We collect your Google account email and read your Google Classroom™ courses, topics, coursework, and posted materials — and, when you use those features, your calendar events and the Drive files you pick. This data is never shared. We use it only to build your hub, and it is deleted if you remove the app or request account deletion.
Study Central uses a small number of outside services to work. We share only what each one needs to do its job.
Resend — our email provider. When we send a parent or guardian an alert, Resend receives that email in order to deliver it. The email contains the student's first name, the class name, the assignment title, its type and due date, any note the teacher attached, and the guardian's email address. Resend delivers the message and does not use it for anything else. Guardians can turn these emails off using the link at the bottom of any alert.
Vercel and Upstash — hosting and data storage. Your hub is stored in an Upstash database and served from Vercel.
Google — Google Classroom™, Google Calendar™, Google Drive™ and Google Sign-In, for the features described above.
We do not share Google user data with anyone else. We do not sell it, we do not use it for advertising, and we do not use it to train artificial intelligence models.
Study Central shows an optional button that opens Raina, an AI tutor made by MagicSchool, in a new browser tab.
Study Central does not send any of your Google Classroom™ data to MagicSchool. The button is a link, nothing more. Once you are on MagicSchool's site, their privacy policy and terms apply, and you sign in there with your own account.
Our use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
Your data is kept only while you use the app. It is deleted when you remove the app from your Google account or request account deletion by emailing us.
Deleting your information. Email support@theheadlinepress.com and we will delete your Study Central record, including your name, email address, saved settings, and any parent or guardian addresses linked to it.
Study Central is designed for use in K-12 classrooms, including by students under 13 years of age. We comply with the Children's Online Privacy Protection Act (COPPA).
We collect only the limited information needed to operate Study Central: a student's name or display name, the classes and assignments associated with their account, assignment completion status, and — where a school or teacher enables it — a Google account email used solely to sign in and sync class data. We do not require students to disclose more information than is reasonably necessary to use the service.
We rely on school/teacher consent under COPPA's exception for schools acting on behalf of parents: the school or teacher authorizes the collection of student information for a legitimate educational purpose. We do not use student information to contact children, to serve behavioral advertising, or for any purpose other than providing Study Central.
We do not knowingly collect personal information from a child outside of a school/teacher context. A parent or school may review, request deletion of, or refuse further collection of a student's information at any time by emailing support@theheadlinepress.com.
When Study Central is used by a school, certain student information may constitute an "education record" under the Family Educational Rights and Privacy Act (FERPA). We act as a "school official" with a legitimate educational interest, performing a service the school would otherwise perform itself.
The school retains ownership and control of all student data. We use student education records only to provide and support the service, under the direction of the school, and we do not re-disclose them except as directed by the school or as required by law. Schools may request access to, correction of, or deletion of student records at any time.
When you sign in with Google, we access only the data covered by the permissions you grant (your email and basic profile, and — with your consent — read-only Google Classroom™ coursework, class, topic, and materials data, and Google Calendar™ event creation). We use this data solely to build and sync your Study Central account. Our use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We do not transfer or use Google user data for serving ads, and we do not allow humans to read it except with your consent, for security, or as required by law.
Encryption in transit. All data sent between your browser, our servers, and Google's APIs is encrypted using HTTPS/TLS. Study Central is served exclusively over HTTPS.
Encryption at rest. Application data (class configuration, assignment titles and due dates, and saved preferences) is stored in a managed cloud database (Vercel/Upstash infrastructure) that encrypts data at rest.
Access tokens. When you click a Calendar or Drive action, the access token Google issues is used in your browser at click time and expires within one hour; it is not persisted on our servers. If you enable Automatic Sync, a Google-issued token is stored server-side solely to refresh your Classroom data on a schedule; it is stored in the encrypted database, is never shared, and is invalidated when you revoke access.
Access controls. Server credentials and API keys are stored as protected environment variables, accessible only to the application. No human routinely accesses stored user data; access is limited to debugging at a user's request.
Identity verification. Requests that read or change a student's record are verified server-side against Google's token verification endpoint — we never trust a client-supplied identity.
Data minimization. We store only what the product needs (class names, assignment titles, due dates, preferences). We do not store the contents of Drive files, grades beyond submission status, other Calendar events, or browsing activity.
Incident response. If we become aware of a security breach affecting user data, we will notify affected users promptly by email and take immediate steps to contain and remediate the issue.
Our use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. You can revoke Study Central's access at any time at myaccount.google.com/permissions; revoking access disables sync and invalidates stored tokens. Upon a deletion request we remove user records from the database within 30 days.
Our public website (this site) uses the Meta Pixel, a small piece of code from Meta Platforms, Inc., to measure how visitors find and use our site and to improve our advertising. The pixel may collect your IP address, browser information, and the pages you visit here, and may set cookies. Meta's use of this data is described in the Meta Privacy Policy.
The Meta Pixel runs only on our public marketing pages. It is never present inside the Study Central app, and no Google user data, student data, or classroom data is ever shared with Meta or used for advertising. You can limit ad tracking through your browser settings or Meta's ad preferences.
Contact us at support@theheadlinepress.com.