1. Who we are
   Due is operated by AI Prompt Genius LLC (“Due,” “we,” “us,” or “our”). This policy explains how we collect, use, disclose, retain, and protect personal information when you use Due’s website, app, and related services.
2. Information we collect
   We collect only information reasonably needed to operate Due:

Account information: your name, email address, internal account identifiers, linked Google or Apple identity, and time zone.
Task and workspace content: tasks, projects, course names, due dates, notes, labels, reminders, comments, subtasks, links, completion status, and files you choose to attach.
Educational integration data: when you connect or use Canvas or Learning Suite, course and assignment information, dates, descriptions, source links, sync status, and an encrypted Canvas calendar-feed URL. Due does not collect your school password, school-session cookies, grades, or submitted coursework through these integrations.
Device and service information: IP address and user agent used during authentication, request and error logs, notification permission, and privacy-safe diagnostic information generated when you use the service.
Local app data: Due stores cached tasks, widgets, pending offline changes, reminder schedules, and preferences on your device so the app can work offline. Native session credentials are stored in Apple’s Keychain. You can clear local data by signing out or deleting your account.
We receive this information from you, your browser or device, an authentication provider you select, and educational services you choose to connect.

1. How we use information
   We use personal information to create and secure accounts; display, sync, and organize your work; provide offline features and reminders; maintain and troubleshoot the service; prevent fraud or misuse; respond to support and privacy requests; and comply with law. We do not use educational data to build advertising profiles or train advertising systems.
2. When we disclose information
   We disclose personal information only as needed to provide Due:

Service providers: Cloudflare provides hosting, database, file storage, network security, and operational logging. Google or Apple verifies your identity only when you choose that sign-in method; Due then stores its own application session. They process information under their applicable contractual obligations.
Connected services: Due contacts Canvas only when you provide a calendar feed and request or enable a sync. The Learning Suite browser extension sends the assignment data you choose to sync to Due. We do not send your Due task content back to those services.
Legal and safety: we may disclose information when reasonably necessary to comply with law, protect rights or safety, investigate abuse, or defend legal claims.
Business changes: information may transfer as part of a merger, financing, acquisition, bankruptcy, or sale of assets, subject to this policy and applicable law.
We do not sell personal information. We do not share personal information for cross-context behavioral advertising or use it for targeted advertising.

1. Educational data
   Coursework and other educational data in Due is visible only to the account holder and is not public. We use it only to provide user-requested planning, syncing, and support features. Due is a direct-to-consumer planner and is not your school’s official student record system. If an educational institution provides Due under a separate agreement, we will also handle covered records according to that agreement and applicable student privacy law. Requests concerning records maintained by a school may need to be directed to that school.
2. Cookies, device storage, and notifications
   Due uses essential cookies to sign you in, keep your session secure, and protect the login flow. These cookies are not used for advertising. Due also uses browser storage, SwiftData, shared App Group storage, and Apple’s Keychain for offline data, widgets, preferences, and secure native sessions. Browser and mobile notifications are optional and require your permission. Native reminder notifications are scheduled locally on your device; this release does not use remote push notifications.
3. Retention and deletion
   We keep account and workspace information while your account is active or as needed to provide Due. In Settings, you can export tasks, delete tasks and integrations, disconnect Canvas, or permanently delete your account. Account deletion removes your account and associated workspace content from active systems. If you used Sign in with Apple, the iOS app also directs you to revoke Due’s Apple authorization in your Apple Account settings. Limited information may remain temporarily in security logs, backups, or where retention is required by law, after which it is deleted or de-identified under our retention practices.
4. Your choices and privacy rights
   Settings lets you correct your display name, export your task data, manage notifications and integrations, delete workspace data, and delete your account. You may also contact us to request access, correction, deletion, or a portable copy of personal information, or to object to or restrict certain processing. Depending on where you live, you may have additional rights, including the right to appeal a denied request and the right not to receive discriminatory treatment for exercising a privacy right.

Because Due does not sell personal information or share it for targeted advertising, there is no sale or targeted-advertising opt-out required to use the service. We will honor applicable legally recognized browser-based opt-out signals if our practices change in a way that makes them relevant. We may verify your identity before completing a request.

1. Children’s privacy
   Due is not directed to children under 13, and we do not knowingly collect personal information from a child under 13 without legally sufficient authorization. If you believe a child under 13 provided personal information without authorization, contact us so we can investigate and delete it. Parents or guardians may contact us to review, delete, or stop further collection of a child’s information where applicable.
2. Security and international use
   We use administrative, technical, and physical safeguards designed to protect personal information, including encrypted connections, restricted account access, secure session cookies, and encryption of stored Canvas feed credentials. No system can guarantee absolute security. Due is operated from the United States, and information may be processed in the United States and other locations where our service providers operate, subject to applicable safeguards.
3. Changes to this policy
   We may update this policy as Due or applicable law changes. We will post the revised policy with a new effective date and provide additional notice when required by law. Material changes apply prospectively unless otherwise stated.
4. Contact us
   Questions, privacy requests, and appeals may be sent to ben@phooey.foo.

AI Prompt Genius LLC
788 N 700 E
Apt 2
Provo, UT 84606
United States