Privacy Policy

Last updated: April 15, 2026

1. Introduction

This Privacy Policy describes how the AI Disclosure Tool (the "Service"), operated by Alym Amlani, collects, uses, stores, and protects your information. The Service is designed for use in post-secondary educational settings. We are committed to handling your information responsibly and in accordance with Canadian privacy principles.

2. Information We Collect

Instructor Information

When an instructor creates a session, the Service may collect:

  • Name
  • Email address
  • Institution name (optional)
  • Course name
  • AI usage policy configuration
  • Assignment password (optional)
  • Instructor message to students (optional)

    Student Session Metadata

    When a student uses a disclosure link, the Service may collect limited session metadata:

    • Policy link/session identifiers
    • Student-generated return codes or resume tokens, hashed at rest where applicable
    • Quiz completion status and confidence self-assessment
    • Timestamps and non-identifying progress markers

      Student PDF Disclosure Details

      Student-entered PDF disclosure details, including student name, AI chat links, tool notes, and task-specific usage details, are kept in the student's browser session storage and used to generate the downloadable PDF. They are not submitted to or stored in the Service database.

      Student Reflection Prompt Details

      When reflection prompts are enabled, student reflection text and generated feedback prompts stay in the student's browser session storage. The Service does not submit those prompts to an AI provider. Students may choose to copy a prompt into an external AI tool themselves.

      Technical Data

      The Service and its hosting infrastructure may automatically collect:

      • IP address
      • Browser type and version
      • Device information
      • Server request logs (for debugging and security purposes)

        Generated Artifacts

        • PDF disclosure summaries are generated in the browser and downloaded directly to the student's device.

          The Service does not collect, upload, or analyze student assignment files.

3. How We Use Your Information

We use collected information to:

  • Provide and operate the Service
  • Generate shareable policy links for instructors
  • Enable students to complete disclosure workflows without storing PDF disclosure or reflection prompt details server-side
  • Generate PDF disclosure reports in the student's browser
  • Maintain and improve the Service
  • Ensure security and prevent misuse
  • Support anonymized research into AI disclosure practices (only when opted in by the instructor)

4. Legal Basis for Processing

We process personal information on the following bases:

  • Consent: By using the Service, you consent to the collection and use of information as described in this policy.
  • Legitimate educational interest: The Service supports a recognized educational purpose — structured, transparent disclosure of AI tool use in academic settings.

    You may withdraw consent by discontinuing use of the Service and requesting deletion of your data.

5. Instructor Access to Student Disclosures

Student-entered PDF disclosure details are not stored in the Service database for instructor review. Students download the generated PDF and submit it to their instructor through the course workflow chosen by the instructor or institution. Instructors are responsible for handling submitted PDFs in accordance with their institution's privacy and academic integrity policies.

6. Data Storage and Retention

- Instructor policy configurations and limited student submission metadata are stored using Supabase (a hosted PostgreSQL database service).
  • PDF disclosure details and reflection prompt details are stored only in browser session storage while the student is completing the workflow, then cleared after the PDF is generated or when the browser session ends.
  • PDF disclosure reports are generated client-side in the student's browser and are not stored on our servers.
  • Data is retained for as long as necessary to provide the Service and maintain functional session links.
  • If you would like your data removed, contact us at hello@alym.com with the relevant session link or configuration ID.

    • 7. Third-Party Services

    The Service relies on the following third-party services:

    • Supabase — database and authentication (Supabase Privacy Policy)
    • Vercel — hosting and deployment (Vercel Privacy Policy)

      These services may process data (including IP addresses and server logs) in accordance with their own privacy policies. We select service providers that maintain reasonable security and privacy practices.

    8. Security

    We take reasonable measures to protect your information, including:

    • Encrypted connections (HTTPS) for all data in transit
    • Access controls on database infrastructure
    • Hashing of sensitive identifiers (such as return codes) at rest

      No system is completely secure. While we strive to protect your data, we cannot guarantee absolute security.

    9. International Data Transfers

    The Service and its infrastructure may be hosted on servers located outside of Canada (for example, in the United States). If your data is transferred outside of Canada, it will be subject to the laws of that jurisdiction, which may differ from Canadian privacy law. By using the Service, you acknowledge and consent to this transfer.

    10. Children's Privacy

    The Service is intended for use by post-secondary students and instructors. We do not knowingly collect personal information from children under 13 years of age. If we become aware that information has been collected from a child under 13, we will take steps to delete it promptly.

    11. Your Rights and Data Deletion

    You have the right to:

    • Request access to the personal information we hold about you
    • Request correction of inaccurate information
    • Request deletion of your data

      To exercise these rights, contact us at hello@alym.com. We will respond within a reasonable timeframe.

    12. Changes to This Policy

    We may update this Privacy Policy from time to time. The "Last Updated" date at the top reflects the most recent revision. We encourage you to review this policy periodically. Your continued use of the Service after changes constitutes acceptance of the updated policy.

    13. Contact

    If you have questions or concerns about this Privacy Policy, contact us at:

    Alym Amlani
    Email: hello@alym.com