ClassRise Privacy Policy

Effective date: November 10, 2026

ClassRise is operated by Genuinely Great Integrated Technology LLC, a Wyoming limited liability company ("GGiT", "we", "us", "our"), of 30 N Gould St Ste R, Sheridan, WY 82801-6317, USA. We are the controller of personal information processed in connection with ClassRise.

This Privacy Policy explains what personal information we collect when you use the ClassRise mobile app, our websites and related services (the "Services"), how we use and protect it, the legal bases we rely on, who we share it with, and the choices and rights you have. It is written to be accurate for users in the United States, the European Economic Area, the United Kingdom and elsewhere. It is not legal advice to you.

The short version: we collect only what we need to run ClassRise. We do not sell your personal information, we do not show ads, and we do not use advertising SDKs or an advertising ID. The Android and iOS apps do not include a third-party analytics SDK; they record basic usage and crash information on our own servers (with our hosting provider, Supabase), never the text you write. Our website (the ClassRise landing page and web app at ggit.dev/classrise) uses Vercel Web Analytics, a cookieless, aggregated measurement tool described below. Chamberlain is an artificial-intelligence coach and is not medical, mental-health, legal, financial or other professional advice. ClassRise is for adults 18 and older.

Information we collect

• Account information. An account is required for ClassRise's core features, including keeping your progress, using ClassRise on more than one device, subscribing to ClassRise Coach and using Chamberlain. You create one by signing in with Google (or, where offered, Sign in with Apple), and we receive your name, email address, profile picture link and a unique user ID.
• Trial without an account. You can try a limited version of ClassRise without signing in. We then assign a random anonymous user ID and store your trial's lesson activity, check-ins, streaks and reflections with it, along with server logs; we do not receive your name or email address. Trial users cannot subscribe or use Chamberlain, the AI coach. If you then sign in with Google from the trial, your trial data is kept and becomes part of your new account under the same ID. If that Google account already has a ClassRise account, you are signed in to that existing account instead and the trial data is not merged into it. If you sign out or uninstall the app before signing in, you can no longer access the trial data. While you are still in the trial, you can delete it at any time in Account → Delete account.
• Lesson activity. Lessons you open and complete, check-ins, practices marked done, streaks, and the dates and times of this activity. Reminder settings (including the time you choose) stay on your device.
• Reflections. Text you write about how a practice went, and the outcome you select.
• Coach chat content. If you use Chamberlain, the AI coach: the messages you send, the replies generated, usage counts, and any reports you file about a reply (your chosen reason and the text of the reply).
• Time zone. Your device's time zone, so your daily lesson and streaks follow your local day. We do not collect your precise location.
• Purchase status. If you subscribe: your plan, trial status, purchase, renewal, cancellation and expiration dates, the store used, and transaction identifiers from our subscription providers. We never receive your payment card details; payments are processed by Google Play or, where offered, the Apple App Store.
• App usage and crash information. Which parts of the app you use and when: for example opening the app, opening or completing a lesson, saving a reflection or sending a coach message (that it happened, not what you wrote), starting or finishing read-aloud, viewing the subscription screen, starting a trial or subscription, and your answer to the daily-reminder suggestion. We also record the app version and whether you use Android, iOS or the web app. If the app crashes or hits an error, it sends an error report with the error message and technical details of where in the app it happened. These records are linked to your user ID and stored on our own servers with our hosting provider (Supabase). They never include the text of your reflections or coach messages, and we remove email addresses from error reports.
• Website analytics (web only). When you visit the ClassRise landing page or use ClassRise in a web browser, we use Vercel Web Analytics to understand, in aggregate, how the site is used. It does not use cookies. According to Vercel, visitors are distinguished only by a hash derived from the request, which is discarded after 24 hours, and the data is stored for aggregated statistics rather than to identify you by name, email or a stored IP address. A data point may include the time, the page URL and path, the referrer, filtered query parameters, coarse geolocation (for example country, region or city), and device, browser and operating-system type and version. This analytics script is not included in the Android or iOS apps. Our legal and support pages (Privacy, Terms, Delete account, and Support) do not load it.
• Support communications. Your email address and the content of messages you send us.
• Server logs. Like most online services, our hosting providers automatically record basic technical information (such as IP address, request times, user agent and error messages) when the app or website talks to our servers or to the website host, used for security, operations and troubleshooting.

Sources. We collect this information directly from you, automatically when you use the Services, and from Google or Apple (sign-in, where used) and our subscription providers (purchase status).

What we don't collect. We do not collect precise location, contacts, photos, files, health data, browsing history, advertising IDs, government IDs or payment card numbers. Daily reminders, including the time you choose, are scheduled on your device, and the notification permission is only requested if you ask for a reminder. Read-aloud uses your device's built-in text-to-speech; lesson text is not sent to a cloud speech provider. Please do not include sensitive personal information (such as health, religious, sexual, financial or government ID details) in reflections or coach chats.

How we use information, and our legal bases

We use personal information only for the purposes below. Where the EU or UK GDPR applies, the legal basis is noted in parentheses.

• provide and operate the Services, including signing you in, delivering daily lessons, your dashboard and archive, syncing your progress across devices, and scheduling on-device reminders you request (contract, or legitimate interests in operating a limited trial if you have not yet created an account);
• provide Chamberlain, the AI coach, by generating replies from your messages, recent conversation context, lesson context and, when you use reflection analysis, your relevant reflections (contract — Chamberlain is part of ClassRise Coach);
• process subscriptions, verify access to paid features, and provide customer support (contract; legal obligation where we must keep transaction records);
• keep the Services safe and working, including enforcing usage limits, preventing fraud and abuse, troubleshooting, finding and fixing crashes, reviewing reported coach replies, and maintaining server logs (legitimate interests in security, reliability and safety; legal obligation where the law requires it);
• understand, in aggregate, how ClassRise is used so we can improve it — first-party app usage and crash records on our servers, and Vercel Web Analytics on the website (legitimate interests in measuring and improving the Services);
• maintain and improve the Services (legitimate interests); and
• comply with legal obligations, enforce our Terms of Use, and protect the rights and safety of our users and others (legal obligation and legitimate interests).

We do not use your information for advertising, and we do not use your reflections or coach chats to train AI models.

Where we rely on legitimate interests, you may object as described under "Your choices and rights." If we ever rely on consent for a particular use (for example a non-essential tool that requires it), you may withdraw that consent at any time, without affecting processing that already took place.

The AI coach (Chamberlain)

Chamberlain is powered by Google's Gemini API. It is artificial intelligence, not a person, and it is not medical, mental-health, legal, financial or other professional advice. AI replies can be inaccurate, incomplete or unsuited to your situation.

When you send a coach message, we send Google your message, recent turns in that conversation, a short rolling summary of older turns, and context from the current lesson, so it can generate a reply. When you use reflection analysis (a ClassRise Coach feature), we send Google the reflection you saved, the outcome you selected, a small number of your recent reflections, and lesson metadata. Google acts as our service provider. Under its paid API terms, Google does not use this content to train its models. You can report any reply using the "Report" link under it. A report includes your chosen reason and the text of the reply.

Coach conversations are stored with your account so you can see them again. We may review coach content you report, or content flagged for safety or abuse, to investigate the report, enforce our Terms and comply with law.

How we disclose information

We do not sell your personal information. We disclose it only in these limited cases:

• Service providers that process it on our behalf, only to provide their services to us and under contracts that restrict other uses:
• Supabase: hosting, database, authentication and server functions (data stored in the United States, AWS us-east-2 region);
• Google: Google Sign-In, and the Gemini API for coach replies and reflection analysis;
• Apple: Sign in with Apple, where offered;
• RevenueCat, Google Play Billing and the Apple App Store: subscription purchases and status; Google Play also provides the optional in-app review dialog on Android;
• Vercel: hosting of the ClassRise website, and Vercel Web Analytics on the landing page and web app as described above.
• Legal and safety reasons: when we believe in good faith that disclosure is required by law or legal process, or is necessary to protect the rights, property or safety of GGiT, our users or others, or to prevent fraud or security problems.
• Business transfers: to a successor in a merger, acquisition, reorganization or sale of assets, who must continue to protect your information as described in this Policy, unless you are notified otherwise.
• With your direction or consent.

Google Play and the Apple App Store also collect information directly when you make a purchase, under their own privacy policies. When you use Google Sign-In, Google processes your sign-in information under its own policy. On the website, Google's sign-in script may set cookies or otherwise process data as part of that sign-in.

We do not sell or share personal information

We do not sell personal information. We do not "sell" it or "share" it for cross-context behavioral advertising, and we do not process it for targeted advertising, as those terms are defined under the California Consumer Privacy Act and other US state privacy laws. We do not disclose personal information to third parties for their own marketing. There are no ads in ClassRise. We have no actual knowledge of selling or sharing the personal information of anyone under 16.

If this ever changes, we will update this Policy and notify you before the change takes effect, and we will offer any opt-out or obtain any consent required by law.

Cookies, analytics and tracking signals

The ClassRise Android and iOS apps do not use cookies, advertising identifiers, or third-party analytics or tracking SDKs. The first-party usage and crash records described above are collected by us for ClassRise only; they are not used for advertising and are not sold or shared.

The ClassRise website does not use advertising cookies or advertising identifiers. It does use Vercel Web Analytics, which Vercel documents as cookieless (see "Website analytics" above). Our legal and support web pages do not load that analytics script and do not set cookies.

We do not use this information to track you across other companies' apps or websites. If a "Do Not Track" or Global Privacy Control signal applies and the law requires us to honor it, we will.

Website fonts used on the landing page are hosted by us (they are not loaded from a third-party font service).

Retention

We keep personal information only as long as needed for the purposes above:

• account information, lesson activity, reflections and coach conversations: until you delete them or your account;
• trial data (no account): until you delete it in the app or it becomes part of your account when you sign in. Inactive guest accounts are deleted after 90 days, along with all of their trial data;
• subscription status: while your account exists. After you delete your account, we unlink our copy of the store transaction log from your user ID. We keep those unlinked transaction records for generally up to 7 years where we must do so for tax, accounting or similar legal reasons, and then delete or further de-identify them;
• app usage and crash records: automatically deleted after 180 days, and right away when you delete your account (or when an inactive guest account is deleted);
• website analytics data: retained by Vercel as aggregated measurement data under Vercel's product terms (visitor hashes are discarded after 24 hours);
• server logs: kept in line with our hosting providers' default retention, which we intend to limit to 90 days where the provider lets us configure it;
• backups: until they are overwritten on our providers' normal backup cycle.

When we no longer need personal information, we delete or de-identify it.

Security

We use reasonable administrative, technical and physical safeguards to protect personal information, including encryption in transit (HTTPS/TLS), encryption at rest by our hosting provider, database access rules that limit each user's data to their own account, and keeping server secrets out of the app. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. If a security breach affects your personal information, we will notify you as required by law.

Adults only

ClassRise is intended for adults 18 and older. It is not directed to children under 13 or to minors, and we do not knowingly collect personal information from anyone under 18. If you believe a minor has given us personal information, contact support@ggit.dev and we will delete it.

International transfers

We are based in the United States, and the service providers listed above store and process information in the United States (Supabase in AWS us-east-2). If you use the Services from the EEA, the UK, Switzerland or another country outside the US, your information will be transferred to and processed in the US, where privacy laws may differ from those where you live.

Where the GDPR or UK GDPR requires a transfer safeguard, we rely on the following, as applicable to each provider:

• Google (Sign-In and the Gemini API): Google LLC's certification under the EU-U.S. Data Privacy Framework, the UK Extension to that framework, and the Swiss-U.S. Data Privacy Framework (https://www.dataprivacyframework.gov/participant/5780), with Standard Contractual Clauses available under Google's data processing terms as a fallback;
• Supabase: Standard Contractual Clauses in Supabase's Data Processing Addendum (https://supabase.com/legal/customer-resources/data-processing-addendum);
• RevenueCat: Standard Contractual Clauses in RevenueCat's Data Processing Addendum (https://www.revenuecat.com/dpa), including the UK addendum and Swiss-adapted clauses;
• Vercel (website hosting and Web Analytics): Vercel Inc.'s certification under the EU-U.S. Data Privacy Framework, the UK Extension, and the Swiss-U.S. Data Privacy Framework (https://www.dataprivacyframework.gov/participant/6847).

You may request a copy of the relevant contractual safeguards, with any confidential terms redacted, by emailing the contact address below.

Your choices and rights

Wherever you live, you can:

• access the personal information we hold about you and receive a copy in a portable format;
• correct inaccurate information (you can edit your display name in the app, or ask us);
• delete your account and personal information (see below);
• turn off reminders in the app or in your device's notification settings; and
• choose not to use Chamberlain or the website.

EEA, UK and Swiss rights. If the GDPR, UK GDPR or Swiss law applies to our processing of your information, you also have the right, subject to the limits in those laws:

• to access your personal information and obtain a copy;
• to rectify inaccurate personal information;
• to erase personal information ("right to be forgotten");
• to restrict processing;
• to data portability, where the basis is contract or consent and the processing is automated;
• to object to processing based on legitimate interests, including website analytics;
• to withdraw consent where processing is based on consent, without affecting the lawfulness of processing before withdrawal;
• not to be subject to a decision based solely on automated processing, including profiling, that produces legal or similarly significant effects. ClassRise does not make that kind of solely automated decision about you. Chamberlain's replies and practice suggestions are informational and do not produce legal or similarly significant effects.

You also have the right to lodge a complaint with a supervisory authority. If you are in the EEA, that is the authority in your EU member state of habitual residence, place of work, or the place of the alleged infringement (see https://edpb.europa.eu/about-edpb/about-edpb/members_en). If you are in the UK, that is the Information Commissioner's Office (https://ico.org.uk). If you are in Switzerland, that is the Federal Data Protection and Information Commissioner.

To make a request, email support@ggit.dev with the subject "Privacy request". We will verify your request by confirming control of the email address on your account, and we will respond within the time required by law (under the GDPR, generally one month, which may be extended in permitted cases; under some US state laws, generally 45 days). We will not treat you differently for exercising your rights.

Deleting your account

• In the app: open Account, tap Delete account, and confirm. Deletion is immediate and permanent. This also works if you are trying ClassRise without an account.
• On the web: follow the steps at https://ggit.dev/classrise/delete-account, or email support@ggit.dev from the email address on your account with the subject "Delete my ClassRise account". We will verify the request and delete the account within 30 days.

Deleting your account removes your profile, lesson activity, reflections, coach conversations and reports, app usage and crash records, and subscription status from our systems, and deletes your customer record at RevenueCat, our subscription provider. Some information may remain in backups for a limited time, or where we must keep it for legal reasons, as described under Retention. Deleting your account does not cancel a subscription. Cancel in Google Play or the App Store to stop future charges.

US state privacy rights

Depending on where you live, including California (CCPA as amended by the CPRA), Virginia, Colorado, Connecticut, Utah and other states with comprehensive privacy laws, and to the extent those laws apply to us, you may have the following rights:

• Right to know and access: to confirm whether we process your personal information and to access it, including the categories of personal information collected, the categories of sources, the purposes, the categories of recipients and the specific pieces of personal information we hold, and to receive it in a portable format.
• Right to delete personal information we collected from you, subject to legal exceptions.
• Right to correct inaccurate personal information.
• Right to opt out of the sale of personal information, sharing for cross-context behavioral advertising, targeted advertising, and profiling in furtherance of decisions that produce legal or similarly significant effects. We do not sell or share personal information, use it for targeted advertising, or engage in such profiling, so there is nothing to opt out of; we will still honor opt-out preference signals such as Global Privacy Control where required by law.
• Right to limit the use and disclosure of sensitive personal information. We do not use or disclose sensitive personal information for purposes that require offering this right under California law, and we do not intentionally collect sensitive data; where other state laws require consent to process sensitive data, we will obtain it.
• Right to non-discrimination: we will not deny you service, charge different prices or provide a different quality of service because you exercise your rights.

Categories disclosed (last 12 months). In the preceding 12 months we have disclosed, for business purposes and only to the service providers listed above: identifiers (name, email, user ID), commercial information (purchase status), internet or other electronic network activity (lesson activity, server logs, and website analytics data points), and user-generated content (reflections and coach chats). We have not sold or shared personal information as defined by California law.

How to exercise your rights. Email support@ggit.dev with the subject "Privacy request" or use the in-app account deletion feature. We will verify your request by confirming control of the email address associated with your account, and may ask for additional information to verify your identity. We will respond within the time required by law (generally 45 days, which may be extended where permitted).

Authorized agents. You may use an authorized agent to submit a request. We may require written, signed permission from you and may ask you to verify your identity directly, unless the agent holds a valid power of attorney.

Appeals. If we decline to take action on your request, you may appeal by emailing support@ggit.dev with the subject "Privacy appeal". We will respond in writing within the period required by law. If you are not satisfied, you may contact your state Attorney General.

California "Shine the Light." California residents may request information about disclosures of personal information to third parties for their direct marketing purposes. We do not make such disclosures.

Changes to this Policy

We may update this Policy from time to time. We will post the updated Policy with a new effective date and, for material changes, notify you in the app or by email before the change takes effect. We will not use previously collected personal information in a materially different way without your consent where the law requires it.

Contact us

Genuinely Great Integrated Technology LLC (GGiT), operator of ClassRise

Email: support@ggit.dev

Support: https://ggit.dev/classrise/support

Mail: 30 N Gould St Ste R, Sheridan, WY 82801-6317, USA

Privacy Policy · Terms of Use · Delete your account · Support