Privacy Policy
Last updated: March 5, 2026
The short version: We don't store your grades, we never see your password, and we can't change anything on your Schoology account. Your data stays between you and Schoology.
What Regrok Does
Regrok AI ("Regrok," "we," "us") is a student tool that connects to your Schoology account through Schoology's official API. It displays your grades, assignments, and rubrics in a cleaner interface and uses AI to help you understand what to focus on.
Authentication & OAuth
Regrok uses OAuth, the same industry-standard protocol used by "Sign in with Google" and other trusted services. Here's what that means:
- We never see your password. When you sign in, you are logging in directly on Schoology's website. Schoology then gives Regrok a temporary access token.
- Tokens are read-only. The token we receive can only read grades, assignments, and rubrics. It cannot submit assignments, post messages, change grades, or modify anything on your account.
- You can revoke access anytime. Go to your Schoology account settings to disconnect Regrok. The token becomes invalid immediately.
What Data We Access
When you use Regrok, we access the following from the Schoology API on your behalf:
- Your user profile (name, user ID)
- Your enrolled courses and sections
- Your grades and assignment scores
- Assignment details (titles, due dates, max points)
- Grading categories and weights
- Grading rubrics (for AI feedback)
What We Do NOT Access
- Your password or login credentials
- Other students' grades or data
- Private messages
- Teacher or admin accounts
- Any data outside your own Schoology profile
Data Storage
We do not store your grades, assignments, or any academic data on our servers.
All data is fetched live from the Schoology API each time you open Regrok. When you close the app or end your session, the data is gone. There is no database of student grades on our end.
We store only what is necessary to maintain your session:
- OAuth tokens — encrypted, stored on your device only, used to authenticate API requests
- Session data — temporary, deleted when you log out
Third-Party Services
Regrok may use the following third-party services:
- Schoology API — to fetch your academic data (governed by Schoology's privacy policy)
- AI processing — rubric and grade data may be sent to an AI model to generate feedback. This data is not stored by the AI provider and is used only to generate your response.
We do not sell, share, or transfer your data to advertisers, data brokers, or any third party for commercial purposes.
FERPA Compliance
Regrok is designed to be compatible with FERPA (Family Educational Rights and Privacy Act) requirements:
- We access only the authenticated student's own data
- We do not store educational records
- We do not share data with third parties
- Students (or parents, for minors) control access and can revoke it at any time
Security
- All communication between Regrok and Schoology is encrypted (HTTPS/TLS)
- OAuth tokens are stored encrypted on the user's device
- We follow secure coding practices and do not log sensitive data
Children's Privacy
Regrok is intended for high school students. We do not knowingly collect personal information from children under 13. If you are under 13 and using Regrok, please have a parent or guardian contact us.
Changes to This Policy
We may update this privacy policy from time to time. Changes will be posted on this page with an updated date. Continued use of Regrok after changes constitutes acceptance of the updated policy.
Contact Us
If you have questions about this privacy policy or how we handle your data: