Privacy policy

Docket is a free planner for students who use Canvas. It's run by one student, not a company. This page says plainly what Docket keeps about you and what it does with it.

What Docket stores

• Your account: name, email, and either a password (stored only as a secure hash) or your Google sign-in.
• Your Canvas connection: your school's Canvas address and an access token, encrypted before it's saved.
• Your Canvas data, copied so Docket can show it quickly: classes, assignments, due dates, grades and scores, submission status, announcements, discussions, Inbox messages, files lists, pages, modules and class rosters.
• What you make in Docket: tasks, notes, stars, priorities, reminders, themes and settings.
• Basic usage: when you were last active, how much you use Docket, and which pages get opened. Pages are only looked at as totals across everyone, to see what's working, and page records are deleted after 30 days.
• If you turn on notifications: your browser's push subscription.
• If you use Rewards: your streak, XP, gems, badges and items, and your first name and look on your league board.
• Security records: a short-lived count of sign-in attempts and AI requests, used only to stop abuse and cleared within two days.

What other students can see

Only what you choose to share. If you join a Rewards league, people in your league group see your first name and last initial, your weekly XP, and the icon, frame and title you equip. You can leave leagues or turn Rewards off in Settings. A family link or a shared workspace shows only what that page says it shows, and you can revoke it any time.

What the person who runs Docket can see

Docket is run by one student. To keep it working and help when something breaks, they can see:

• Your name, email, when you joined and when you were last active.
• Whether you're using Docket right now, and roughly how much you use it (visits and time per day).
• Counts, like how many assignments you turned in or tasks you checked off. Never which ones.
• Whether your Canvas connection is working, and its error if it isn't.
• Anything you send them on purpose: feedback, bug reports, replies and reviews.

They can't see your grades, the names of your assignments or classes, the text of your notes, tasks or messages, or which pages you open. They can't see your password or Canvas key.

Cookies

Docket uses one cookie to keep you signed in, plus your browser's local storage for things like your theme. There are no advertising or tracking cookies.

What Docket does with it

Only runs Docket for you: showing your work, sending reminders you asked for, and doing what you ask on Canvas (like turning in an assignment or replying to a message). Docket has no ads, never sells your data, and never shares it for marketing.

Who else handles it

• Vercel hosts the app and Neon hosts the database.
• Google processes requests when you use an AI feature (the assistant, Quick Add parsing, summaries or task steps). Paid OpenRouter fallback is disabled by default. If Docket explicitly enables it, OpenRouter may pass the request to a fallback AI model when Google cannot answer. These providers receive the information needed for the request, such as your question and relevant school data. Google's free API tier may use prompts and responses to improve its products; see Google's API terms. Avoid including sensitive personal information in AI requests.
• Google also handles sign-in or Google Calendar if you connect those services.
• Resend sends Docket's emails (verification, password resets, and reminders you turn on).
• Your school's Canvas, which Docket reads from and writes to on your behalf.

Your choices

• You can disconnect Canvas in Settings at any time. Docket then stops reading from it.
• You can set Docket to never change anything on Canvas (Settings, Connections).
• You can delete your account and everything stored with it yourself, any time, in Settings, Account. It happens right away. Backups kept by our database host roll off within 7 days.
• You can ask for a copy of your data, or for something to be corrected, by emailing rishaandesigns@gmail.com from your account's email. We answer within 30 days.
• You can turn off each kind of email and notification in Settings.

How long it's kept

For as long as you have an account. Copies of your Canvas data are refreshed as you use Docket, and removed when you disconnect Canvas or delete your account.

Students under 13

Docket is meant for students 13 and older, and doesn't knowingly collect information from children under 13. If you're a parent and think a younger child signed up, email us and we'll delete the account.

Security

Connections use HTTPS, Canvas tokens are encrypted, passwords are hashed, and sign-in attempts are limited to stop guessing. Changing your password signs out your other devices. No system is perfect; if something ever goes wrong, affected users will be told promptly. To report a security problem, email rishaandesigns@gmail.com.

Questions

Email rishaandesigns@gmail.com. If this policy changes in a way that matters, Docket will say so in the app.