abuse, Google may keep a copy for up to 90 days to review it. This processing may happen in Google data centers outside the United States.
• Please don't upload documents containing other people's personal or sensitive information.

5. Who can see what

6. Who we share it with

We do not sell your personal information, and we do not share it for targeted advertising. We share information only:

• With service providers who run parts of the Service for us and may use the data only to provide their services:
  • Google (Firebase and Google Cloud) for sign-in, hosting, database, server functions, logs, and AI processing (Vertex AI / Gemini);
  • Google's Gmail service to send our emails (daily emails, club and advisor emails, support replies);
  • Apple for Sign in with Apple and App Store purchases, and Apple and Google (Firebase Cloud Messaging) to deliver phone notifications if you turn them on;
  • Stripe, which processes website payments;
  • Cloudflare, which runs our domain name (DNS) and counts visits to our public homepage (Cloudflare Web Analytics, no cookies).
• With the people described in section 5, as part of how Clubs work.
• When required by law, such as to respond to a valid legal request, or to protect the rights, safety and security of our users, the public or the Service.
• In a business change, such as a merger, sale or reorganization (including forming a company). Your information would stay protected by this policy, and we'd tell you.
• With your permission, or at your direction. For example, if you connect Canvas, our server sends your calendar link to your school's Canvas service to read your calendar.

7. How long we keep it

8. Deleting your account

You can delete your account in the app (menu → Contact us → Delete my account). When you do, we delete your sign-in account and, right away from our live systems: your classes, assignments, notes, grades, attendance, office-hours logs, focus history and settings, plan, email and notification settings, survey answers, support messages, referral records, sign-up source, your Canvas calendar link, usage counters, your club memberships, join requests, RSVPs, check-ins, availability and your club chat messages. If you're in charge of a club that still has members, you'll be asked to hand it over to another leader first.

Some things are kept, without your account ID or email:

• Club safety records: entries in a club's activity log and safety reports may keep your short display name (like “Alex P.”) and a copy of a reported message, so moderation decisions can still be reviewed. They're deleted automatically within 1 year.
• Club content: events and tasks you created for a club stay with the club, without your name or ID. Money entries you recorded stay with the club, shown as added by “Former member”.
• People you invited keep their own referral record, without your ID.
• Apple or our payment processor keep their own purchase records under their policies.

Copies in our providers' technical logs are removed within about 30 days, and copies in our database backups within about 100 days. Emails we sent you or you sent us may stay in our Gmail account until we delete them periodically.

9. Security

Your data is stored on Google's infrastructure and is encrypted in transit (HTTPS) and at rest. Security rules lock each account's data so only that signed-in user can read or change it. In clubs, the rules and our server check every action against your role, so a member can't read another club, a private channel or leader-only information. The AI runs on our server, never in your browser. The app loads code only from our own site and Google's sign-in service. We limit how often actions can be repeated to stop abuse. No system is perfectly secure, so please keep your device and Google or Apple account secure. If a breach affecting your personal information happens, we'll notify you and the authorities as the law requires.

10. Your choices and rights

• Access and correct: you can see and edit everything you've added, right in the app.
• Delete: delete items, classes, messages, or your whole account in the app.
• Clubs: leave a club at any time, stop sharing availability, block people, and report anything that's wrong.
• Copy of your data: contact us and we'll send you a copy of your data.
• Emails: turn optional emails on or off, or use the unsubscribe link in any email. Important account and club notices can't be turned off while you have an account.
• Your state's privacy rights: depending on where you live (for example, California), you may have extra rights, such as to know, correct or delete your information, and not to be discriminated against for using them. We honor these requests for all users, wherever you live. We'll verify your identity (usually by your signed-in account) and reply within 30 days, or within the time your state's law requires.
• Do Not Track and Global Privacy Control: we don't sell data or track you across other sites, so there's nothing to opt out of. We treat these signals as a request not to sell or share.

11. Children and teens

Due Next is not for children under 13. We don't knowingly collect personal information from anyone under 13. If someone tells the app they're under 13, we block the account and delete it, with everything in it, automatically within about 24 hours. If you believe a child under 13 has created an account, contact us and we will delete it. Teens aged 13 to 17 may use the planner with a parent's or guardian's permission. A parent or guardian may contact us to review or delete their teen's information. Clubs are only for people 18 and older.

12. Where data is stored

Due Next is run from the United States, and your data is stored in the United States. Syllabus and flyer reading (section 4) may be processed by Google in other countries. If you use Due Next from another country, you understand your information will be transferred to the U.S., where privacy laws may differ from those in your country.

13. Changes to this policy

If we make important changes, we'll tell you in the app or by email before they take effect, and update the "Effective" date above. We won't use your information in a materially different way without telling you first and, where required, getting your consent.

14. Contact

For privacy questions or requests, . We try to reply within 3 business days.