Privacy Policy

1. Introduction

Summit (“we,” “our,” or “us”) is committed to protecting your privacy. This policy explains what information we collect, how we use it, and the choices you have. By joining our waitlist or using the Summit app, you agree to the practices described here.

2. Information We Collect

Waitlist information

When you join our waitlist, we collect your email address and whether you opted in as a beta tester. We use this only to send launch updates and, if applicable, beta invitations.

Canvas LMS data

When you connect Summit to Canvas, we request read-only access via OAuth to:

• Your course enrollments
• Assignment titles, due dates, and availability status
• Locked assignment metadata

We do not access your grades, submitted files, messages, or any other Canvas data beyond what is necessary to show you your assignments.

Usage data

We may collect anonymous, aggregated analytics data (e.g., which features are used most) to improve the app. This data cannot be used to identify you.

3. How We Use Your Information

• To send waitlist updates and launch announcements
• To provide and improve the Summit app
• To send beta testing invitations (if you opted in)
• To respond to your inquiries

We do not use your information for advertising or sell it to third parties.

4. Canvas OAuth Access

Summit connects to Canvas using OAuth 2.0, a standard secure authorization protocol. You authorize Summit explicitly, and you can revoke that access at any time through your institution's Canvas account settings under “Authorized Apps.” We never store your Canvas password.

5. Data Sharing

We do not sell your personal data. We may share data with:

• Service providers — such as database hosting, analytics, and email delivery providers — who process data on our behalf and are bound by data processing agreements.
• Law enforcement — only if required by applicable law or a valid legal process.

6. Data Retention

• Waitlist emails are retained until you unsubscribe or request deletion.
• App account data is retained while your account is active and deleted within 30 days of account deletion.
• Anonymous analytics data may be retained indefinitely in aggregated form.

7. Your Rights

You have the right to:

• Request a copy of the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data
• Unsubscribe from waitlist emails at any time via the unsubscribe link
• Revoke Canvas access at any time through Canvas account settings

To exercise any of these rights, contact us at privacy@summitapp.io.

8. Security

We use TLS encryption for all data in transit. Data at rest is encrypted using industry-standard methods. We regularly review our security practices. No transmission over the internet is 100% secure; we cannot guarantee absolute security, but we take reasonable measures to protect your data.

9. Children's Privacy

Summit is intended for users who are 13 years of age or older. We do not knowingly collect personal information from children under 13. If we learn we have collected such information, we will delete it promptly.

10. Cookies

Summit's website uses essential cookies to function and optional analytics cookies to understand usage. You can decline analytics cookies via the cookie banner. See our Terms of Service for more detail.

11. Changes to This Policy

We may update this policy from time to time. If we make material changes, we'll notify waitlist members via email before the changes take effect. The “Last updated” date at the top of this page reflects the most recent revision.

12. Contact

Questions about this policy? Reach us at privacy@summitapp.io.