Privacy notice

What the app reads from your school accounts

• From Canvas: your courses, assignments and due dates, course files (and pictures of their pages), announcements, modules, pages, the syllabus, discussion prompts and calendar events.
• From Canvas, about you: your grades and scores, rubrics, your teachers' comments on your work, and your Canvas name and profile picture.
• From your school portal: your class list and timetable, the school calendar, and your own scores in the portal's gradebook (including which assignments it marks as not turned in).
• Only where that feature is switched on: the names in your class lists and the school directory.

What the app keeps

• What it reads (above), so your classes, homework and files are there when you open the app.
• Recordings of the classes you choose to record, their transcripts, and the notes made from them.
• Your questions and the answers, your settings, and your choices (like a course you told it to ignore).
• Your school portal sign-in session (a browser cookie, not your password), inside your own school browser on the server, so the app can refresh your timetable and school information in the background. The app also saves your portal's calendar links, encrypted.
• A Canvas access key. When you connect Canvas, the app makes one in your Canvas account, named "Summa Hall" (you can see it in Canvas under Account → Settings), stores it encrypted, and makes a new one before it runs out.
• If automatic refresh is on for your account, Summa Hall refreshes your Canvas data when you open it with older data, and once each morning when eligible. Disconnecting Canvas stops future refreshes. The access key's permissions are unchanged: read-only, with no additional permissions requested.
• Disconnecting or deleting revokes the Canvas token you gave us.

Where it's kept, and for how long

On a server run by the person who operates Summa Hall.

Until you delete your account. Some raw recording pieces may be removed sooner.

What the AI sees

To make notes and answer your questions, Summa Hall sends a third-party AI model provider what the task needs: your course materials (their text and page pictures), your question and any photo you add, and the class captions or transcript when you record.

For a question about a course it can also send your homework list, your grade and your teachers' feedback in that course.

How the app learns from your use

The app notes which screens you open, how long you use them, which buttons you tap, how far you scroll, and when something doesn't respond or breaks. It never records what you type, what a page says, or anything from your school accounts in this log.

It uses this to make the app more useful to you: what you use comes first, reminders come at a better time, and screens that don't work well get fixed for everyone. Anything it changes for you says "Adjusted for you" and has Undo.

The detailed log is kept 30 days. Weekly totals for your account (days and minutes per screen) are kept 12 months; totals with no names are kept longer. None of it is sold or used for ads, and no outside analytics company sees it. Separately, our network provider, Cloudflare, counts page visits without cookies (the page, the browser type and the country) so we can see total traffic; it doesn't identify you or follow you to other sites.

To turn it off: Settings → Your data → Learn from how I use the app.

Your school sign-in

Enter your school username and password once on your school’s own page. The app keeps this login encrypted separately for each student and uses it only for automatic sign-in to connected school sites, using the username or school email each site needs. Your password is never logged and never sent to AI. You complete any CAPTCHA or two-step verification yourself.

The school sites’ session cookies and your school username are also saved encrypted. When a session expires, the app can use your saved password to sign in again. A failed attempt stops automation and leaves the page to you. School sign-in → Sign out of school sites clears the saved password and sessions; deleting your account clears them too.

When it connects and refreshes your school accounts on its own, the app only reads: it doesn't hand in work, send messages or change anything at school. The one thing it creates there is the Canvas access key above (and it deletes its own older keys). What it does when you tell it to is in the next section.

Errands it does for you

Only when you tell it to in so many words ("complete this homework and turn it in", "send my reply", "post this", "upload my worksheet"), the app fills in and submits homework, posts or sends for you, in its browser. Without such words it doesn't hand in, post or send anything.

What is sent, and where: for homework, the answers it found in your own class materials (each with its source), shown to you beside their questions first, go into that assignment's own form on the site you have open, once; for anything else, what you told it to send goes to the page you have open. Each time, a receipt goes into your notes: what was sent (the form's visible fields, never a password), where, when and, for homework, whether the site shows it as handed in.

Never: a quiz, test or exam (or a timed or proctored activity), even if you ask; your password or a code; deleting anything. It never pays on an errand: it stops at the checkout. A purchase you ask Done for you to make waits for your approval (a passkey), unless it fits the small-purchase limits under Settings → Buying on its own; those allow small purchases by default, and "Always ask me" makes every purchase wait for you.

Your class, together

If you record a class with the class record on (it is on unless you switch it off in Settings), what the teacher said (the lines at least two classmates' recordings heard) can go into a shared class note and class record for your section. Never your voice or audio, never what only your laptop heard, and never who recorded.

In class rooms you appear under a name for the day; your real name shows only on a day you choose to show it.

Class statistics never show who, and appear only when enough classmates are counted. Your score goes into a grade spread only if you add it.

Your choices

• Download your data: Settings → Your data → Download my data gives you one file with everything the app keeps about you, and a list of your stored files.
• Delete your account: Settings → Your data → Delete my account and data signs you out now, closes your school browser and deletes the Canvas access key the app made; removing your account, recordings, transcripts, notes, questions and files starts within 24 hours and usually finishes within 2 days. It can't be undone.
• What stays after you delete: shared class notes made from several recordings, class statistics that never show who, and usage counts with nothing linking them to you.
• Canvas and your school portal belong to your school. Deleting here changes nothing there.

Invites

If you joined with an invite link: to stop an invite bonus from being claimed twice, Summa Hall keeps a one-way code made from your school account (not your name or email) and the date. It stays even after you delete your account.

If you're under 18

You need to be 13 or older to use Summa Hall. Use it with a parent's or guardian's knowledge, and show them this page.

Summa Hall doesn't replace your school's own systems: Canvas, the portal and your teachers are always right about your homework, due dates and grades.

Copyright

Rights holders or their authorized representatives can send a takedown notice using the contact details below. Include your signature, the copyrighted work, the shared file’s link or file ID, your contact details, a good-faith statement that the use is unauthorized, and a statement under penalty of perjury that the notice is accurate and you may act for the rights holder.

We review valid notices, promptly remove the shared copy, and tell the sharer. After 2 valid notices, the student’s file sharing is turned off. Sharing a book you uploaded is your own action and responsibility.

If removal was a mistake, send a counter-notice to the same contact with your signature, the removed material and its former location, your name, address and phone number, a statement under penalty of perjury that removal was mistaken, and consent to the applicable US federal district court’s jurisdiction and service from the original claimant. We forward valid counter-notices to the claimant; the shared copy is normally restored through this process after 10–14 business days unless we receive notice of a court action.