Privacy notice

Effective October 19, 2026. This notice describes the private preview and capped student beta of Sidekick, operated by Daksh Breja.

Information used

The workspace uses your verified sign-in identity and the profile, courses, materials, preferences and progress you choose to save. A verified UGA email is required for student beta admission. Additional profile email and institution fields are optional. It does not require a school password or student ID. It does not read other AI chats or browser history.

Beta admission

The first student beta is capped at 20 verified UGA sign-ins, separate from the two operators. A keyed digest of the sign-in email and its workspace identity is retained to enforce admission and prevent reassignment or repeated signup after deletion. This admission marker does not contain course content or a readable email address. It remains after workspace deletion during the beta. Contact support for admission issues.

Optional Google Calendar access

Connecting Google Calendar requires separate consent. Google grants read-only access to the list of calendars you can access and their events. The app asks you to choose calendars before collecting events; it does not edit Google calendars. Collected information can include event titles, descriptions, dates, locations, recurrence information and other event fields returned by Google. This data is used to display your schedule and maintain the selected calendars' saved snapshots, normally checked every six hours.

Google credentials are encrypted on the server. Workspace data and calendar snapshots are stored in Cloudflare infrastructure and scoped to your verified identity. This is not end-to-end encryption: the service processes data to provide its features.

Optional school feeds

You may separately authorize UGA eLC course calendar and announcement subscriptions. Private subscription addresses are encrypted on the server, used only to read those feeds, and excluded from exports and browser save recovery. Collected information includes event titles and dates and recent announcement text and links. Checks run automatically, normally every six hours, with retry delays on failure. RSS may omit older announcements; up to 200 observed posts per feed are retained. Removing a feed clears its saved access and downloaded snapshot. It does not revoke the subscription address at the school; regenerate that address in eLC if needed. Coursework progress you explicitly saved remains until workspace deletion. Full school materials, grades and submission receipt collection is not provided by these feeds.

Sharing and providers

Cloudflare provides hosting, storage and access controls. Google provides the optional calendar connection. The optional website tutor sends only the course excerpts you select, your question and recent tutor exchanges to Cloudflare Workers AI after you agree in the tutor page. It uses Cloudflare-hosted Llama with a free allowance and no automatic paid fallback. Tutor messages, cited excerpts and practice results remain in your private workspace for resume and export until workspace deletion. AI responses and generated answer keys can be wrong; practice checks are not grades or proof of mastery. Calendar data, credentials, other courses and other students’ records are not included in tutor requests. A manual study handoff prepares text for you to share with an assistant of your choice; it does not send it or connect that account. Provider processing is covered by Cloudflare’s Workers AI data policy. We do not sell Google user data or use it for advertising. Sidekick's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including its Limited Use requirements.

Optional course-file imports and AI connections

A separately configured local relay can publish selected, verified course text from your computer. Its revocable credential is limited to approved courses and cannot change learning progress. New local collection waits while that computer is asleep. The optional Sidekick Course Sync beta extension uses your normal eLC login in Chrome. After you grant site access, you choose an open course, collect supported published files locally, review them and explicitly save extracted text to your signed-in workspace. It does not collect passwords, cookies, browsing history, grades or submission receipts. Optional watches check selected open text sections while Chrome runs; full-course collection and saves require your actions. Neither feature is a complete LMS integration.

The extension stores selected course identifiers, collected text, pending save packets and receipts locally for review and recovery. Local English OCR uses bundled code and language data: scans are not sent to an OCR vendor or AI automatically. OCR may misread text; diagrams require review. The visual-page tool renders a local PDF and can export a page image for you to share separately. Saving sends only reviewed text and source metadata to Sidekick. Disconnecting and clearing local collection removes local state after uncertain saves are resolved; it does not delete material already saved on the server or downloaded exports. No extension data is sold or used for ads.

Separate course-scoped consent can allow a connected assistant to read selected materials and save study checkpoints. Claude, ChatGPT, Grok and Gemini have passed bounded fictional read/save/resume tests; availability depends on your provider account. Claude was tested on Free. Gemini was tested on Plus; its free-account test is pending. Gemini requires an eligible personal Google account, not a school-managed account. These grants expire and can be revoked in Connections. They do not give Sidekick access to your other AI chats. Disconnecting prevents future access but does not erase copies already shared with that provider; manage those through the provider.

Control and retention

You can export your saved workspace, remove selected calendars, disconnect a connection, request Google permission removal, or delete your workspace. Calendar removal and disconnection clear that connection's stored calendar snapshots. Disconnecting locally does not by itself confirm that Google permission was revoked; you can also remove access in your Google Account.

If you request Google permission removal, the service can retain an encrypted credential for bounded retries for up to 24 hours. It reports whether Google confirmed removal. Workspace deletion removes its live application records and retains a minimal retired-identity marker and operation receipt to prevent unsafe recovery or replay. Provider infrastructure logs or backups may have separate retention; this preview does not promise immediate erasure from every provider backup.

Saved data otherwise remains until removed. Failed or uncertain save packets can remain in browser storage until reconciled or cleared; they have no automatic expiry. They may contain the text you tried to save. Earlier edited values may remain in server save-recovery records until workspace deletion; exports contain current records. Deleting the server workspace cannot erase offline browser copies, downloaded exports or earlier provider conversations. A source check is not evidence of assignment completion. Do not add other people's confidential information to this service.

Recovery during this preview

Interrupted saves can be checked against their original receipts. This is not backup restoration. Historical workspace restoration is not offered in this preview; keep original materials and download current exports. An older backup must not be reopened to users without reconciling later deletions and revoked access.

Contact and changes

Contact the operator through the launch or invitation channel, or the support email on the beta signup page. This notice will be updated before material changes to data handling or admission of a broader pilot.