Privacy Policy & Data Usage
Transparency about what we access and why.
Last updated: March 30, 2026
Overview
Notii ("we", "our", "us") is a task management application designed for students. We take your privacy seriously. This document explains what data we access, why we need it, and how we protect it. We only request the minimum permissions necessary to provide our features. We never sell, share, or monetize your personal data.
Google Permissions Explained
When you connect your Google account, we request specific permissions (called "scopes"). Here is exactly what each one does and why we need it:
View your email address
userinfo.email
Why: To identify your account and link your Google profile to your Notii account. We use your email to match you with your classmates on shared boards.
Access: Your email address only. We cannot send emails on your behalf with this scope.
View your basic profile info
userinfo.profile
Why: To display your name and profile picture within the app (e.g., on shared boards and discussions).
Access: Your name and profile photo only.
View your Google Classroom courses
classroom.courses.readonly
Why: To list your enrolled courses so you can link them to your Notii boards for automatic assignment syncing.
Access: Read-only. We cannot create, modify, or delete any courses.
View your assignments
classroom.coursework.me.readonly
Why: To import your assignments (titles, due dates, descriptions) from Google Classroom into your Notii boards automatically.
Access: Read-only. We can only see assignments visible to you. We cannot submit or modify assignments.
View your submission status
classroom.student-submissions.me.readonly
Why: To detect when you've turned in an assignment and automatically mark it as complete in Notii, keeping your task list accurate.
Access: Read-only. We can only see your own submission status — not other students'.
View class announcements
classroom.announcements.readonly
Why: To extract tasks and deadlines mentioned in teacher announcements (e.g., 'Quiz on Friday') and add them to your board automatically using AI.
Access: Read-only. We process announcements for task-relevant content only.
View class rosters
classroom.rosters.readonly
Why: To verify which board members are enrolled in which courses, ensuring that tasks are only visible to the correct students on shared boards.
Access: Read-only. We check enrollment status only — we do not store roster data.
Receive Classroom update notifications
classroom.push-notifications
Why: To receive real-time notifications when assignments are created or updated in Google Classroom, so your Notii board stays in sync without manual refreshing.
Access: Notification receipt only. We cannot send notifications to your Classroom.
View your email messages
Newgmail.readonly
Why: To automatically detect exam date sheet emails from your university and extract exam schedules from their Excel attachments. This powers the Exam Schedule Sync feature.
Access: Read-only. We only search for emails with subjects containing 'date sheet' and download .xlsx/.xls attachments. We do not read, store, or process any other emails. We cannot send, delete, or modify your emails.
Data We Store
Account Information
Your email, username, and hashed password. If you connect Google, we store your Google authentication tokens (encrypted) to maintain the connection.
Task Data
Tasks you create or that are synced from Google Classroom — titles, due dates, descriptions, completion status.
Board Data
Board names, membership, linked courses, and discussion messages.
Exam Schedule Data
When exam date sheets are synced, we store the exam course code, date, time, and the Gmail message ID that was processed (to prevent duplicate syncing). We do not store email content.
Notification Preferences
Your reminder settings, push notification subscriptions, and notification history.
Data We Do NOT Access
Email content
We never read the body of your emails. We only search subjects and download specific attachments.
Contacts
We do not access your Google Contacts.
Drive files
We do not access your Google Drive.
Calendar
We do not access your Google Calendar.
Other students' data
We only access data visible to your own account.
Browsing history
We do not track your browsing activity.
Data Sharing
We do not sell, rent, or share your personal data with any third parties. Your data is shared only in these limited cases: • With other members of your shared boards (task titles, completion status, discussion messages) — you control who is on your board. • With Google's servers when making API calls on your behalf (e.g., fetching assignments). • With our AI provider (Google Gemini) when processing announcements for task extraction — only the announcement text is sent, not your personal information.
Security
• All data is transmitted over HTTPS (TLS encryption in transit). • Google OAuth tokens are stored securely and refreshed automatically. • Passwords are hashed using bcrypt — we never store plaintext passwords. • Sessions use HTTP-only secure cookies with automatic expiration. • API endpoints are rate-limited to prevent abuse.
Your Rights & Data Deletion
You can disconnect your Google account at any time from Settings. This immediately revokes our access to your Google data. You can delete your account at any time. This permanently removes all your data including tasks, boards, and notification history. To request complete data deletion or export, email us at notiificationapp@gmail.com.
Contact Us
If you have questions about this privacy policy or your data, contact us at: notiificationapp@gmail.com
Notii is a student project. Questions? Reach out at notiificationapp@gmail.com
© 2026 Notii. All rights reserved.