← Back to Canvo

Privacy Policy

Last updated: 30 March 2026

This Privacy Policy explains how XueMi (学觅), operated by Canvo ("we", "us", "our"), collects, uses, and protects your information when you use our Chrome extension, web application, and related services (collectively, the "Service").

1. What We Collect

Data type	Source	Purpose	Stored where
Email & password	You provide at registration	Authentication	Our server (password hashed with bcrypt)
LMS session cookies	Chrome extension reads from your browser	Authenticate API calls to your university's LMS on your behalf	Extension memory only — never sent to our server
Course list, assignments, deadlines	Fetched from your LMS (Canvas/Moodle) via API	Display deadlines, power the planner and writing assistant	Our server, associated with your account
Course materials metadata	Fetched from your LMS	Provide context to AI tutor and writing assistant	Our server (file names and sections only — not file contents unless you upload)
Lecture recordings	You record via your microphone	Transcription, translation, summarisation	Our server (audio is deleted after processing; transcript is kept)
Chat screenshots (Play features)	You upload voluntarily	AI analysis (love analyzer, etc.)	Not stored — processed in memory and discarded
Quiz answers (MBTI, Vibe, Fortune)	You answer in the app	Generate personality profile	Our server, associated with your account
AI usage logs	Generated when you use AI features	Rate limiting, cost tracking, service improvement	Our server

2. What We Do NOT Collect

• We do not collect your browsing history outside of LMS pages
• We do not read or store your LMS passwords — we use session cookies that your browser already has
• We do not access pages outside your LMS domain
• We do not track you across websites
• We do not sell, rent, or share your data with advertisers or data brokers
• We do not use your data to train AI models

3. How We Use Your Data

• Core service delivery: Displaying your deadlines, powering the AI planner, tutor, and writing assistant
• AI processing: Your course context is sent to AI providers (Anthropic Claude, ByteDance Doubao) to generate responses. Only the minimum necessary context is sent.
• Service improvement: Aggregate, anonymised usage statistics (e.g., "X users used the tutor this week") to improve the product
• Account management: Authentication, billing, support

4. Third-Party AI Providers

We use the following AI services to process your requests:

• Anthropic (Claude) — for tutor Q&A, writing assistant, translation, and summarisation. Anthropic's privacy policy
• ByteDance (Doubao) — for Play features (love analyzer, MBTI, fortune, vibe check, infidelity lab). Volcengine's privacy policy

Both providers process data on-demand and do not retain your inputs for model training under our API agreements.

5. Chrome Extension Permissions

Permission	Why we need it
cookies	Read your LMS session cookie to authenticate API calls to Canvas/Moodle on your behalf
storage	Cache synced data locally so the extension loads fast without re-fetching
activeTab	Detect which LMS page you're on to determine your university and platform
downloads	Download course materials to your local machine when you choose to
host_permissions (*.edu.au, *.edu, *.instructure.com)	Access LMS APIs at Australian universities and Canvas-hosted institutions

6. Data Storage and Security

• All data is stored on servers located in Australia
• Passwords are hashed using bcrypt (never stored in plain text)
• API communications use HTTPS encryption in transit
• Database uses SQLite with WAL mode; production will use PostgreSQL with encryption at rest
• LMS session cookies are only held in the extension's sandboxed storage and are never transmitted to our servers
• Audio recordings are deleted from our server immediately after transcription processing is complete

7. Data Retention

• Account data: Retained while your account is active. Deleted within 30 days of account deletion.
• LMS data (courses, assignments): Synced fresh on each extension use. Old data replaced on re-sync.
• Transcripts and drafts: Retained until you delete them or close your account.
• Play feature results (MBTI, etc.): Retained until you delete them or close your account.
• Chat screenshots: Not retained — processed in real-time and immediately discarded.
• AI usage logs: Retained for 90 days for billing and rate-limiting, then aggregated and anonymised.

8. Your Rights

You have the right to:

• Access your data — view everything we store about you via the app
• Export your data — download your courses, assignments, transcripts, and drafts as JSON
• Delete your data — delete your account and all associated data
• Correct your data — update your profile information at any time
• Withdraw consent — uninstall the extension and/or delete your account at any time

To exercise these rights, email us at privacy@canvo.ai or use the in-app settings.

9. Children's Privacy

The Service is intended for university students aged 18 and over. We do not knowingly collect data from children under 16. If you believe a child has provided us with personal data, contact us and we will delete it.

10. International Users

If you are accessing the Service from outside Australia, your data may be transferred to and processed in Australia. By using the Service, you consent to this transfer. We comply with the Australian Privacy Act 1988 and make reasonable efforts to comply with the EU GDPR and China's PIPL where applicable.

11. Changes to This Policy

We may update this policy from time to time. We will notify you of material changes via email or an in-app notification. The "Last updated" date at the top indicates the most recent revision.

12. Contact

If you have questions about this privacy policy or your data:

• Email: privacy@canvo.ai
• Web: canvo.ai