Privacy
The short version
- neo-plan stores your planner so it can show it to you on any device. That is the only thing it is used for.
- No ads, no analytics, no selling or sharing your data, and no using it to train AI.
- I run neo-plan, so I can technically read what you store. I only look when you ask me to, or when something is broken and I have to.
- Delete your account in Settings and everything in it is deleted at once.
Who “I” am
neo-plan is made and run by Owen, an individual student developer, not a company. It lives at neo-plan.vercel.app. Questions and requests go to legal@owen64.me.
I also make Dewey, the Schoology tool that can send things to neo-plan. neo-plan is not affiliated with Schoology, PowerSchool, Google, or your school.
What neo-plan stores, and why
Your account
- Your email address, so you can sign in. If you choose a password, it is handled by Supabase Auth and stored only as a one-way hash. I can’t see it.
- If you continue with Google, Google tells neo-plan your email address, your name and the link to your profile picture. They are kept with your account. neo-plan gets nothing else from your Google account.
- Sign-in records: Supabase Auth keeps when you signed in and the IP address it came from, to keep accounts secure.
What you put in
Your groups, classes and lists, and their names and colours. Your items: titles, notes, steps, labels, priority, dates and times, and whether each one is done, turned in or cleared. Your bell schedule, school days, plan and meeting marks. Your time zone and import settings.
Your Schoology calendar feed (optional)
If you paste your Schoology calendar link into Settings, neo-plan keeps it and reads the feed at the hours you choose, then turns its events into items. Anyone who has that link can read your Schoology calendar, so neo-plan treats it like a password: it is never shown again after you save it, not even to you. Stop importing deletes it.
What Dewey sends (optional)
If you make an extension token and paste it into Dewey, Dewey sends neo-plan, for the courses and assignments it reads on Schoology:
- Course names and Schoology’s ID for each section.
- Assignment and event titles, links, IDs and due dates.
- Whether an assignment has been submitted, and whether it was late.
- Whether Schoology’s gradebook marks an assignment Missing. That yes-or-no is all Dewey sends from the gradebook. Your scores and grades are not sent to neo-plan or stored by it.
- An assignment’s description text, which neo-plan copies into the item’s notes if they are empty.
- What you change from Schoology’s pages, like marking something done or adding it to neo-plan.
Dewey never sends your Schoology password or cookies. Extension tokens are stored only as a hash, with the name you gave each one and when it was made and last used. Revoke a token in Settings to stop.
Import records
Each Schoology import or Dewey sync leaves a short record: when it ran, how many items it saw and changed, and any problem. These are kept for 30 days, except the newest one of each kind, which Settings shows.
Cookies
neo-plan sets only the cookies that keep you signed in. They are allowed inside other sites so the neo-plan card on Schoology can stay signed in; they are not used for tracking. There are no analytics, advertising or tracking cookies, and no third-party scripts. Fonts are served from neo-plan itself.
Server logs
Vercel, which runs neo-plan, and Supabase, which stores its data, keep short-lived technical logs of requests, such as IP addresses, pages and times, to run and protect the service. I use them only to fix problems.
What I will never do with it
- Sell or rent your information, or share it for anyone else’s advertising.
- Show you ads, or target anything at you based on what you store.
- Build a profile of you, except what neo-plan needs to work for you.
- Use your content to train AI models.
When anyone else sees it
The services neo-plan runs on. These process your data only to run neo-plan:
- Supabase: the database and sign-in, hosted in Northern California, US.
- Vercel: hosting, and the scheduled jobs that run imports, in the US.
- Google: only if you choose Continue with Google.
Me. No one looks at your content except for these reasons:
- You ask me for help. I’ll ask before I look.
- Something breaks that can’t be fixed without looking. I look at as little as I can, and fix the cause so it doesn’t happen again.
- To keep neo-plan and its users safe from abuse or an attack.
- When the law requires it. I only hand over data for a valid legal order, and I’ll tell you first unless I’m not allowed to.
If neo-plan changes hands. I don’t plan to sell neo-plan. If it is ever passed to someone else, you’ll be told before your information moves, and the promises on this page still apply to it.
Keeping it and deleting it
- Your information is kept for as long as you have an account.
- Delete account in Settings deletes your account and every row in it at once. It can’t be undone.
- Copies in Supabase’s routine backups and in short-lived logs disappear as those roll over, normally within a few weeks. They are never restored into neo-plan.
- An item you Delete is deleted right away. Items that are Cleared or Removed, and classes you archive, are kept with your account so you can bring them back, until you delete them or your account.
Your choices and rights
- See and correct everything you store, in the app.
- Delete any of it, or your whole account, in the app.
- Ask me by email for a copy of your data, or for anything you can’t do yourself. I’ll answer within 30 days.
- If you’re a student and your school asks for your neo-plan data to be deleted, I’ll delete it.
California residents have the right to know what personal information is collected, to delete it, to correct it, and to not be treated differently for using these rights. Everything above already gives you that. neo-plan doesn’t sell or share personal information, so there’s nothing to opt out of.
neo-plan doesn’t track you across sites, so it treats every visit the same whether or not your browser sends a Do Not Track signal.
Age
You must be 13 or older to make an account. neo-plan isn’t meant for children under 13, and I don’t knowingly collect their information. If you think a child under 13 has an account, email me and I’ll delete it.
Security
Every table is locked so each account can read and change only its own rows. Connections are encrypted. Passwords and extension tokens are stored only as hashes. No system is perfectly secure, so use a password you don’t use anywhere else.
If your information is ever exposed in a breach, I’ll email you without unreasonable delay to say what happened, what was involved, and what you can do.
Changes
If this policy changes, the new version goes on this page with a new date at the top. If a change matters, like neo-plan storing something new, I’ll tell you in the app or by email first.
Contact
Parts of this page are adapted from the Basecamp open-source policies, used under CC BY 4.0.