Privacy policy

1. Who this policy covers

Catchup is an independently operated study-planning service based in the Australian Capital Territory, Australia. In this policy, “Catchup”, “we”, “us” and “our” refer to the operator of the Catchup service.

Catchup is not operated by, endorsed by, or affiliated with the Australian National University, the University of Canberra, or any other education provider.

2. Information we collect

Account information

• Your name and email address.
• Authentication identifiers and security/session information needed to keep you signed in.
• Catchup forwards your password to Supabase Auth for authentication. Catchup does not store or log your plaintext password.

Timetable and study information

• The private iCal subscription URL you provide.
• Calendar event titles, course codes, class types, times, locations and identifiers returned by that URL.
• Your timetable field-mapping choices, sync time, completion status and manual class-type changes.
• Assessments you enter, including title, course, category, due date, weighting, notes and completion status.

Technical information

• Necessary authentication and password-recovery cookies.
• Standard request information that hosting and security systems may process, such as IP address, browser type, timestamps and error logs.
• A pseudonymous account identifier and limited product events, such as signing up, opening a planner area, connecting a timetable, or completing an item. Analytics does not include your name, email address, timetable content, assessment content or notes.
• Temporary in-memory browser caches used to make the app faster. The installed web app caches only public icons and an offline page, not private API responses.

Catchup does not intentionally collect sensitive information. Please do not place health, financial, government identifier or other sensitive information in assessment notes or calendar fields.

3. How we collect it

Most information comes directly from you when you create an account, connect a timetable, adjust a class or add an assessment. When you provide a timetable subscription URL, Catchup retrieves calendar information from the timetable server identified by that URL.

4. Why we use it

• To create and secure your account.
• To import, label, prioritise and display your timetable.
• To store your assessment plan and preferences.
• To provide password recovery, support and service communications.
• To prevent misuse, diagnose faults and protect the service.
• To measure account growth, onboarding, feature use and retention, and improve the service.
• To comply with legal obligations and enforce the Terms of Use.

5. Who receives information

Catchup discloses information only as needed to operate the service:

• Supabase provides authentication, session management and database hosting.
• Hosting and network providers run the Catchup web application and may process standard request and diagnostic data.
• PostHog processes pseudonymous product events for aggregate usage and retention analytics. Events are sent by Catchup’s server without end-user IP-based location enrichment.
• Your timetable provider receives a request when Catchup retrieves the subscription URL you supplied.
• Authorities or advisers may receive information where disclosure is required or authorised by law, or reasonably necessary to protect rights and safety.

Service providers may process information outside Australia. Supabase states that data is stored and primarily processed in the selected project region, while it and its subprocessors may process data in other places where they operate. Provider locations can change over time.

Catchup does not currently sell personal information or disclose it to advertisers or data brokers.

6. Cookies and device storage

Catchup uses essential cookies to maintain a secure login, refresh a session and complete password recovery. These cookies are necessary for the service to work. Product analytics is sent by Catchup’s server and does not add an analytics cookie to your browser. Catchup does not use advertising cookies or cross-site behavioural tracking.

7. Retention and deletion

Account and planner information is generally kept while your account remains active. Pseudonymous product events are generally retained for up to 12 months. Individual assessments can be deleted inside the app. If you ask for account deletion, Catchup will delete or de-identify information under its control unless it must be retained for security, backup, dispute-resolution or legal reasons. Provider backups and logs may expire on their normal retention schedules.

8. Security

Catchup uses HTTPS, authenticated server requests, restricted database permissions and per-user row-level access controls. No online service can promise absolute security. Keep your password and timetable subscription URL private, and contact us if you believe your account has been accessed without permission.

9. Access, correction and deletion

You can correct your display name and planner data in the app. To request access to, correction of, or deletion of other personal information, email privacy@jackbmc.com. We may need to verify your identity before acting on a request.

10. Privacy questions and complaints

Email privacy@jackbmc.com with “Privacy” in the subject line. Explain what happened and the outcome you are seeking. We will acknowledge the complaint promptly, investigate it fairly and aim to respond within 30 days.

If you are not satisfied, you may be able to contact the Office of the Australian Information Commissioner.

11. Changes to this policy

This policy will be updated when Catchup’s information practices materially change. The current effective date appears at the top of this page. Significant changes may also be highlighted inside the service.