PRIVACY NOTICE
Your data stays yours.
GRIND. is a study workspace for university and college students. This notice explains, in plain language, what we collect, why, where it is kept, and how you stay in control.
Who runs GRIND.
GRIND. is an independent student project created and operated by Mehdi Douiri. For any privacy question or request, write to privacy@grindstudent.com.
What we collect
- Your email address, to create your account and send you sign-in codes. If you sign in with Google or LinkedIn, we receive your email address and name from that service, nothing else.
- What you put in your workspace: courses, assessments, grades, schedule, events, notes, quizzes and the files you upload.
- Your profile, only if you fill it in: name, photo, university, program, birth date, goals and the other optional fields. Every profile field is optional.
- A session cookie that keeps you signed in. It is required for the site to work.
We do not use advertising, analytics or tracking cookies, we do not build profiles about you, and we never sell or rent your data.
Why we use it
Only to provide GRIND. to you: sign you in, show your workspace, calculate your averages and deadlines, and keep your files. We email you only for sign-in codes and essential account or security notices.
Who can see it
Your workspace is private to your account. Other students cannot see it: every record and file is tied to your account and protected at the database level. We do not look at your workspace content, except when you ask us for help or when needed to keep the service secure.
Services we rely on
We use a small number of providers to run GRIND. They process data only on our behalf and only for these purposes:
- Supabase: sign-in, database and file storage.
- Render: runs the website.
- Resend: delivers sign-in emails.
- Cloudflare: domain name and DNS.
- Google or LinkedIn: only if you choose to sign in with them.
These providers may store or process data outside Canada, including in the United States, where it may be subject to local law.
AI features are currently turned off. If they are offered later, nothing will be sent to an AI provider unless you explicitly choose to send it, and this notice will be updated first.
How long we keep it
We keep your data while your account exists. When you ask us to delete your account, we delete your account, workspace and uploaded files within 30 days.
Your choices and rights
- See and correct your data directly in your workspace and profile.
- Get a copy of your data, or delete your account, by emailing privacy@grindstudent.com from the address you sign in with.
- Complain: if you are not satisfied with our answer, you can contact the Office of the Privacy Commissioner of Canada.
Security
All traffic is encrypted (HTTPS), you sign in with one-time codes instead of passwords, and sessions are kept in a secure, HttpOnly cookie. No system is perfectly secure; if a breach ever affects your data, we will tell you.
Changes
If we change this notice in a meaningful way, we will update the date above and tell you in the app before the change applies.