Severn Planner privacy policy
Last updated October 26, 2026
The short version
Your school work is yours. It is stored in your own account so it can sync between your devices, and it is not sold, shared, advertised against, or used to build a profile of you. The planner and the extension have no analytics or tracking of any kind. The website at www.severnplanner.com uses Google Analytics to count visits, as described below. Once you set a passphrase, it is also encrypted on your own device before it is saved, so what the server stores is scrambled text that cannot be read without it. If you connect an AI assistant like Claude or ChatGPT, it can read a summary of your stats, as described below.
Severn Planner is a student planner web app. Severn Planner Overlay is the companion Chrome extension that displays it on top of a school's Blackbaud portal or Canvas site. This policy covers both, and the website at www.severnplanner.com.
What is collected
Account details. When you create an account, Firebase Authentication stores your email address. If you sign in with Google, it also receives the name and profile picture on your Google account. Passwords are handled by Firebase and are never visible to us.
What you put in the planner. Classes, assignments, due dates, grades, notes, reminders, resources, study plans, and settings — whatever you choose to enter or import.
What the browser extension reads. While you are on your school's Blackbaud portal and signed in yourself, the extension reads the assignment and grade information already displayed on those pages and sends it to your own Planner account, so you do not have to type it in twice. It reads only pages on myschoolapp.com that you have opened yourself. It does not sign in for you, does not read any other website, and does not change, submit, or send anything on the portal.
With Canvas. The same extension can connect to a school's Canvas site instead. It runs only on the one Canvas address you enter, and only after you allow it there in Chrome. It reads your courses, assignments and grades through Canvas's own interface, using the session you signed in with, and only on the dashboard, course, assignment and grade views. It never asks for your Canvas password and does not read the sign-in page, your messages, the people directory, profiles, or anything about other students. Assignment descriptions and links are stored as text in your Planner account; files stay on Canvas as links.
Canvas with an access token. Instead of the extension, or as well as it, you can connect Canvas with a personal access token you make in Canvas yourself. Planner then reads the same things (your courses, assignments, due dates and grades) from Canvas's own interface, read only, and never submits, posts or changes anything. The token is kept only in the browser on the device where you added it; it is not saved to your Planner account. Each request passes through our Cloudflare Worker on its way to your school's Canvas, because browsers cannot reach Canvas directly from another site. The worker only forwards read requests to that one Canvas address, and it does not store or log the token or what Canvas sends back. You can delete the token in Planner, or in Canvas under Account, then Settings, at any time.
With Schoology. The same extension can connect to a school's Schoology site. It runs only on the one Schoology address you enter, and only after you allow it there in Chrome. It reads the course, materials, assignment and grade pages you can already see when signed in, using the session you signed in with, and only on those views. It never asks for your Schoology password and does not read the sign-in page, your messages, members lists, groups, profiles, or anything about other students. Assignment descriptions and links are stored as text in your Planner account; files stay on Schoology as links.
With Google Classroom. The same extension can connect to Google Classroom, at classroom.google.com, only after you allow it there in Chrome. It reads your classes, the work posted in them, your own submissions and returned grades, and each class's grading categories, the same way the Classroom page does, using the Google account you are signed in with, and only while you are on your class list, a class, its classwork, your work or your to-do list. It never asks for your Google password, uses no Google sign-in permission, never posts, submits or changes anything in Classroom, and does not read the people list, comments, or anything about other students. Assignment descriptions are stored as text in your Planner account; files stay in Classroom.
Files you attach. PDFs and images attached to an assignment or a class stay in your browser's storage on the device that added them. They are not uploaded.
Stored on your device by the extension. A record of which items it has already imported, which you have dismissed, the addresses of your portal's assignment and grade pages, a cache of assignment descriptions, and whether the overlay was last open or closed.
Google Tasks. If you press Connect Google Tasks in Quick Add, Google asks whether Planner may see your tasks, read only. Planner then reads your open task lists and tasks straight from Google, in your browser, so you can pick which ones to add. Only the tasks you pick are saved, as assignments in your own Planner account. Google's permission lasts about an hour and is not kept. Nothing is written back to Google Tasks, and your tasks are not sent to any other server, shared, or used for anything else. Planner's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
Planner testers. If you join Planner testers, your account is marked as a tester so new features reach you early, and you may get a short email about a new feature at your account's email address. Turn it off in Settings → Automation and the mark is removed.
Encryption
Once you set a passphrase, your planner is encrypted on your own device before it is saved. What reaches the server is scrambled text, so nobody who can reach the database, including whoever runs Planner, can read your assignments, grades, or notes. The key is worked out from your passphrase inside your browser and is never sent anywhere.
Before you set one. A new account starts without a passphrase. Planner asks you to set one after your first school sync or a few days after you sign up, and you can set it any time from the dashboard or Settings → Encryption. Until you do, your planner is stored without this extra layer, as readable text on the server.
What this does not cover. Planner serves you its own code, so encryption protects your data against anyone who gets at the stored copy of it. It is not a guarantee against a modified version of the app itself. Any app in this position has the same limit, and it is worth being told plainly rather than sold as something stronger.
There is no password reset. Nobody can recover your passphrase for you, because nobody else has it. The recovery code shown when you set it up is the only other way in, so keep it somewhere you will still have it next year. Lose both and the data is gone permanently.
Where the key is kept. After you unlock once on a device, the key is stored in that browser so you are not asked again on it. It is stored in a form the browser will use but will not hand back to any script, and it never leaves the device. Settings → Encryption → Forget this device removes it, and clearing your browser's site data does too.
Reminder notifications. The daily reminder digest is put together on a server, which needs to read your due dates to count them. While encryption is on it cannot, so those notifications do not arrive. Reminders inside the app, while you have it open, are unaffected.
Keeping part of it readable. Settings → Encryption has an option to leave your assignments and classes unencrypted. It exists for other tools you might connect that read your account directly and have no way to ask you for a passphrase. It is off unless you switch it on, and grades, notes, reminders and study plans stay encrypted either way.
AI assistants. If you turn on Settings → AI assistants, the stats summary described under Connecting an AI assistant is saved readable so the assistant can read it. Everything else stays encrypted.
You can turn encryption off in Settings → Encryption. That stores everything readable again and stops your recovery code working.
What is not collected
The planner and the extension use no analytics, no tracking pixels, no advertising identifiers, no browsing history, no location. Your data is never sold or rented, never shared with advertisers or data brokers, and never used for credit, lending, or any purpose other than running the planner for you.
Where it is stored
Your data is stored in Google Firebase (Authentication and Cloud Firestore) under an account only you can sign in to, and, as described above, it is encrypted before it gets there. These providers process data solely to run the service:
- Google Firebase — accounts and data storage.
- Tencent EdgeOne — hosting for the Planner web app.
- Cloudflare Workers — sends reminder notifications when encryption is off, fetches any calendar feed you choose to connect, and passes Canvas requests along if you connect Canvas with an access token, and passes your stats summary to an AI assistant if you connect one.
Two features involve anyone else only if you turn them on. Reminders: your browser's push service (Google, Mozilla, or Apple, depending on your browser) delivers them, and the notification names the assignments that are due. Calendar feeds: if you connect an .ics calendar, its address is fetched through our Cloudflare Worker so your browser can read it. This includes a school platform's calendar link (from Brightspace, Moodle, Blackboard, Schoology, ManageBac, Toddle or Veracross) that you add under School sync to bring in assignments. The link is saved in your Planner account like your other calendar links.
Connecting an AI assistant
If you use an AI assistant that can connect to other tools, such as Claude (made by Anthropic) or ChatGPT (made by OpenAI), you can let it read your Streak & Stats. It is off unless you turn it on in Settings → AI assistants and then add the Severn Planner connector in your own account with that assistant. While it is on, Planner works out a summary on your device and saves it to your account, readable even if your planner is encrypted, so the connector can read it. The summary has your streak, study time by week, class and day of the week, your GPA and each class's grade over time, how long kinds of work took compared with their estimates, study time before past tests and how you rated it, how many planned study sessions you ticked off, and your goals and their progress. It names your classes and goals but no assignments, and it has no notes, files or descriptions.
When the assistant asks for it, our Cloudflare Worker checks that you allowed it and passes the summary to that assistant. The worker stores nothing, does not log the summary, and cannot change anything in your planner. Once the assistant has read it, what happens to it is covered by that company's own terms and privacy policy, not this one. Each assistant sets its own minimum age; Claude, for example, is for people 18 and older.
Turning it off in Settings → AI assistants deletes the summary from your account and disconnects every assistant at once. You can also remove the connector in the assistant.
The website
The website at www.severnplanner.com, which describes the planner and links to it, uses Google Analytics to count visits. When you open it, Google Analytics records the pages you view, your approximate location (country or city), your device and browser type, the site or link that sent you there, and whether you click through to the planner. It sets Google Analytics cookies to tell repeat visits apart. Google processes this under its own privacy policy. None of it is linked to your Planner account, and nothing from your planner is ever sent to Google Analytics. You can block it with a content blocker without affecting the planner.
Cookies
The app sets one cookie, pln_signed_in, while you're signed in. It holds only the number 1, so the website can show an Open Planner button instead of Get Started, and it's removed when you sign out. There are no advertising, analytics, or tracking cookies in the app. It stores a cached copy of your planner and your preferences in your browser's local storage, attached files in IndexedDB, and a sign-in token kept by Firebase Authentication. Signing in with Google involves Google's own cookies on Google's domain, under Google's privacy policy. The website sets the Google Analytics cookies described above; the planner itself does not.
Your control
You can edit or delete anything in the planner at any time. Settings → Account → Delete account permanently removes your account and everything in it. Export JSON gives you a copy of your data first. Removing the extension deletes everything it stored on your device; that does not delete your Planner account, which you can delete separately.
Students under 13
This app is used by school students, some of whom may be under 13. It collects only the school work a student enters or imports, and never uses it for advertising or profiling. If you are a parent or guardian and want your child's account and data deleted, email the address below and it will be removed.
Changes
If this policy changes, the date at the top changes with it.
Contact
Questions about this policy, or requests to delete an account: jeremy@severnplanner.com.