Privacy policy

NIX Classroom is a class check-in service from NIX Development LLC (“NIX,” “we,” “us”). A student chooses to put their phone down for a class period, and the professor sees that fact and when it changed. This policy says what Classroom records, what it never records, who can see it, and how to reach us. It is written to be read.

What Classroom records

Your account. Your name as you typed it, your email address, a scrambled form of your password (we cannot read it), your time zone, and, for students, the birth year you gave when you signed up, which we use only to confirm you are old enough to use the service.

A professor's class. The class name, its schedule, the reward and its threshold if the professor set one, the number of bypasses per term, how many minutes after the start a check-in still counts as on time, and which students joined and when.

Your check-ins. For each class session: whether you checked in and when, and from that time whether you were on time or late and by how many minutes, when Focus started on your phone, when it ended or was ended early and whether a bypass was used, when you checked out, how many minutes the phone was down, and the result for that session (Full, Partial or Absent). If your phone only reports an early end later, the record says the end time is unknown.

Nearby. During a session, whether the professor's phone has heard your phone over Bluetooth in the last few minutes (Nearby). Your phone sends out a short signal that changes every 10 minutes and means nothing outside Classroom; the professor's phone records only that it heard it and when. While the session runs, your professor's roster shows the last time their phone heard yours. Each sighting is deleted 24 hours after the session ends, and after that only the last time your phone was seen is kept. Bluetooth tells Classroom that a phone was near the professor's phone, never where either one is.

Notifications. If you are a student in a class and allow Classroom's notifications on an iPhone, we keep the code Apple gives your phone for sending them (a push token), with your account. We use it for one notification: when your professor ends class early while your phone is down, so you can bring your phone back. Signing out deletes it when your phone can reach us. It is also deleted when you delete your account, when your password changes, when Apple tells us it no longer works, and in any case 30 days after your phone last sent it to us.

For a professor who buys seats: the number of seats, the amount, the date and Stripe's reference for each payment and refund. Never a card number.

For a professor who signs up: the school and what they teach, as they typed them.

Invites: who invited whom, whether the invite has landed, and the address of anyone a professor sends an invite to by email.

Technical records. Our hosting provider keeps standard server logs (the address a request came from, the time, and the page or route) for a short period, as every website's host does.

What Classroom never records

• Your location, of any kind. No GPS, no geofence, no Wi-Fi positioning.
• Which apps you use or open, on either platform.
• Anything on your screen.
• Anything about your phone outside a class session.
• Any score, ranking or pattern over time assembled about you as a person.

On iPhone, Apple's Screen Time framework runs on your device and tells Classroom only that Focus started or ended. On Android, the block runs on your phone and reports only that it is on.

Who can see it

Your professor sees the roster for their class during a session (your name, one of seven states, the time it last changed, whether you checked in late and by how many minutes, and, while your phone is down, the last time their phone heard yours over Bluetooth) and can export attendance for their class as a file with one row per student per session, and a file for Moodle that marks each student who checked in Present or Late. These per-student records belong to the class and go to the professor, who is responsible for them under their institution's rules for class records.

Other students never see your record. There is no board, no ranking, and no shared list.

We look at records only to run the service, answer a support request, or fix a problem.

No one else. We never sell, share, license or trade student or professor data with anyone, for any purpose, in any form. There is no anonymized or aggregate exception. Our hosting and database providers (Vercel and Neon) process data on our servers' behalf and under our instructions, and do not use it for anything of their own. We send account emails (verification, password reset), release notes and class recaps through Resend, which sees your email address and the message. Apple delivers the one iPhone notification, and sees the push token, the notification's words, and which class session ended and when. Card payments are processed by Stripe, which sees the professor's email, the number of seats, the amount and the card. Stripe never sees a student, a class or a roster.

How we use it

To run the class: the card, the check-in code, the roster, the export, and the reward progress a professor set. To keep accounts secure. To tell a student's iPhone, with one notification, that the professor ended class early while the phone was down. To tell you what changed in the app when a new version is out, by email, with a link in every one to stop them. To email a professor a recap after each class session with a check-in: counts only, no student names, with a link in every one to stop them. For professors who buy seats: to take the payment, send the receipt and keep the seat count. To tell a professor when a class needs seats, and two weeks before a class's records are deleted. To send an invite a professor asks us to send, once per address for each professor, and to count that invite when the address signs up. Once, a week after a professor's first class session with a check-in, to email them their own invite link if nobody has signed up by it; the link that stops release notes stops this email too. To see which school each professor signed up from. Nothing else. No advertising, no analytics profiles, no selling. Classroom never writes a grade; it records what happened and the professor decides what it means.

How long we keep it

A class's sessions and check-in records are deleted 120 days after its term ends. The professor gets one email two weeks before, and any export they downloaded is their copy. Student accounts stay. We keep counts with no names in them, such as how many sessions and check-ins a class had.

When a professor deletes their account, their classes and every check-in record in them are deleted with it. When a professor deletes a class, its roster and every check-in record in it are deleted with it. When a student deletes their account, their enrollments and check-in records are deleted with it. You can delete your account from Account in the app. That removes your account and your records as the confirm screen describes; there is no undo.

Payment records are kept for our accounts as the law requires, even after an account is deleted, without a name or email in our database.

Age

Classroom is built for college classes. You must be at least 13 to use it, and we do not knowingly keep an account for anyone younger. If you believe a child under 13 has an account, email us and we will delete it.

Your rights

You can ask us what we hold about you, ask us to correct it, or ask us to delete it, by email. We answer every request ourselves. Depending on where you live, state or national law may give you further rights over your personal information; email us and we will honor them.

Security

Passwords are stored only in scrambled form. Every connection to Classroom is encrypted. Sign-in uses a signed token that we can revoke. No system is perfect, and we will tell affected people if something goes wrong with their data.

Changes

If this policy changes, the date at the top changes with it, and a change that affects what we record or who can see it ships with the code that makes it true, never after.

Contact

privacy@nix.management. NIX Development LLC, Michigan, USA.