What GradeLens collects
Last updated 28 October 2026 · Version 1.2
This is the complete inventory behind our Google Play Data Safety and Apple App Privacy declarations. It is published so that anyone — a user, a regulator, a reviewer — can check our store declarations against a single honest list.
Across every row below: nothing is sold, nothing is shared with data brokers, nothing goes to advertisers, nothing is used for advertising or marketing, nothing is used to train machine learning models, and nothing is linked to a third-party advertising identifier. All of it is encrypted in transit and at rest, and all of it can be deleted by you — apart from a minimal record that an account was deleted, which holds no names, email or marks (see how long we keep it).
Data we collect
| Data | Purpose | Required? | Shared |
|---|---|---|---|
| Email address | Account creation, sign-in, service messages | Required | No |
| Account identifier | Linking your data to your account | Required | No |
| Display name | Personalising the app | Optional | No |
| Name from Google | Signing you in, if you use Sign in with Google | Optional | No — received from Google |
| Terms acceptance and consent records | Showing you accepted the terms, are 18 or older, and consented for each learner | Required | No |
| When the account was last used | Deleting accounts that go unused, after warning you | Automatic | No |
| Learner names | Identifying which child a mark belongs to | Required to add a learner | No |
| Learner date of birth | Distinguishing learners, checking the grade is plausible | Required to add a learner | No |
| Learner school grade | Applying the right achievement scale | Required to add a learner | No |
| School name | Context for the guardian | Optional | No |
| Subjects, terms and categories | Organising and weighting assessments | Required to record marks | No |
| Assessments and marks | Calculating averages and the projected term mark | Optional | No |
| Calendar events and notes | Showing the family calendar | Optional | No |
| Notification preferences | Scheduling only the reminders you asked for, on your device | Optional | No |
| A learner's own account (email, sign-in identifier, name from Google if used, date of birth, grade) | Letting a learner sign in and keep their own record | Only for a learner with their own account | No |
| Guardian email and consent decision, for a learner under 18 | Asking a guardian to approve, and showing they did | Required for a learner under 18 with their own account | No |
| Guardian links, invites and link codes | Linking a learner and the guardians who manage them | Only if a learner and guardian link | No |
| Deletion requests and a guardian's decision | Letting a learner under 18 ask to delete their account, and their guardian decide | Only if a learner under 18 asks | No |
| Server logs | Diagnosing faults, detecting abuse | Automatic | No |
| Support correspondence | Answering you | Only if you write to us | No |
Data we do not collect
| Category | Status |
|---|---|
| Precise or approximate location | Not collected |
| Contacts | Not collected |
| Photos, videos, camera | Not collected — there is no image upload |
| Audio or microphone | Not collected |
| Device calendar | Not collected — GradeLens keeps its own calendar |
| Health and fitness | Not collected |
| Financial or payment information | Not collected — the app takes no payments |
| Advertising ID / device identifiers for advertising | Not collected |
| Browsing or search history | Not collected |
| Installed applications | Not collected |
| SMS, call logs, phone number | Not collected |
| Files and documents | Not collected |
| Race, religion, politics, health, biometrics, sexual orientation | Not collected |
| Third-party analytics and crash reporting SDKs | None in the app |
| Advertising SDKs | None in the app |
Security and control
- Encrypted in transit. All traffic uses TLS.
- Encrypted at rest. The database and backups are encrypted, and so is the information the app keeps on your device.
- You can request deletion. From inside the app, or by emailing us — see deleting your account.
- You can get a copy. See making a data request.
- Independent security review. Vulnerabilities can be reported under our disclosure policy.
Children's data
GradeLens stores information about children. A guardian may enter it on their own account, or a learner may have their own account and enter it themselves. Under 18, a parent or guardian must approve a learner's own account by email first and has the final say over the learner's data, while a learner aged 18 or over decides for themselves. That information is treated as special personal information under POPIA and is subject to the additional protections described in our child safety standards and Privacy Policy.
Where this data lives
On Amazon Web Services (AWS), AWS Africa (Cape Town) — in South Africa. See where it is stored.