Complete transparency on the scopes we access and how your data is protected.
Notii ("we", "our", "us") is a student-built task management utility designed to help students stay on top of their coursework. We take your privacy seriously. This document explains what data we access, why we need it, and how we protect it. We only request the minimum permissions necessary to provide our features. We never sell, share, or monetize your personal data.
When you connect your Google account, we request specific permissions (called "scopes"). Here is exactly what each one does and why we need it:
userinfo.emailWhy: To identify your account and link your Google profile to your Notii account. We use your email to match you with your classmates on shared boards.
Access Scope: Your email address only. We cannot send emails on your behalf with this scope.
userinfo.profileWhy: To display your name and profile picture within the app (e.g., on shared boards and discussions).
Access Scope: Your name and profile photo only.
classroom.courses.readonlyWhy: To list your enrolled courses so you can link them to your Notii boards for automatic assignment syncing.
Access Scope: Read-only. We cannot create, modify, or delete any courses.
classroom.coursework.me.readonlyWhy: To import your assignments (titles, due dates, descriptions) from Google Classroom into your Notii boards automatically.
Access Scope: Read-only. We can only see assignments visible to you. We cannot submit or modify assignments.
classroom.student-submissions.me.readonlyWhy: To detect when you've turned in an assignment and automatically mark it as complete in Notii, keeping your task list accurate.
Access Scope: Read-only. We can only see your own submission status — not other students'.
classroom.announcements.readonlyWhy: To extract tasks and deadlines mentioned in teacher announcements (e.g., 'Quiz on Friday') and add them to your board automatically using AI.
Access Scope: Read-only. We process announcements for task-relevant content only.
classroom.rosters.readonlyWhy: To verify which board members are enrolled in which courses, ensuring that tasks are only visible to the correct students on shared boards.
Access Scope: Read-only. We check enrollment status only — we do not store roster data.
classroom.push-notificationsWhy: To receive real-time notifications when assignments are created or updated in Google Classroom, so your Notii board stays in sync without manual refreshing.
Access Scope: Notification receipt only. We cannot send notifications to your Classroom.
gmail.readonlyWhy: To automatically detect exam date sheet emails from your university and extract exam schedules from their Excel attachments. This powers the Exam Schedule Sync feature.
Access Scope: Read-only. We only search for emails with subjects containing 'date sheet' and download .xlsx/.xls attachments. We do not read, store, or process any other emails. We cannot send, delete, or modify your emails.
We do not sell, rent, or share your personal data with any third parties. Your data is shared only in these limited cases: • With other members of your shared boards (task titles, completion status, discussion messages) — you control who is on your board. • With Google's servers when making API calls on your behalf (e.g., fetching assignments). • With our AI provider (Google Gemini) when processing announcements for task extraction — only the announcement text is sent, not your personal information.
• All data is transmitted over HTTPS (TLS encryption in transit). • Google OAuth tokens are stored securely and refreshed automatically. • Passwords are hashed using bcrypt — we never store plaintext passwords. • Sessions use HTTP-only secure cookies with automatic expiration. • API endpoints are rate-limited to prevent abuse.
You can disconnect your Google account at any time from Settings. This immediately revokes our access to your Google data. You can delete your account at any time. This permanently removes all your data including tasks, boards, and notification history. To request complete data deletion or export, email us at mwahaj25@gmail.com.