The short version
- Student names, notes, family emails and invoice contents are encrypted in the database
- Every query is limited to your own workspace; teammates see it only after you invite them
- Sign-in is by a one-time email link, so there's no password to steal
- Irreversible actions, like revoking a key or deleting a document, ask you to confirm first
- Analytics are switched off on account, family and sign-in pages
The details
The security page and privacy policy cover everything, including how connected calendars, the API and webhooks handle data.
Something looks wrong
Contact us right away. Owners can check the activity log to see who viewed, downloaded, sent or changed records.
Updated October 11, 2026. Something here doesn't match what you see? Tell us.