Privacy Policy

Last updated: August 8, 2026

Introduction

Semora ("we", "our", "us") is committed to protecting your privacy. This policy explains how we collect, use, and safeguard your information when you use our applications and websites.

Information We Collect

We collect the following information:

  • Account information: Email address and password (encrypted) when you create an account.
  • Academic data: Semesters, courses, tasks, grades, and syllabus content that you enter or scan.
  • Learning-platform data (optional): If you choose to connect Canvas, Blackboard, Moodle, or Google Classroom, we retrieve the courses and assignments you select to import or sync. The imported information is stored as academic data in your Semora account.
  • Device information: Timezone, device type, and operating system version for app functionality.
  • Syllabus files: Documents you upload for AI-powered scanning. These are processed to extract deadlines and are not shared with third parties beyond the AI processing services named below.
  • Study notes: Lecture notes or slides you optionally upload to the AI Tutor. These are stored privately in your account and used only to answer your questions about that course.
  • Usage analytics: Anonymous, app-level events (e.g. a scan completed, a paywall viewed) tied to a random per-install identifier, never to your name or email, to help us understand which features are used and improve the app.
  • Push notification token: If you grant notification permission, a device push token so we can send occasional reminders about upcoming deadlines and new semesters.
  • Referral data: If you use an invite link, the referral code and the fact that two accounts are linked, so we can grant the free-month reward.

How We Use Your Information

  • To provide and maintain the app's core functionality (task management, grade tracking, calendar sync).
  • To process syllabus documents using AI to extract course information and deadlines.
  • To send you local notification reminders about upcoming deadlines, and, if you grant permission, occasional push reminders about deadlines and new semesters.
  • To sync tasks with your device calendar, and, if you connect it, with Google Calendar.
  • To import and sync the courses and assignments you choose from a connected learning platform.
  • To power study tools you choose to use (flashcards, focus timer, and an AI tutor grounded on your syllabus and any notes you upload).
  • To apply referral rewards when you invite friends.

Data Storage and Security

Your data is stored securely on Supabase (hosted on AWS). Authentication tokens are stored in your device's secure keychain (iOS Keychain / Android Keystore). We use row-level security to ensure you can only access your own data.

Third-Party Services

  • Supabase: Database and authentication provider.
  • OpenAI GPT-5.6 Luna: The only AI provider Semora sends your content to. It reads your syllabus documents, generates flashcards, practice questions and quizzes, and answers your questions in the AI Tutor. Your syllabus content and any study notes you choose to upload are sent to the OpenAI API for processing. OpenAI states that API data is not used to train its models unless a customer explicitly opts in. Semora disables response storage for these requests; OpenAI may still retain abuse-monitoring logs for up to 30 days unless a stricter retention control applies to the account.
  • Apple StoreKit: For processing in-app subscription purchases.
  • Expo push service: Delivers push notifications to your device if you enable them.
  • Google Calendar (optional): If you connect Google Calendar, we access your calendar solely to add and update your Semora deadlines; we do not read your other events.
  • Learning platforms (optional): Canvas, Blackboard, Moodle, and Google Classroom provide the course and assignment data you choose to sync. By default, their access tokens or authorization credentials stay on your device and are used only while you sync in Semora. If you explicitly turn on Automatic sync, we store that credential encrypted in Supabase Vault so Semora can check for selected course, assignment, submission, and grade updates while the app is closed. It is never exposed in your Semora account, and we delete it when you turn off Automatic sync or disconnect the platform.

Data Retention

Your data is retained as long as your account is active. You can delete your account and all associated data at any time through the app's settings (Me tab > Delete Account).

Your Rights

You have the right to:

  • Access your personal data through the app.
  • Delete your account and all data permanently.
  • Export your data by contacting us.

Children's Privacy

Semora is intended for college and university students. We do not knowingly collect information from children under 13.

Changes to This Policy

We may update this policy from time to time. We will notify you of any changes by posting the new policy in the app.

Contact Us

If you have questions about this privacy policy, please contact us at semora365@gmail.com.