Privacy Policy

Grade Pronto is a grading tool for teachers who use Canvas. It is available at gradepronto.com and as an iOS app. This policy explains what information Grade Pronto handles, why, and the choices you have. "We" and "us" mean Grade Pronto.

Information we store for your account

When you create an account, we store the following so you can use Grade Pronto from any device:

• Username and password. Your password is never stored as written. We store only a salted, one-way hash of it.
• Canvas connection. Your school's Canvas address and the Canvas access token you enter. The token is encrypted before it is stored.
• Your grading content. Comments you save to your Feedback Bank, saved feedback for assignments, and your settings and preferences.

This information is stored with Cloudflare, our hosting provider.

Student and course information from Canvas

To show you your classes, assignments, students and submissions, Grade Pronto requests them from Canvas using your access token. Canvas doesn't allow web apps to contact it directly, so these requests pass through our server (hosted on Amazon Web Services) on the way to your device.

• We do not store student submissions, names, grades or other course content on our servers. That information goes to your device and stays in Canvas.
• Grades and comments you post are sent to Canvas through the same server.
• For troubleshooting, our server keeps technical logs for up to 30 days. These record which Canvas address was requested (which can include course, assignment and student ID numbers) and, when Canvas returns an error, the beginning of that error message. They do not record your access token or the contents of submissions.

Teachers are responsible for using Grade Pronto in line with their school's policies on student records. We handle student information only to provide Grade Pronto to the teacher, and never for any other purpose.

AI-assisted grading

Some accounts have access to AI grading and originality checking. When you use these features, the student's submission text, the assignment instructions and rubric, and your feedback preferences are sent to an AI model that we run on our own hardware. They are not sent to outside AI companies. The text is used only to produce the result you asked for. It is not kept after the request is complete and is not used to train AI models. AI results are suggestions for the teacher to review, not final grades.

Information stored on your device

Grade Pronto keeps a copy of your settings, Feedback Bank and Canvas connection in your browser or app storage so it works quickly and survives a brief loss of connection. In the iOS app, your sign-in and Canvas access token are kept in the iOS Keychain. Signing out ends your session. Deleting your account (see below) also clears this copy on the device you delete it from.

• Face ID. The iOS app can ask for Face ID or your device passcode when it opens. This is handled entirely by iOS. Grade Pronto never receives your face data or passcode, only whether the unlock succeeded.
• Exported grades. When you export an assignment's grades as a spreadsheet (CSV), the file is created on your device and goes only where you choose to send or save it.

What we don't do

• We don't sell or rent personal information.
• We don't show ads, and we don't use advertising or analytics trackers.
• We don't share your information with anyone except the service providers below, as needed to run Grade Pronto, or when required by law.

Service providers

• Cloudflare hosts the website, stores account data, and connects to our AI server.
• Amazon Web Services hosts the server that relays requests between Grade Pronto and Canvas.
• Instructure (Canvas) is your school's learning management system. Information in Canvas is governed by your school and Instructure's policies.
• Google Fonts and cdnjs deliver fonts and a document-reading library to the website and app. Like any website, these services receive your device's IP address when they're loaded.

Deleting your account

You can delete your account at any time. In Grade Pronto, open Settings (your initials, top right), then choose Account → Delete. Deleting your account immediately and permanently removes your username, password hash, encrypted Canvas token, Feedback Bank, saved feedback and settings from our servers. Grades and comments already posted to Canvas are not affected.

Deleting your account doesn't cancel the access token inside Canvas itself. To revoke it, go to Canvas → Account → Settings → Approved Integrations and delete the token you created for Grade Pronto.

Security

All connections use encryption (HTTPS). Passwords are hashed and Canvas tokens are encrypted at rest. No system is perfectly secure, but we work to protect the information we handle.

Children

Grade Pronto is meant for teachers, and accounts are not intended for children. Students do not use Grade Pronto directly.

Changes to this policy

If we change this policy, we'll update it on this page and change the effective date above.

Contact

Questions or requests about your information: [email protected]