LAST UPDATED OCTOBER 30, 2026

Privacy Policy

Conflate brings your classes, calendar and training into one dashboard. To do that it needs some of your information. This page explains what we collect, why, who else sees it, and what you can do about it, in plain language.

The short version

• We only collect what the dashboard needs to work: your email address, the connections you add, and the things you create in the app.
• Your Canvas token and calendar link are stored encrypted. Conflate only reads from Canvas and your calendar. It never posts, submits or changes anything there.
• We don’t sell your information, show ads, or use tracking or analytics tools.
• You can disconnect anything in Settings at any time, and delete your account there too.

What we collect

Information you give us

• Your email address and password, to create your account, confirm it’s yours and sign you in. We email you a code to confirm your address and each time you sign in. We never store your password itself, only a scrambled version of it (a hash) that can check it.
• Your Canvas access token and your school’s Canvas address, if you connect Canvas.
• Your calendar’s published link (an .ics link), if you add your Outlook calendar, and your Google Calendar’s secret iCal address, if you add that.
• Things you create in the app: your To do list, events you add or change on the calendar, and homework sessions you remove from the planner.

Information we read from your connections

• From Canvas: your name and school email, your courses, grades, assignments and due dates, announcements, your instructors, and course syllabi (to find instructors’ email addresses, offices and office hours).
• From your calendar: the events in it (titles, times and places), to show them alongside your classes and to recognize practices, lifts and games.
• If you sign in with Microsoft (where that option is offered): your Outlook calendar and your most recent inbox messages (sender, subject and a short preview), shown on your dashboard. You can disconnect it in Settings.

Most of what Conflate reads from Canvas and your calendar is used to build your dashboard when you open it and isn’t kept afterwards. A few things are remembered so the app stays fast; see “How long we keep things” below.

Information collected automatically

• A sign-in cookie that keeps you signed in for up to 30 days, and a device cookie that remembers this browser has signed in before, for up to a year, so someone guessing your password can’t lock you out. We store only scrambled (hashed) versions of them, not the cookies themselves.
• Your browser’s storage keeps your Light or Dark choice and a backup copy of your To do list, in case the server can’t be reached. Signing out clears it.
• Network address and basic request details, used briefly to limit how many sign-in attempts and codes can be requested and to keep the service safe. Our host may also keep standard server logs.

How we use it

• To show your dashboard: classes, grades, deadlines, calendar and training in one place.
• To plan your homework around your schedule, including estimating how long each assignment will take.
• To sign you in and keep your account secure.
• To keep the service running within its limits, for example capping how much each person’s homework estimates can cost each month.

We don’t use your information for advertising, and we don’t sell or rent it to anyone.

Who else sees it

Conflate relies on a few outside services. Each gets only what it needs:

We may also share information if the law requires it, or to protect the safety of our users or the service. If Conflate is ever transferred to someone else, this policy would continue to apply to the information you’ve already given us.

Information shared between users

To save time and cost, two things are worked out once per class and reused for everyone in it: the time estimate for an assignment, and the instructor details found in a course syllabus. Neither includes anything about you personally.

How long we keep things

• Your account and the connections and items you add: until you remove them or delete your account.
• Sign-in codes: they expire after 10 minutes. Signed-in sessions: up to 30 days, or until you sign out.
• Your calendar’s events: kept in the server’s memory for up to an hour so the page loads quickly, then dropped.
• Assignment estimates and syllabus details: kept, shared per class as described above, and refreshed when the assignment or syllabus changes.
• Monthly cost totals for your homework estimates, so the monthly cap works.

Your choices

• Disconnect Canvas or your calendar any time with “Remove” in Settings. This deletes the saved token or link.
• Revoke your Canvas token in Canvas itself (Account → Settings → Approved Integrations). That stops it working everywhere, immediately.
• Sign out to end your session and clear the copies kept in your browser.
• Delete your account in Settings → Account. It deletes your account and everything stored with it right away: your saved tokens and links, your to-dos and calendar edits. (We keep only how much your account spent on time estimates this month, with no email or other detail, so the monthly total adds up.)
• Ask for a copy of your information, or for help with any of this, by emailing us at wall.jak@northeastern.edu.

Security

Your Canvas token, calendar links and Microsoft sign-in are encrypted before they’re stored, and everything travels over encrypted connections. Our Security page explains how in more detail. No system is perfectly secure, but we work to protect your information and will tell you if something goes wrong that affects it.

Students and schools

Conflate isn’t run by, or affiliated with, your school, Instructure (the maker of Canvas), Microsoft or Anthropic. You connect your own accounts and choose what to share. Conflate isn’t meant for children under 13, and we don’t knowingly collect information from them.

Changes to this policy

If we change this policy, we’ll update the date at the top. If the change is significant, we’ll let you know by email or in the app before it takes effect.

Contact

Questions or requests about your privacy: wall.jak@northeastern.edu.