Privacy Policy

Last updated June 7, 2026 · Effective June 7, 2026

Quast Ventures LLC ("CourseQ," "we," "us," or "our"), provides the CourseQ mobile application and website at course-q.com (collectively, the "Service"). This Privacy Policy explains what information we collect, how we use it, who we share it with, and your choices.

By using the Service, you agree to this Privacy Policy. If you do not agree, do not use the Service.

1. Information We Collect

1.1 Account and Authentication

• Apple Sign-In or Google OAuth identifiers (subject IDs and related tokens provided by those providers)
• Internal account identifiers (including hashed account keys)
• Permanent username and display name
• Email address when provided by your sign-in provider or you

1.2 Profile Information

• University or school affiliation
• Major, bio, graduation year
• Profile avatar (which may be stored as image data, including base64-encoded formats)
• Badges, profile frames, and referral tier status

1.3 Study and Academic Data

• Courses, assignments, due dates, and calendar events
• Study plans, study timer logs, and flashcard decks
• Syllabus text and images you upload for AI parsing
• Optional device-local data and optional encrypted Pro backups stored on your device or personal cloud accounts

Much study data is stored locally on your device by default. When you use Study Groups or cloud sync features, relevant data is stored on our servers to keep members in sync.

1.4 Social, Marketplace, and Campus Features

• Friendships, follows, and campus connections
• Study Group membership, posts, shared resources, and exam sprint participation
• Marketplace listings, messages with buyers/sellers, and campus-scoped feed activity
• Direct messages (friend threads and marketplace conversations)
• Club and organization membership, events, RSVPs, and check-ins
• Campus Hub activity visible to users at your school

1.5 Referrals

• Referrer username and referral attributions
• Hashed or pseudonymous identifiers used to track referral rewards (badges, syllabus bonuses, profile frames)

1.6 Push Notifications and Device Information

• Push notification tokens
• Device type, operating system version, app version
• Crash logs and diagnostic data needed to maintain app stability

1.7 Subscriptions and Purchases

• CourseQ Pro subscription status and entitlements
• Store receipt data and transaction identifiers processed through Apple App Store, Google Play, and RevenueCat

We do not receive or store your full payment card numbers. Billing is handled by Apple or Google.

1.8 Analytics and Usage

• Feature usage, API usage counters, and aggregated product analytics
• Logs related to security, abuse prevention, and service operation

2. How We Use Information

We use information to:

• Provide, maintain, and improve the Service (study tools, social features, marketplace, clubs, notifications)
• Authenticate you and manage your account, including mandatory username registration
• Process syllabus uploads through AI tools and generate study plans, flashcards, and calendar entries
• Enable campus-scoped visibility so users at your school can see relevant profiles, listings, and hub content
• Administer referrals, badges, and CourseQ Pro entitlements
• Send push notifications you enable
• Moderate content, investigate reports, and enforce our Terms and Community Guidelines
• Comply with legal obligations and protect the rights, safety, and security of users and the Service
• Analyze aggregated, de-identified trends to improve the product

3. Third-Party Service Providers

We use trusted processors to operate the Service. They access data only as needed to perform services for us:

• Supabase — database, authentication infrastructure, and server-side storage for social and collaboration features
• OpenAI — syllabus AI parsing; syllabus text and images you submit may be transmitted for processing
• RevenueCat — subscription entitlement management for CourseQ Pro
• Expo / EAS — push notification delivery and over-the-air app updates
• Apple Sign-In — authentication when you choose Sign in with Apple
• Google OAuth — authentication when you choose Sign in with Google

Each provider's use of data is governed by its own privacy policy. We require processors to protect data consistent with this policy and applicable law.

4. How We Share Information

We do not sell your personal information.

We may share information:

• With service providers listed above, under contractual safeguards
• With other users at your campus when you use campus-scoped features (profiles, Marketplace feed, Campus Hub, club listings)
• With Study Group members for content you share in a group
• With message recipients when you send DMs or marketplace inquiries
• When required by law, legal process, or to protect rights, safety, and security
• In connection with a merger, acquisition, or asset sale, with notice where required
• With your consent or at your direction

We do not share personal information for cross-context behavioral advertising.

5. Campus-Scoped Visibility

CourseQ is organized by school. When you join a campus, certain profile fields, marketplace listings, hub posts, and social activity may be visible to other authenticated users at the same school. You choose much of what you share, but some features require campus affiliation to function. Review your profile and posts before sharing.

6. Children's Privacy (COPPA)

The Service is not directed to children under 13 years of age, and we do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, contact us at support@course-q.com and we will delete it promptly.

7. FERPA and Academic Records

CourseQ is not an official school record system and is not sponsored by your university unless we explicitly state otherwise. You choose what academic information to upload. CourseQ does not replace registrar, financial aid, or official transcript systems. Instructors and schools do not automatically receive your CourseQ data.

8. California Privacy Rights (CCPA / CPRA)

If you are a California resident, you may have the following rights regarding personal information we collect:

• Categories collected — identifiers; demographic/profile data; commercial information (marketplace activity); internet/electronic activity; geolocation (campus affiliation, not precise GPS by default); audio/visual (avatars); education-related information you provide; inferences from usage
• Right to know — what we collect, use, and disclose
• Right to delete — request deletion, subject to exceptions; you may also delete your account in the app
• Right to correct — inaccurate personal information
• Right to opt out of sale/share — we do not sell personal information or share it for cross-context behavioral advertising
• Non-discrimination — we will not discriminate against you for exercising privacy rights

Submit requests to support@course-q.com. We may verify your identity before responding. You may designate an authorized agent where permitted by law.

9. Data Retention and Deletion

When you delete your account in the app, we initiate deletion of your profile, social data, and server-stored content associated with your account, subject to legal retention requirements and backup cycles.

• Server backups and security logs may be retained for up to [5 days] before automatic purging
• Anonymized or aggregated data that cannot reasonably identify you may be retained for analytics and product improvement
• Local data on your device remains until you uninstall the app or clear app data

To request deletion or export, use in-app account deletion or email support@course-q.com.

10. Security

We use reasonable administrative, technical, and organizational safeguards, including encryption in transit and at rest where supported by our providers. No method of transmission or storage is 100% secure. You are responsible for securing your device and sign-in credentials.

11. International Users

CourseQ is US-focused. If you access the Service from outside the United States, you understand that your information may be processed and stored in the United States, where privacy laws may differ from those in your country.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the updated version on this page and update the "Last updated" date. Material changes may be communicated through the app or by email where appropriate. Continued use after changes constitutes acceptance.

13. Contact Us

Quast Ventures LLC
246 Mote Street, Hot Springs, AR 71901
All requests: support@course-q.com