Privacy policy
What we collect, why, and what you can do about it.
Last updated : 25 July 2026
Data collected
When creating an account: your email address, a display name if you provide one, and a password that is never stored in clear text (only a salted cryptographic hash is kept).
When running an analysis: the front and back images you upload. They are sent to the vision model provider to produce the analysis, then kept only if you choose to save the card to your collection.
Technically: application error logs, with no advertising profiling and no resale to third parties.
Purposes and legal basis
Your data is processed to perform the service you request (GDPR article 6.1.b): creating and securing your account, producing analyses, storing your collection.
No data is used for advertising. No data is sold.
Processors
Application hosting: Vercel. Database: Neon. Image storage: Vercel Blob. Analysis models: Anthropic and, as a fallback, OpenAI.
Images sent to model providers are sent solely to produce your analysis.
Retention
Analysis images that are not saved are not retained after the request is processed.
Saved cards and their images are kept for as long as you keep them in your collection.
Deleting your account permanently erases your profile, your collection and your images.
Your rights
You have the right to access, rectify, erase, restrict, object to and port your data.
Account deletion is available directly in the app, under Settings. For any other request, write to contact@grademate.app.
You may lodge a complaint with your national data protection authority if you believe your rights are not respected.
Cookies
GradeMate uses only one session cookie, strictly necessary for authentication. It is set at login, removed at logout, and used for no advertising tracking.
No third-party analytics or advertising cookies are set, which is why no consent banner is required.