What Google data does Extra Credit access?

Extra Credit uses Google Sign-In (OAuth 2.0) for authentication. When you sign in with your Google account, we request access to the following data:

Data	Google Scope	Purpose
Full name	`profile`	Display your name in the app
Email address	`email`	Identify your account, send service notifications
Profile photo URL	`profile`	Display your avatar in the app

These are the minimum scopes required for authentication. We do not request access to Google Drive, Google Classroom, Google Contacts, Gmail, or any other Google service.

How is this data used?

Authentication: Your Google ID (a unique numeric identifier) is used to sign you in and maintain your session.
Profile display: Your name and profile photo are shown in the app interface so you can confirm you're signed in to the correct account.
Account communication: Your email address may be used to send important service notifications (e.g., billing receipts, account deletion confirmation). We do not send marketing emails.

How is this data stored?

Your name, email, and profile photo URL are stored in our database (SpacetimeDB, hosted on enterprise infrastructure).
Data is encrypted in transit (TLS) and at rest.
Your Google OAuth token is not stored server-side. Authentication tokens are stored only in your browser's local storage and are used solely to establish a session with our real-time database.
We do not store your Google password at any point.

Who has access to this data?

Brace Yourself Solutions LLC — the company operating Extra Credit. Only the application operator (Ethan Brace) has administrative access.
SpacetimeDB (Clockwork Labs) — our database provider, which stores user records.
Anthropic — our AI provider. Your Google profile data is never sent to Anthropic. Only rubric criteria and student submissions (with names stripped) are sent for AI processing.

We do not share, sell, or transfer your Google user data to any other third parties.

Is this data used for AI training?

No. Your Google profile data is never used for AI model training. Anthropic's Claude API has a zero-retention policy for API inputs. Student submissions are processed through the API and are not retained by Anthropic after processing.

Data retention and deletion

Your Google profile data is retained as long as your account is active.
You can request account deletion at any time from Settings > Account in the app.
Upon deletion request, all your data (including Google profile data, uploaded documents, and grades) is permanently deleted within 30 days.
You can cancel a deletion request during the 30-day grace period.

How to revoke access

You can revoke Extra Credit's access to your Google account at any time:

Go to Google Account > Security > Third-party apps with account access
Find "Extra Credit" in the list
Click "Remove Access"

This immediately revokes our access. You will be signed out of Extra Credit. Your data remains in our system until you request account deletion.

Compliance with Google API Services User Data Policy

Extra Credit's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Contact

For questions about how we use your Google data, contact us at ethan@braceyourself.solutions.

Google User Data Disclosure