Team KayKy

Privacy policy

Studyday is a private family school planner and study helper operated by Team KayKy. This page explains what it uses and how sharing works.

Information we use

• Account information: your name, email, selected parent/student role, verification status, and accepted family connections.
• Sign-in information: salted password verifiers, session records, and optional device passkey information. If you choose Google sign-in, we use your Google account identifier, email, verified-email status, and name to identify your Studyday account.
• School connections: the student usernames/passwords you save, school access/refresh tokens, and private Schoology calendar subscription links. These are used to retrieve school information you authorized.
• School and study information: assignments, due dates, school events, current grades, personal tasks, recurring-task completion, study drafts, shared study materials, and workspace notes.
• Selected uploads: photos and PDFs you choose to submit for study help.
• Operational information: timestamps, usage and spending counters, short-lived anti-abuse records, and limited error/security information needed to operate the service.

Studyday and school credentials are separate

Studyday passwords are stored as salted password verifiers in encrypted AWS Parameter Store SecureString parameters. Integration passwords, school tokens, private calendar links, and the Google OAuth client secret are encrypted SecureStrings. School credentials must remain retrievable by the backend to maintain the integration. Saved integration credentials are not shown to connected parents or returned to the browser as plain-text values.

Google sign-in

Google sign-in requests only openid, email, and profile. We do not request access to your Google Drive, Docs, Sheets, Gmail, contacts, or calendars. Google is used for authentication, not for importing school documents. You can manage the Google connection in your Google account’s third-party connection settings. See Google’s privacy policy.

Who can see school information

A new parent-child connection requires the recipient’s acceptance. Sending a request, or finding an account by email, does not grant access to school data. Verified signed-in users can find a matching opposite-role account only by entering its exact email; there is no public account directory. Precreated family accounts may be linked when the family administrator explicitly requests it.

Connected parents can view the child’s schoolwork, optional grades, and planner. They cannot change the child’s school credentials or complete/change the child’s personal tasks. Both sides can disconnect. Disconnecting removes the parent’s future access to that child’s information.

AI help and shared study materials

Only the notes, questions, selected uploads, and relevant study follow-up material you submit for AI help are sent to OpenAI through the administrator’s API account. The app does not automatically send your full school dashboard or grades to OpenAI. It requests store: false for generated responses. That setting does not mean all provider retention is disabled: OpenAI’s API data controls and abuse-monitoring retention still apply. API content is not used for model training by default. See OpenAI’s API data controls.

When a study request needs public information, OpenAI’s web-search tool can search and read public pages using queries derived from the request. The tutor is instructed to leave private notes, credentials, and personal details out of search queries. Source links are saved with the answer and included when that answer is shared or exported. Web search does not sign into school sites or publisher accounts.

Study drafts remain private to their author until shared. A shared study set is a copy of the generated output in the child’s workspace; original photos/PDFs are not automatically published with it. The child and currently connected parents can read shared material and workspace notes. The author or child can remove shared material. Already-shared copies can remain in the child’s workspace after a parent disconnects; private drafts and their conversation history remain in the author’s account.

Service providers and email

AWS hosts the application, encrypted storage, account/passkey support, and email delivery. Google provides optional sign-in. OpenAI processes explicitly submitted study requests. Verification/reset emails are sent when requested. School digests are off until enabled, use the chosen recipient and schedule, and exclude grades unless explicitly selected. Studyday does not sell personal data, serve advertising, or use third-party advertising trackers.

Optional device notifications

If you enable notifications, Studyday stores your browser push subscription encrypted in Parameter Store and your chosen reminder time, quiet hours, and child selections. Your browser/platform push provider delivers encrypted notifications. Notifications use general task counts or a shared-material notice; they do not include grades, assignment titles, or study content. You can disable a device in Your account. Delivery depends on your browser, operating system, and network.

Retention and controls

Account, connection, task, school snapshot, and study records are kept while needed for the account or until removed. Study uploads, conversation history, and generated material are kept until you remove them or request deletion. Application logs are retained for seven days, and database recovery backups can retain prior data for up to seven days. Expiration/deletion processing and provider retention may take additional time. Deleting a conversation does not automatically delete files in your saved-files library or published workspace copies. You can remove those separately.

You can update school connections, change your Studyday password, stop an email digest, disconnect a parent/child, remove your personal tasks, and remove eligible shared material in the app. Contact sean.joo@gmail.com to request an account/data copy, account deletion, removal of remaining drafts, or help with a Google connection. We will verify the request before acting. A recipient’s previously downloaded or printed copies cannot be recalled by the app.

Students and changes

This version is intended for students aged 13 or older and their parents/guardians. It does not provide an under-13 registration or parental-consent process. Contact the operator if information from an under-13 child was submitted. The policy may change as features change; the date below identifies this version.

Updated November 13, 2026 · Contact: sean.joo@gmail.com