beepy works by remembering things about your school year, so this page is specific rather than general: it lists what is actually stored, who else can see it, and how to make it go away.
The short version
- We keep your phone number, your texts with beepy, and what it learns from them — your classes, your deadlines, and how you did on practice questions.
- Three companies process it for us: Anthropic writes the questions and replies, Supabase stores the database, Vercel runs the site, and a messaging provider delivers the texts. Nobody buys it, because we do not sell it.
- Photos and slides you send are not stored — they are read once to make questions, and only the questions are kept.
- You can delete any of it from the memory page, or all of it by emailing brandon@graderaise.com.
1. Who we are
beepy is a study assistant you talk to by text message, operated from British Columbia, Canada. We are the organisation responsible for the personal information described here. This policy covers the beepy website and the texting assistant, and it sits alongside the Terms of Service.
2. What we collect
Your account
- your mobile number, and the name you gave us;
- your time zone and quiet hours — the window messages are allowed to arrive in — plus how many questions a quiz should have and whether test-day reminders are on;
- when you first texted us (which is the record of your consent to be texted) and when, if ever, you replied STOP;
- the privacy choice you made during sign-up — see “Your conversation” below.
There is no password to store. Sign-in is a code you text us, and sessions are held in a cookie set by our authentication provider.
Your conversation
- every message between you and beepy, in and out, with the time and the number it went to;
- a rolling summary of older messages. A model reads what has scrolled past and writes one paragraph so beepy still remembers the gist a month later. It is lossy on purpose.
During sign-up you choose what happens to these two things. Pick help make beepy better and our team may read your conversation to improve the product. Pick just between you and beepy and both are encrypted before they are stored, with a key that is kept outside the database — so nobody reading the database, its backups, or our own admin tools can see your words, and they are never used for analytics or product improvement. Honesty about the edges: beepy itself still reads your messages (that is how it answers you), the AI provider processes each turn either way, and your phone carrier and our messaging provider handle every text in transit — no setting here changes what SMS is. What beepy remembers as structured rows — classes, test dates, facts, reminders — stays readable in both modes, because reminders and quizzes are built from it; it is all visible and deletable on the memory page.
What beepy remembers
- your classes, including any nicknames you use for them and ones you have dropped;
- tests, quizzes, assignments and projects, with dates and titles;
- facts you tell it that are worth keeping — that practice runs until eight, that equilibrium is your weak unit;
- reminders and nudges waiting to be sent, including the exact text of the message.
All of this is on the memory page, with a delete button per row. It is the same list beepy reads before it answers you.
Your practice
- the question sets that get generated, the subject, and which model wrote them;
- every answer: which option you picked, whether it was right, the topic, the difficulty and when you answered.
Answers are scored on our server against the stored question set rather than against what the browser reports, which is why the set is kept.
Connected apps, if you connect them
- Canvas: your school’s Canvas address, an access token you created, stored encrypted, the last few characters of it so you can tell which one it is, the name on the Canvas account, and when it last synced. Your courses become classes and your due dates become events. Files and pages are read only in the moment you ask for a quiz on one.
- Google Calendar: the tokens Google issues, stored encrypted, your Google account id and email address, and which permissions you granted. beepy mirrors when you are busy — the title, start, end, and whether it is busy or tentative — so it can plan around you, and it writes its own events into your calendar tagged as its own.
Technical information
Our hosting and database providers log requests as any web service does, including IP address, rough time, and what was requested. Our messaging provider records delivery information for each message — an id, a status, which line it went over. We use both to keep the service working and to investigate problems.
We do not use advertising or analytics trackers, and there are no third-party cookies. The only cookies set are the ones that keep you signed in.
3. What we don’t keep
Two things are worth naming as absences, because an ordinary reader has no way to tell them apart from an omission:
- the images you send. A slide, a screenshot or a photo of the board is passed to the model that reads it and is not saved to our database. What survives is the questions it produced.
- Canvas coursework. When beepy reads a PDF your teacher posted, it summarises it for that one answer and throws the summary away. We do not keep a copy of your school’s material.
We also do not collect your location, your contacts, your other messages, or anything from your phone besides the messages you send us.
4. Why we use it
- To run the service you asked for: answering your texts, remembering your classes, generating quizzes, scoring answers, and sending reminders at the times you agreed to.
- To keep it working and safe: fixing failures, preventing abuse, and stopping one account from reaching another’s data.
- To answer you when you email us, and to meet legal obligations if we ever have to.
Our basis for all of it is your consent, given when you text us and when you connect an app, together with what is necessary to provide a service you have asked for. We do not use your information for advertising, we do not sell it or trade it, and we do not train AI models on it.
6. Where it’s processed
The providers above operate in the United States and elsewhere, so your information is stored and processed outside Canada. That means it can be accessible to courts, law enforcement and national security authorities in those countries under their laws. We use providers who commit to protecting it contractually, but this is a real difference and you should know about it before you sign up.
7. How long we keep it
- Your account, memory and practice history: for as long as the account exists, because the whole point is that beepy remembers across a school year.
- Messages: kept so the conversation has a history. Older ones are folded into the rolling summary but are not automatically deleted.
- Connected-app credentials: until you disconnect, or until the credential stops working.
- Technical logs: kept for a short period by our hosting and messaging providers under their own retention settings.
- If you reply STOP: we keep the record that you opted out, because that record is what stops us texting you again.
8. Deleting it
You do not have to ask us for most of this:
- The memory page deletes classes, facts and dates one row at a time.
- The Canvas and Google pages disconnect, which deletes the stored credential immediately. Classes and dates that already synced stay, and you can delete those yourself.
- STOP, sent to any beepy message, ends the texts.
- Email brandon@graderaise.com from — or naming — your number and we will delete the account. Everything attached to it goes with it: messages, memory, quizzes, connections. We will do it within 30 days and tell you when it is done.
Backups take a little longer to age out than live data, and we may keep the minimum needed to show we complied with a request or to meet a legal obligation.
9. Your rights
Under Canadian privacy law — PIPEDA, and the Personal Information Protection Act in British Columbia, Canada — you can ask us for a copy of what we hold about you, ask us to correct it, and withdraw your consent. Depending on where you live you may have further rights, such as asking for your data in a portable format or objecting to a particular use; write to us and we will honour what applies to you.
Withdrawing consent has consequences we would rather you hear from us: an assistant that cannot remember your classes cannot remind you about them. Ask us anyway if that is what you want.
Email brandon@graderaise.com to exercise any of this. We will need to be satisfied you are the account holder, which normally means a text from the number on the account. If you are unhappy with how we handled it, you can complain to the Office of the Privacy Commissioner of Canada, or to the Office of the Information and Privacy Commissioner for British Columbia.
10. How it’s protected
- Everything travels over encrypted connections, and the database enforces row-level security so one account’s rows are unreachable from another’s session.
- Canvas and Google credentials are encrypted with AES-256-GCM and bound to the row they live in, so a copy of the database without the key is of no use, and a ciphertext moved to another row will not decrypt.
- The keys that bypass those protections exist only on the server and are never sent to a browser. The assistant’s tools are bound to one account at construction, so no text message can talk it into reading somebody else’s data.
- Inbound webhooks are signature-checked, so nobody can text you as beepy.
No system is perfectly secure. If a breach ever affects you we will tell you and the relevant regulator as the law requires.
11. About text messages
Text messages are not private the way an end-to-end encrypted chat is. Your carrier, the platform carrying the message, and our messaging provider all handle it in transit, and it sits in your phone’s own message history where anyone holding your phone can read it. Bear that in mind before texting beepy something you would not want read over your shoulder.
Because signing in is a text from your number, anyone with your phone can also sign in as you. Lock your phone.
12. Children
beepy is for people 13 and older and is not directed at children under 13. We do not knowingly collect information from them. If you believe a child under 13 has an account, email us and we will delete it and everything attached to it.
13. Changes
We will update this page when what we do changes, and the date at the top says when it last did. If a change materially affects your information we will tell you before it takes effect, by text, since that is where you already are.
14. Contact
Questions, access requests, deletion requests and complaints all go to brandon@graderaise.com. A real person reads it.
The Terms of Service cover the rest of the agreement — what beepy promises, what it does not, and how to end it.