Loading your day
Loading tasks
Complete transparency on the Google scopes we access, data protection practices, and Limited Use compliance.
Last Updated: October 10, 2026
Notii ("we", "our", "us"), accessible at https://www.notii.online, is an academic task management and schedule tracking application designed to help university students organize coursework, manage deadlines, and sync schedules. We take student privacy and data security seriously. This Privacy Policy details how Notii collects, uses, processes, stores, and protects your information, particularly data accessed through Google OAuth and Google APIs. By accessing or using Notii, you acknowledge that you have read and understood this Privacy Policy. We request Google permissions only for features you choose to connect. Notii does not sell Google user data. Some Google-derived text is sent to external AI providers to extract academic tasks or schedule changes; see Sections 3 and 7 for the data and providers involved.
When you connect your Google account to Notii, we request specific OAuth permissions (scopes) to provide automated coursework management and academic schedule synchronization. Here is an exhaustive breakdown of each Google scope we request, why it is needed, and how the data is used:
https://www.googleapis.com/auth/userinfo.emailWhy: Used to uniquely identify your Notii account, verify your university student status, and match you with classmates on shared study group boards.
Access Scope: Read-only access to your primary Google account email address. We cannot send emails on your behalf.
https://www.googleapis.com/auth/userinfo.profileWhy: Used to display your display name and avatar within Notii shared boards, task assignees, and study group discussions.
Access Scope: Read-only access to your public Google name and profile photo.
https://www.googleapis.com/auth/classroom.courses.readonlyWhy: Used to list your active enrolled courses so you can select and link them to your Notii boards for automated assignment synchronization.
Access Scope: Read-only. We cannot create, edit, archive, or delete courses.
https://www.googleapis.com/auth/classroom.coursework.me.readonlyWhy: Used to automatically import coursework (assignment titles, descriptions, due dates, and submission requirements) from Google Classroom into your Notii task list.
Access Scope: Read-only access to coursework items published in your enrolled classes. We cannot create, modify, or delete coursework.
https://www.googleapis.com/auth/classroom.student-submissions.me.readonlyWhy: Used to detect when you turn in an assignment on Google Classroom, automatically marking the corresponding task as completed in Notii to keep your schedule accurate.
Access Scope: Read-only access to your own submission status. We cannot view other students' submissions, and we cannot submit, alter, or retract assignments.
https://www.googleapis.com/auth/classroom.announcements.readonlyWhy: Used to automatically extract upcoming quizzes, deadline changes, and task notices posted by instructors in Google Classroom announcements into your calendar.
Access Scope: Read-only. We only parse academic announcements for dates and tasks. We cannot post, modify, or delete announcements.
https://www.googleapis.com/auth/classroom.rosters.readonlyWhy: Used solely to verify which study group members share the same courses, ensuring assignment tasks are accurately assigned on shared boards.
Access Scope: Read-only enrollment verification. We do not store or export class roster lists.
https://www.googleapis.com/auth/gmail.readonlyWhy: Only requested when you choose the optional Gmail schedule-change integration through the Notii Labs Google consent screen. Notii searches recent messages matching schedule-change subject terms and parses returned message text for class cancellations, makeups, venue changes, and reschedules.
Access Scope: This is a read-only scope over Gmail. Notii does not send, modify, or delete email. The integration is optional and can be disconnected in Settings or revoked in your Google Account. Notii Labs is a separate Google OAuth application in Production whose Gmail scope is not yet verified. Google limits this unverified scope to 100 users over the project's lifetime; disconnecting does not restore a slot. Production grants do not have the seven-day refresh-token expiry applied to apps in Testing, but revoked or invalidated grants may require renewed consent.
The use of raw or derived user data received from Workspace APIs will adhere to the Google Workspace API User Data and Developer Policy and the Google API Services User Data Policy, including the Limited Use requirements. In accordance with Google's Limited Use requirements and Workspace User Data Policy, Notii strictly adheres to the following commitments: Google-derived data is used to provide the features you request: assignment synchronization, submission-status checks, academic announcement extraction, and (only if you opt in) schedule-change parsing from Gmail. Some announcement text and matching Gmail message text are sent to an external language-model API for extraction. Depending on configured API keys and provider availability, Notii may send that text to DeepSeek, Google Gemini API, or Groq; a failed provider can cause a fallback request to another configured provider. The text sent may include course names, announcement or email subject/body text, and dates. Notii does not intentionally send your Google OAuth tokens to these model providers. These providers process requests under their own service terms and data policies. Their retention, abuse-monitoring, and model-improvement practices can vary by provider, account tier, and configuration; Notii does not promise zero retention for these requests. Do not connect the optional Gmail feature if you do not want matching email text processed by these providers. We do not use Google-derived data to train Notii's own models. Notii offers Google connection through its main OAuth application and, for the optional Gmail integration, the separate Notii Labs OAuth application. Both are operated for Notii. The Google consent screen identifies the OAuth application requesting access. Notii Labs is an OAuth app/client name, not a separate company or independent service. The Notii Labs project is currently configured for Google's Testing audience: it can serve up to 100 listed test users, and Google refresh tokens for Gmail access expire after seven days while the project remains in Testing. This is a Google project limit, not a Notii account limit. Users may continue using Notii's main Classroom connection without enabling Gmail. • Limited purpose: Google user data is used to provide user-facing features you request. • No advertising: Google user data is not used for advertising or ad targeting. • Human access: Staff access Google-derived content only when you request support, when needed for security, or when required by law.
We collect only the data necessary to operate Notii's features:
To protect student privacy, Notii enforces strict boundaries on data access:
• Retention Period: We retain your user account data and synced tasks only for as long as your Notii account remains active. • Immediate Token Removal: When you disconnect Google Classroom in your Notii Settings, your Google OAuth access and refresh tokens are permanently purged from our database immediately. • Encryption in Transit: Data sent between your browser/app and Notii uses TLS/HTTPS. Passwords are stored as bcrypt hashes. OAuth tokens are stored as application-database values and are not encrypted by an application-level encryption layer; database-provider storage controls apply. • Account removal: Deleting your account removes its application records and stored Google tokens, subject to backup retention and legal requirements.
We do NOT sell, rent, monetize, or trade your personal or Google user data under any circumstances. Data is shared in the following cases: • With Study Group Members: On shared study boards, your task completion status is visible to the members you explicitly invite. • With Google: Notii sends API requests to Google using your stored OAuth credentials to provide connected Google features. • With AI providers: Announcement text and matching Gmail schedule-change message text may be sent to DeepSeek, Google Gemini API, or Groq, depending on configured keys, provider availability, and fallback behavior. The provider returns structured task or schedule information. Provider handling is governed by its own current terms and policies; requests may be retained for abuse monitoring or other purposes described in those terms. Notii does not control the provider's infrastructure. • Legal Compliance: If required by law, subpoena, or valid legal process.
You maintain complete ownership and control over your data: • Disconnect Google in Notii: You can disconnect Google at any time in Settings. This deletes the stored tokens from the active application database; it does not revoke tokens with Google automatically, so also revoke Notii access in your Google Account to invalidate them. • Revoke Permissions via Google Account: You can independently view and revoke Notii's access to your Google account at any time through Google's Security permissions dashboard at https://myaccount.google.com/permissions. • Complete Account Deletion: You can permanently delete your Notii account, tasks, boards, schedules, and profile at any time. A minimal hashed Google-account identifier is retained separately for the Notii Labs lifetime OAuth capacity counter, so disconnecting or deleting an account does not reset Google's consumed slots. This counter does not store the raw email address, OAuth tokens, or inbox content and does not retain access to your Google account. • Data Deletion Requests: To request immediate deletion of all data associated with your account or to request a data export, email our developer support team at help@notii.online. All deletion requests are fulfilled within 48 hours.
We may update this Privacy Policy from time to time. Any material changes will be reflected with an updated "Last Updated" date at the top of this page. If you have any questions, concerns, or requests regarding this Privacy Policy or Notii's data handling practices, please contact us: • Application Name: Notii • Website: https://www.notii.online • Support and Privacy Requests: help@notii.online • Security Reports: security@notii.online