← All apps

Notigrade — Privacy Policy

Last updated: 2026-04-20

1. Overview

Notigrade is a mobile app for parents to track their children's school grades. This privacy policy explains what personal data the app processes, for what purposes, on which legal bases, and what rights you have.

2. Controller

Stonemiller
Föttingerweg 13
90431 Nürnberg, Germany
Email: support@stonemiller.freshdesk.com

3. Data We Process

3.1 Data stored locally on your device

By default, Notigrade stores all of your data exclusively on your device in a local SQLite database. This includes:

This local data is never transmitted to our servers unless you explicitly enable the cloud sync feature.

3.2 Cloud sync (optional, opt-in)

If you enable cloud sync in the settings and create an account, the data listed in 3.1 as well as the following is transmitted to and stored at our processor Supabase (see §5):

Cloud sync is fully optional. The app is fully functional offline without an account.

3.3 Error reports and user feedback

We use Sentry (see §5) to detect and fix crashes and errors. When an error occurs, the following is transmitted:

If you submit the in-app Feedback form, we transmit:

We do not collect:

4. Purposes and Legal Bases (GDPR Art. 6)

PurposeLegal basis
Local app functionalityArt. 6(1)(b) — contract performance
Cloud sync (when enabled)Art. 6(1)(a) — consent / Art. 6(1)(b) — contract
Error monitoringArt. 6(1)(f) — legitimate interest in reliable software
User feedbackArt. 6(1)(a) — consent (by submitting the form)

5. Third-Party Processors

We use the following processors under Art. 28 GDPR data processing agreements:

6. International Data Transfers

Some processors (notably Supabase Inc. and Sentry) are based in the United States and may process data outside the EU/EEA. For such transfers we rely on the EU-US Data Privacy Framework and/or the EU Standard Contractual Clauses (SCCs) where applicable.

7. Retention

8. Your Rights (GDPR Art. 15–22)

You have the right to:

To exercise these rights, contact us at support@stonemiller.freshdesk.com.

9. Supervisory Authority

You may lodge a complaint with the data protection authority of your EU member state. For the controller's place of residence (Germany), the competent authority is the State Commissioner for Data Protection of the respective federal state.

10. Security

All cloud-synced data is transmitted via HTTPS/TLS. Passwords are hashed by Supabase's authentication service (bcrypt-based) and never stored in plain text. Row-level security (RLS) ensures that each authenticated user can access only their own data.

11. Children's Privacy

Notigrade is intended for parents to track their children's grades. The app is not directed at children under 13 as end users. When parents enter their children's data, they act as the data controller for that data; data is stored locally by default and transmitted only when the parent enables cloud sync.

12. Changes to This Policy

We may update this policy as the app evolves. Material changes will be announced in the app or on this page. The “Last updated” date above reflects the current version.

13. Contact

For any privacy-related questions, please contact support@stonemiller.freshdesk.com.