Sequoia

Privacy Policy

Effective date: May 16, 2026 · Last updated: May 26, 2026

Short version: Sequoia connects to your Canvas account using a read-only token you provide, a Canvas calendar feed URL, or the optional browser extension. We don't sell your data, we don't share it with advertisers, and your credentials never leave your own device or your private account profile.

1. Who We Are

Sequoia ("we," "our," or "us") is a study productivity app that helps college students prioritize assignments by grade weight, track study sessions, and grow a virtual tree as they study. Sequoia is operated as an independent service. Questions? Email us at support@getsequoia.app.

2. Information We Collect

2a. Information You Provide

Account information: When you create an account via email or Google Sign-In, we collect your name and email address, which are stored in Firebase Authentication (operated by Google).
Canvas credentials: Your Canvas URL and personal API access token are stored locally on your device (localStorage). If you are signed in, an encrypted copy is also saved to your Firestore profile so you can access Sequoia from multiple devices. Your Canvas token is read-only — it allows Sequoia to read your assignments and grades but cannot submit work or change anything in Canvas.
Canvas calendar feed URL: If you choose to connect your Canvas calendar feed (an alternative to an API token), the feed URL is stored in your private Firestore profile. It is never logged or shared. Sequoia uses it only to fetch your upcoming assignment due dates.
Manually entered data: Courses, grade categories, and assignments you type in yourself are stored locally on your device and, if you are signed in, synced to your Firestore profile.
Payment information: Subscription payments are processed by Stripe. We never see or store your full card number — Stripe handles all payment data under their own privacy policy.

2b. Information Collected Automatically

Study data: XP points, streaks, completed assignments, Pomodoro session counts, and tree level are stored in Firestore and locally so your progress syncs across devices.
Push notification tokens: If you grant permission, your browser's push subscription endpoint is stored in Firestore so we can send study reminders. You can revoke this at any time from Settings.
Usage analytics: We use PostHog (self-hosted or cloud) to collect anonymous product analytics such as which features are used and error rates. This data does not include personally identifiable information.
Device and browser information: Standard web server logs may record your IP address, browser type, and page requests. These logs are not linked to your identity and are retained for 30 days.

3. How We Use Your Information

Authenticate you and sync your study data across devices
Fetch your Canvas assignments and course information to display inside Sequoia
Send push notifications you have opted in to (due-date reminders, streak alerts)
Process subscription payments via Stripe and manage your plan status
Improve Sequoia using aggregated, anonymized usage analytics
Respond to support requests you send to us

4. Data Sharing

We do not sell, rent, or trade your personal information. We share data only with the following third-party services that are necessary to operate Sequoia:

Google Firebase (Authentication, Firestore database) — Firebase Privacy
Stripe (payment processing) — Stripe Privacy
Canvas LMS (your institution's Canvas instance) — data is fetched on your behalf using the token you provide; your institution's privacy policy applies to their system
PostHog (product analytics, anonymized) — PostHog Privacy
Groq (AI processing) — when you upload or paste a syllabus, or use AI features like the weight classifier and schedule builder, that text is sent to Groq's API to extract assignments, grade weights, and schedules. It is processed transiently and is not used by Sequoia for anything else — Groq Privacy
Resend (transactional email) — your email address is shared with Resend solely to deliver Sequoia emails such as the welcome message, weekly digest, and reminders — Resend Privacy
Render (backend hosting) — API requests pass through Render servers; no personal data is logged or stored by Render beyond standard access logs

5. Your Canvas Token — Special Notice

Your Canvas personal access token gives read-only access to your Canvas account. Sequoia stores it in your browser's localStorage and, if you are signed in, in your encrypted Firestore document. It is never logged, transmitted to analytics services, or shared with anyone. We recommend generating a token specifically for Sequoia and revoking it from Canvas Settings if you ever stop using the app.

6. Sequoia for Canvas — Browser Extension

The optional Sequoia for Canvas Chrome extension syncs your Canvas courses, assignments, grade weights, and submission statuses with Sequoia automatically. Here is exactly what it does and does not do:

What it accesses: When you visit canvas.instructure.com while logged in, the extension calls Canvas's own REST API using your existing browser session cookies. It reads your active courses, assignment groups (including grade weights), assignment due dates, and whether each assignment has been submitted. It does not read messages, files, or any other Canvas content.
What it sends: The course and assignment data described above is sent to Sequoia's servers, encrypted over HTTPS, and stored in your private Firestore profile. It is used only to display your assignments inside Sequoia.
What it never does: The extension never reads data from any website other than canvas.instructure.com and getsequoia.app. It never captures passwords, payment information, or browsing history. It never submits, modifies, or deletes anything in Canvas.
Automatic syncing: The extension syncs approximately every 45 minutes while a Canvas tab is open, and once each time you visit Canvas. You can also sync manually from the extension popup.
Removing the extension: Uninstalling the extension stops all syncing immediately. Previously synced data remains in your Sequoia account until you request account deletion.

FERPA note: Your Canvas data (assignments, grades, course information) constitutes an educational record under FERPA. By installing the extension and authorizing the sync, you are directing Sequoia to access this data on your behalf. Sequoia does not share this data with any third party other than the infrastructure providers listed in Section 4.

7. Data Retention and Deletion

Your account data is retained for as long as your account is active. You can request deletion of your account and all associated data at any time by emailing support@getsequoia.app. We will process deletion requests within 30 days.

If you uninstall the Sequoia PWA or clear your browser storage, all locally stored data (Canvas token, XP, streaks) is immediately erased from your device. Firestore data is retained until you request account deletion.

8. Children's Privacy

Sequoia is intended for college students age 13 and older. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal information, please contact us and we will delete it promptly.

9. Security

We take reasonable technical measures to protect your data, including TLS encryption in transit, Firebase's built-in Firestore security rules, and token-based authentication. No system is 100% secure; please protect your Sequoia account with a strong password and revoke your Canvas token if you suspect unauthorized access.

10. International Users

Sequoia is operated from the United States. If you access Sequoia from outside the US, your data may be transferred to and processed in the US. By using Sequoia, you consent to this transfer.

11. Changes to This Policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page will reflect any changes. Continued use of Sequoia after an update constitutes acceptance of the revised policy.

12. Contact Us

If you have any questions about this Privacy Policy or how we handle your data, please email us at support@getsequoia.app.