Prepello Privacy Policy

Effective date: 13 July 2026

Prepello is a browser extension that scans your own university course site (Canvas), shows you a dashboard of your course, and lets you chat with an AI tutor that has read your chosen week's materials. This policy explains what Prepello does with your data, and just as importantly, what it never does.

What Prepello stores on your computer

The scan of your course (pages, files, structure) lives in your browser's local storage on your own machine. It never leaves your computer except as described below. Uninstalling the extension removes it.

What happens when you chat with the tutor

When you launch a chat, Prepello uploads the selected week's materials to Anthropic's API and sends your messages there, so the tutor can answer grounded in your actual course. This happens through Prepello's relay server (hosted on Supabase, our infrastructure provider), which:

• checks that the request comes from your signed-in account,
• forwards it to Anthropic under your own personal workspace and key (one per user, never shared, never pooled),
• streams the answer back to you, and
• stores none of it. The relay keeps no copy of your materials, your questions, or the tutor's answers.

The week's files you upload do remain stored in your own private Anthropic workspace between chats (so relaunching a week is fast), until you delete them with the Purge button.

Anthropic processes your chat under its own privacy terms (anthropic.com/legal/privacy). Anthropic does not train its models on this API traffic by default.

What our server stores

Two kinds of thing, both tied only to your account:

1. Your account record: the email address you sign in with, your plan, and which private AI workspace is yours.
2. Usage numbers: per-call metadata: a timestamp, which endpoint was called, the model used, the response status, and token counts (how much was processed, never what).

Our authentication provider also keeps the standard sign-in security records every login system needs (things like hashed session tokens and sign-in timestamps). What we never store: course content, chats, or files. There is no database of any of those on our side, by design.

Deleting your data

The Purge button in Settings deletes every file your account has uploaded to Anthropic and clears the local upload record. Uninstalling the extension removes all course data the extension itself stores. If you used Folder sync or exported a bundle, those copies live in folders you chose. They're yours, and they stay until you delete them. To delete your account itself, contact us at the address below.

Permissions Prepello asks for, and why

• Access to your university's Canvas site (lms.griffith.edu.au, including the file-storage service Canvas hands downloads to), used to read your course pages and files during a scan you start. Prepello only reads; it never posts, submits, or changes anything on Canvas.
• Access to Prepello's own server, for sign-in and the tutoring relay described above.
• Storage / unlimited storage, because course scans include lecture files and need more room than the default browser quota.

Prepello runs no code on other websites, reads no browsing history, and has no access to any site other than the two above.

What Prepello never does

• Never sells your data, and never shares it beyond the two providers that make the product work: Supabase hosts our sign-in and relay, and Anthropic processes your chats, both as described above. No one else receives anything.
• Never pools or shares your course materials with other users.
• Never stores your course content on our servers.
• Never accesses your Canvas account without you starting a scan.
• No analytics trackers, no advertising.

Changes and contact

If this policy changes, the extension's listing will link to the updated version with a new effective date.

Questions, or account-deletion requests: hello@prepello.app