PROC APP — PRIVACY POLICY

Last Updated: June 12, 2026

This Privacy Policy describes how Proc ("we," "us," "our") collects, uses, and discloses information when you use the Proc mobile application (the "App").

1. INFORMATION WE COLLECT

On-Device Data. Most of the data you create lives on your Device: the assignments you add, the briefs you upload, the work you submit and its uploaded files, your daily progress scores and threshold, your selected blocked apps, and your free-hour and earned-time balances. This data is stored in the App's sandbox and is not uploaded to our servers in full.

Account Data. To use the App you sign in with Apple, Google, or an email one-time code. Sign-in is handled by our backend provider, Supabase, Inc., which stores your account identifier and email address so we can authenticate you across sessions and devices.

School Feature Data. If you verify a .edu email to use the School tab, our servers store your school affiliation, an anonymous handle, the courses and assignments you sync from Canvas, and your per-assignment progress percentage and target — so classmates can compare progress anonymously. Other students see only your handle, never your name or email. If you report or block another user, we store that moderation action.

.edu Verification. When you verify a .edu email, we send a one-time code to that address through our email provider, Resend, Inc., and briefly store a hashed (never plaintext) copy of the code to check your entry.

Subscription and Referrals. We record your subscription state, which we verify against Apple's App Store servers, and — if you use the referral program — your referral codes and reward status. We do not receive your Apple ID or payment details.

Support Messages. If you contact us through the in-app form, we send your message and your account email to our team (via Resend) so we can reply, and store a hashed record of the submission to prevent spam.

Data Sent to the Third-Party AI Provider. When you submit work for grading, the App sends the relevant assignment brief and submission text (and, for PDF or photo uploads, the file itself) to Google LLC (the "Third-Party AI Provider") via the Gemini API so that Gemini can grade your work. The Third-Party AI Provider's handling of this data is governed by its own Terms of Service and Privacy Policy. We do not control how the Third-Party AI Provider stores, retains, or processes the content you send it.

Canvas (Optional). If you connect a Canvas account, your personal access token is stored only in your Device's Keychain. When you connect, the token is sent once to our server solely to verify it against Canvas; we do not store the token on our servers. We do store your school's Canvas URL and your Canvas display name so the App can show your connection status, and the App uses the token (from your Keychain) to fetch your assignments. Your Canvas token grants broad access to your Canvas account — keep it confidential, and if it is ever exposed, revoke it in Canvas → Account → Settings and reconnect.

Diagnostic and Device Information. If you contact us through the in-app support form, your email will include diagnostic information (app version, build number, your device's anonymous identifier-for-vendor, iOS version, and device model) so we can help troubleshoot. You can edit or remove this information before sending.

Apple's Screen Time / Family Controls. The App uses Apple's Family Controls framework to shield apps you select. Apple does not give the App access to which specific apps or categories you have selected — those tokens are opaque to us. We only know the count of tokens you have chosen.

Subscription Status. The App reads your subscription entitlement from Apple's StoreKit on your Device. The App does not receive your Apple ID, payment information, or any personal information from Apple.

2. WHAT WE DO NOT COLLECT

We do not collect your name, address, phone number, precise location, contacts, calendar, microphone, health data, biometric data, or advertising identifier, and we do not track you across other companies' apps or websites. We do not use third-party analytics SDKs, advertising SDKs, or tracking pixels. Your email address is collected only to create and authenticate your account, to send .edu verification codes, and to reply to support requests, as described in Section 1.

3. HOW WE USE INFORMATION

On-Device Data. To provide the Service to you: showing your assignments, scoring your work, tracking your daily progress, computing your screen-time budget, and shielding the apps you have chosen.

Data Sent to the Third-Party AI Provider. Solely to obtain grades, rubric ratings, and feedback. The transmitted content is exactly what is needed for that single API call.

Diagnostic Information from Support Emails. Solely to help us troubleshoot the issue you reported.

We do not use any data to advertise to you, train any model owned by the Company, build any profile of you, or share with any data broker.

4. SHARING

Google LLC (Third-Party AI Provider). Your assignment briefs and submissions are sent to Google's Gemini API for grading, as described above. Supabase, Inc. (Backend Provider). Hosts our authentication, database, and server functions, and therefore processes and stores your account, School-feature, .edu-verification, subscription, referral, and support data on our behalf. Resend, Inc. (Email Provider). Delivers .edu verification codes and forwards your support messages to our team. Apple. As inherent in distributing the App and processing In-App Purchases through the App Store. Canvas / Instructure, Inc. Only if you choose to connect Canvas; the App communicates directly with your school's Canvas instance using your token. Law Enforcement. We will respond to lawful requests where legally required.

We do not sell your data, and we do not share it with advertisers or data brokers.

We do not sell or rent your data to anyone.

5. STORAGE AND SECURITY

On-device data is stored in the App's sandboxed data container and the iOS shared app group used by the widget. Uploaded files live in your Device's Documents directory. iOS protects these locations with the operating system's built-in encryption when your Device has a passcode set.

Server-side data (your account and the records described in Section 1) is stored by Supabase in the United States, encrypted in transit and at rest, and protected by per-user access controls so that other users cannot read your data.

No system is perfectly secure. While we take reasonable measures, we cannot guarantee absolute security of any data transmitted over the internet (for example, to the Third-Party AI Provider's API).

6. RETENTION AND DELETION

On-device data persists until you delete an assignment, clear the App's data, or uninstall the App. Uninstalling the App removes all of its local data, including uploaded files. Server-side data persists until you delete your account (Settings → Account → Delete Account), which removes your account and the associated records described in Section 1, including your School-feature contributions (your progress, your course memberships, and any shared course or assignment entries for which you were the last remaining participant). Leaving the School feature or disconnecting your school email removes those same School-feature contributions while keeping your account.

7. CHILDREN

The App is not intended for children under 13, and you must confirm you are at least 13 years old (via the age check shown when you first set up the App) before you can create an account. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has used the App, contact us at support@theprocapp.com with the account email; we will delete the associated data and terminate access within thirty (30) days. If you are between 13 and 18, you may use the App only with the involvement and consent of a parent or legal guardian.

8. INTERNATIONAL USE

The App is operated from the United States. If you use the App from outside the United States, you understand that any data sent to the Third-Party AI Provider may be processed in the United States or another country where the Third-Party AI Provider operates.

9. YOUR RIGHTS

Depending on where you live, you may have rights to access, correct, delete, or restrict the use of personal information. Because the App stores almost all data on your Device, you can exercise most of these rights directly: edit or delete assignments from within the App, clear local data via your Device's Settings → General → iPhone Storage → Proc, or uninstall the App.

For any other request, contact us at support@theprocapp.com.

10. CHANGES TO THIS POLICY

We may update this Privacy Policy from time to time. The "Last Updated" date at the top reflects the most recent revision. We will provide in-app notice for material changes where feasible.

11. CONTACT

Questions or concerns about this Privacy Policy can be sent to support@theprocapp.com.