AcedayAceday privacy policy
Plain words, because the people reading this are students and parents. Last updated October 22, 2026.
Who we are
Aceday is a small app for students at schools that use Blackbaud. It is run by its maker, Adrien Reza, with a parent as the account holder for the services it uses (Apple, Supabase, Anthropic). Questions: hello@getaceday.com.
Who can use it
Aceday is for students 13 and older. Sign-up asks for a birth year and stops if it says under 13. We do not knowingly keep any data from a child under 13; if a parent tells us that happened, we delete it.
What Aceday keeps
| What | Why | Where it lives |
|---|---|---|
| First name, birth year, grade, school name, neighborhood | To address you, to size the plan, to find gyms and food near you | Your phone. The backend only if you sign in. |
| How you train and eat (places, equipment, goals, foods you avoid) | To write the plan and the lunch ideas | Your phone. The backend only if you sign in. |
| Height and weight (optional) | Only to pick starting loads and protein per meal | Your phone. Sent to the coach only with a plan request, never shown back. |
| Your school calendar feed link | To show your classes and homework, and to check for changes while the app is closed | Your phone's keychain. On the backend, encrypted in Supabase Vault, decrypted only inside the checking job. |
| Class notes, logged meals and photos, gym sessions, timings, memory lines | The app's whole point | Your phone. Lines from them go to the coach only when you ask it something. |
| Grades and every past reading of them | To show each class's trend and what you need on the final | Your phone. |
| Your teachers' names and email addresses (only if you type them) | To fill in an email you write to a teacher | Your phone. Aceday never sends the email: it opens in your own mail app. |
| Tomorrow's bag, practice minutes, the grocery list, service hours | So the lists and the week's numbers are there tomorrow | Your phone. |
| A day you said you are out | To keep that day's class reminders quiet | Your phone. |
| Email address | Only if you sign in, to send the one-time code and to find your row | Supabase Auth. |
| A push token | To deliver change alerts | The backend, only if you turned alerts on. |
Aceday never asks for or stores a school password. The feed link is the credential Aceday keeps, and it is treated like a password. If you choose to, you can sign in to your school portal inside Aceday's own browser view: the password goes to the school's page and nowhere else, and Aceday reads the homework and grades shown on that page on your phone only, never on a server. If you connect Canvas with an access token you made in your own Canvas settings, Aceday reads your courses, grades and upcoming work from Canvas on your phone and keeps the token in the keychain; delete it in Aceday or in Canvas at any time. If you connect Gmail, you sign in with Google on Google's page, Aceday gets read-only access, asks only for emails from school senders, reads each one once on your phone, and keeps nothing from it. All of these can be turned off in Settings, and Disconnect Gmail revokes the access.
The TestFlight list on getaceday.com
The form on the website keeps your email and your school, if you typed one. That is used for two emails: the TestFlight invite, and one when Aceday is on the App Store. No cookies, no tracking, no analytics. The address you signed up from is kept only as a one-way scramble, to stop one computer filling the list with spam. It lives in Aceday's own Supabase database, which only Aceday can read. Students sign up only if they are 13 or older; a parent can sign up instead. To come off the list, reply to any email from us or write to hello@getaceday.com, and the row is deleted.
The AI
When you ask the coach something, brief it, log a meal by photo or voice, or use a feature marked in violet, the app sends what that feature needs (your words, the photo, the memory lines, your plan) to Aceday's own backend. The backend sends it to Anthropic's Claude API and returns the answer. The API keys never leave the backend. Anthropic does not use API data to train its models. Nothing is sent to the AI without you doing something that needs it.
The AI never gives diet, weight-loss or medical advice, never sets calorie targets, never writes graded work, and if you write about self-harm or not eating it shows support resources instead of an answer.
What Aceday does not do
- No ads, no selling or sharing of data, no analytics companies.
- No tracking of height, weight or body size over time.
- No reading of grades; a grade exists only if you type it in.
Deleting
Settings has "Delete my account and data". It erases the files on your phone, the keychain entry, your row and vault secret on the backend, and your sign-in. There is no backup to restore from. Uninstalling the app erases the phone's files too; the backend row stays until you delete it from the app or email us.
Changes
If this policy changes, the date at the top changes and the app shows a line about it on the Privacy screen.