Privacy Policy

This policy explains how Quaddy (“we”, “us”) handles personal information in the Quaddy website and mobile app. It sits alongside our Terms of Use.

From your Google account, when you sign in. Your name, email address and profile photo. We never see or store your Google password.

What you choose to add. Your campus, year, major, graduation year, bio, interests, courses, privacy settings, and — if you build one — your career profile and resume.

What you create in the app. Posts, questions, replies, resources, study groups, events, opportunities, course experiences, reports you send, saved items, follows and blocks.

Messages. The messages you send and receive, and who is in each conversation. We don’t read your messages except when investigating a report or where the law requires it.

Technical information. Our hosting and database providers record standard server logs, including IP address, browser and request time, to keep the service running and to stop abuse. We don’t use advertising or analytics trackers, and we don’t sell data or build advertising profiles.

Course experiences are stored with no author column at all — there is no field on the experience that holds your identity. The link between you and your experience lives in a separate, restricted table that the app never exposes, and exists so that you can edit or delete what you wrote and so the one-per-course-and-term rule can be enforced. The same applies to anonymous questions and replies.

• Other students, including moderators, cannot see who wrote an anonymous post through the app — moderators can hide it and restrict its author without ever learning who they are.
• Experiences show the term and the month you posted, never an exact time, so posts can’t be matched up by timing.
• Anonymous contributions never add to your public points or activity.
• Records you create while posting anonymously, such as adding a missing professor, are saved without recording you as their creator.
• Being honest about the limits: the restricted link can be reached by direct database access, which we use only where we must — to investigate serious abuse or where the law requires it. In a very small class, what you write may still identify you to people who know the class.

• To run the app: showing your courses, your campus, your messages and your notifications.
• To work out course and professor averages from experiences students submit.
• To suggest courses, people and internships, using your campus, courses and major. These suggestions are computed from your own data; we don’t sell it or pass it to advertisers.
• To keep people safe: rate limits, reports, moderation and blocking.
• To fix problems and keep the service secure and available.
• To contact you about your account, a report you sent, or a moderation decision.

• Public, to anyone: universities, courses, professors, ratings, and anonymous course experiences. No names attached.
• Your campus: course discussions, campus posts, resources, study groups and events. Your profile appears in the campus directory and classmate lists only if you turn that on.
• Students at other schools: only if you turn on nationwide discovery, and only your profile and career profile, never your campus discussions.
• Private to you: your messages, saved items, notifications, your resume until you share it, your career profile until you show it, and your blocked list.

Change any of this in Settings → Privacy.

We don’t sell personal information. We share it only with the providers that run the service:

• Supabase — database, sign-in, file storage and real-time delivery. Your data is stored here.
• Google — sign-in. Google tells us your name, email and photo; we tell Google nothing about what you do in the app.
• Our hosting provider — serves the site and keeps server logs.
• The Muse — the source of job listings. Our server fetches listings, so browsing jobs doesn’t send your device or identity to them. Following a link to apply takes you to their site, under their terms.

We may also disclose information where the law requires it, or where it’s necessary to investigate a serious safety problem or to protect someone from harm.

We use cookies only to keep you signed in and to remember your choice of light or dark appearance. There are no advertising or tracking cookies, and nothing is shared with ad networks.

Access rules are enforced in the database itself rather than only in the app, so a page cannot show you something you aren’t allowed to see. Sensitive fields — like the authorship of anonymous posts — are held in a schema the public interface can’t reach. Traffic is encrypted in transit. No service can promise perfect security, but this is the standard we build to.

We keep your information while your account exists. When you delete your account in Settings → Account, your profile, messages, career profile and resume are deleted. You choose what happens to your anonymous contributions: delete them too, or leave them in place permanently detached from you, so the ratings other students rely on stay intact.

Backups and server logs may hold copies for a short period afterwards, and moderation records may be kept where we need them to enforce a suspension or meet a legal obligation.

• See and change your information at any time in Settings.
• Download or ask for a copy of your data by writing to us.
• Delete your account and content in Settings → Account.
• Turn discovery, directory listing and message requests on or off at any time.
• Block anyone, which ends messaging and hides you from each other.

Depending on where you live, you may also have the right to correct or erase your data, object to how we use it, or complain to a data protection authority. Write to profhanad100@gmail.com and we’ll help.

Quaddy is not for people under 16. We don’t knowingly collect information from them. If you believe a younger person has an account, tell us and we’ll remove it.

Our database and files are hosted in the United States. If you use Quaddy from elsewhere, your information is transferred to and processed in the State of Minnesota, United States and other locations our providers operate in.

If we change this policy we’ll update the date above, and we’ll tell you in the app when a change materially affects you.

Privacy questions, data requests and complaints: profhanad100@gmail.com.