What we collect, why, who else handles it, and how to have it deleted. Effective October 5, 2026.
Gradical (gradical.app, the Gradical planner, and the Gradical iOS app) is run by Ryan Brodsky. In this policy, “we” means Gradical. Questions go to hello@gradical.app.
We use two analytics tools, PostHog and Ahrefs Web Analytics, both in cookieless mode. They record which pages are viewed, which links and buttons are clicked (including the words on them, such as a school or degree you pick in the planner), the site that referred you (including whether you arrived from an AI assistant such as ChatGPT), your approximate location, and your device and browser type. The planner also records which school and degree you look up and load, so we can see which schools need data. They set no cookies and do not track you across other websites, and we do not record your screen or keystrokes. To count a visit without a cookie, PostHog briefly combines your IP address and browser details into a hashed identifier that changes daily. Our hosting providers also keep standard server logs, including IP addresses, for security and troubleshooting.
The iOS app runs no analytics or advertising tools and does not track you. It sends only what it needs to work: your sign-in, the plans, prior credit, and progress you save to your account, and requests for course and degree information. Our servers keep the same standard logs as for the site.
Your name and email, plus anything else you choose to fill in: your situation, state, what you are interested in, when you are free, and what you want help with. We also record the page you came from and your browser type. This is stored in a database on Cloudflare and emailed to us so we can reply.
Your name, email, time zone, the time you choose, and what you tell us about your situation. For the paid session this includes the intake form: your course list (typed or pasted as text), target degree, constraints, and preferred times. We store this in our booking records and put it in the Google Calendar invitation for the session, which Google emails to you. If you email us an unofficial transcript, for example by replying to that invitation, it stays in our email inbox until you ask us to delete it. There is no file upload on the site. Please black out any Social Security number before sending; we never need it, or your student ID number.
Payments are processed by Stripe on Stripe's own checkout page. We never see or store your full card number. Stripe shares with us your name, email, the billing details it collects (such as country and postal code), the amount, the payment status, and Stripe's reference numbers for the purchase. Stripe may email you a receipt or invoice.
For the planner, CLEP prep, and membership: your email and a password (we store only a secure hash of it), or the details from Sign in with Google (your name, email, and Google account ID) or Sign in with Apple (your name if you choose to share it, and your email or an Apple private relay address). We also store what you save: your school and degree choices, planned courses and terms, CLEP practice progress, and membership status. Signed out, the planner keeps your plan only on your device, in your browser's storage or the app's storage, without an account. When you sign in or create an account, a plan made on that device is saved to your account if the account has no plan yet; if it already has one, the account's plan is used and the device's copy stays on the device, unused and not sent to us, until you clear the planner or a later sign-in replaces it.
If you ask the planner to add a school or its degrees, or tell us a degree looks wrong, we store the school, the degree, what you wrote, your email if you give it (only to tell you when it is added or fixed), the page you came from, and your browser type, in a database on Cloudflare.
If you choose to, you can add the credit you already have or plan to earn: AP, IB, CLEP, or DSST exams with their scores and dates; courses at other colleges or in dual enrollment, with the school, course, grade, and term; credentials such as an IB diploma or an associate degree; and grades on courses you have finished at your own school. You can also say which state you live in and whether you are a resident there, which is used only to show tuition prices. These are your own statements. We do not check them with any school or testing agency, and we never send them to one. Signed in, they are saved to your account. Signed out, they stay in your browser's storage or on your device, where anyone using that browser or device can see them. When you check or build a schedule, the grades on your plan's finished courses are sent to our server for that check, and are saved to an account only if you are signed in and save your plan. The exam scores, grades, and other colleges you enter are never included in our analytics.
Messages to gradical.app addresses are forwarded to our inbox, and we keep them like any other email.
We do not sell your personal information, share it for cross-context behavioral advertising, or send it to any school, college, or employer. It is never used to train AI models.
Only the service providers that run Gradical, each for its own part:
We will also disclose information if the law requires it, and if Gradical is ever sold or merged, this information would transfer under the same promises made here.
If you use Sign in with Google, we receive only your name, email address, and Google account ID, and use them only to create your account and sign you in. Gradical's booking system connects to Gradical's own calendar to create session invitations and check open times; it never reads your calendar. Gradical's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
Account data stays until you delete your account or ask us to. Deleting your account removes it right away, with its saved plans, prior credit and residency, CLEP progress, profile, and sign-in connections, and cancels an active membership with no further charges. Interest-list entries, free-call requests, and booking records stay until you ask us to delete them or we no longer need them. Payment records are kept as long as tax and accounting rules require, and Stripe keeps its own records under its own policy.
Email hello@gradical.app from the address you used with us to see what we hold, get a copy, correct it, or delete it, including deleting your account. We respond within 30 days. In the iOS app you can also delete your account yourself: Account, then Delete account. Clear Data in the planner removes the plan it shows and any copy of a plan kept on your device. A plan or prior credit kept only on your device is also removed when you clear your browser's data for gradical.app or delete the app.
Gradical is meant for high-school and college students and their parents. It is not directed at children under 13, and we do not knowingly collect their information. If you believe a child under 13 has sent us information, email us and we will delete it.
Everything travels over encrypted connections, passwords are stored only as hashes, and access to your information is limited to the people who run Gradical. No system is perfectly secure, but we take reasonable care, and we will notify you of a breach affecting your information as the law requires.
When this policy changes, we update the date at the top. If a change materially affects how we use information you have already given us, we will tell you before it takes effect.