CamGrader is a grading app built for teachers. This policy explains what data the app collects, where it goes, and how it is handled.
Guest users do not create an account. All classroom data stays on your device in a local database. Nothing is transmitted to our servers.
Signed-in users create an account with their email address. Signing in enables cloud backup, which stores your data on Supabase servers so it can be restored if you reinstall the app or switch devices. Before cloud backup is enabled, you are shown a plain-language consent screen explaining exactly what gets backed up and where it goes.
When you use CamGrader you create tests, scan answer sheets, and the app records:
For guest users, all of this stays on your device. Deleting the app removes it permanently.
For signed-in users, this data is also backed up to Supabase after you give consent. Camera frames are processed on-device and are never transmitted externally.
When you sign in, you provide your email address. CamGrader uses Supabase Auth to manage your account. A one-time sign-in code is sent to your email via Resend, an email delivery service. Resend receives your email address solely to deliver this code. No password is ever created or stored. Your email address is stored in Supabase and is used to identify your account and restore your backed-up data.
With your consent, CamGrader backs up the following to Supabase:
Cloud backup happens automatically in the background when a connection is available. Your device remains the source of truth. Backed-up data is stored on Supabase infrastructure hosted in South Korea and is governed by Supabase's Privacy Policy. See Section 13 for a full list of the service providers CamGrader uses and where each stores data.
CamGrader uses Sentry for crash reporting and performance monitoring. When the app encounters an unexpected error, Sentry automatically captures a report containing:
Crash reports never include classroom data, student IDs, test content, or scores. They are used solely to identify and fix bugs. Sentry data is stored in the European Union and processed in accordance with Sentry's Privacy Policy.
CamGrader also uses Sentry's Session Replay feature, which can record a video-like reconstruction of on-screen activity for a small sample of app sessions (5%) and a larger sample of sessions where an error occurs (75%), to help us understand and fix bugs that are hard to reproduce from a stack trace alone. All text and images on screen are masked in these recordings, so classroom data, student IDs, test content, and scores are never visible in a Session Replay recording. Session Replay data is stored and governed the same way as the crash reports described above.
CamGrader reads numeric student ID numbers from printed bubble grids on answer sheets. No student names, photos, or government-issued IDs are collected. As the teacher using the app, you are responsible for ensuring your use of student data complies with applicable regulations in your jurisdiction, including FERPA in the United States.
For signed-in users, student ID numbers and associated scores are included in the cloud backup described in Section 4. They are stored on your account only and are never shared with any third party.
CamGrader requests the following device permissions:
CamGrader includes an Export feature that lets you save a backup of your tests and results as a file, shared through your device's native share sheet. You choose where it goes. We do not receive a copy of any exported file.
You can delete your data at any time:
To request deletion by email, contact [email protected].
Data for active accounts is retained as long as the account exists. If you delete your account, your data is permanently removed from Supabase. Accounts that have been inactive for 24 months are notified by email and given 30 days to sign in before data is deleted.
CamGrader is intended for use by teachers and educational professionals. The app is not directed at children and does not knowingly collect personal information from anyone under the age of 13.
We may update this policy as the app adds new features. When we do, the "Last updated" date at the top of this page will change. We encourage you to review this page periodically. Continued use of the app after changes are posted constitutes acceptance of the revised policy.
CamGrader uses the following third-party service providers ("subprocessors") to operate the app. Each is bound by a Data Processing Agreement covering how it handles any personal data it processes on our behalf.
We review this list periodically and will update it if a subprocessor is added, removed, or changes where it stores data.
If you are a California resident, or a resident of another US state with a similar privacy law, you have rights over the personal information CamGrader holds about you: the right to know what's collected, the right to delete it (see Section 9), and the right to correct inaccurate information. To exercise any of these rights, contact [email protected].
We do not sell or share your personal information (as those terms are defined under California and similar state laws) to third parties for money or for their own advertising purposes. The subprocessors listed in Section 13 process data only on our instructions, under a Data Processing Agreement, to operate CamGrader — not to use it for their own purposes. Because we don't sell or share personal information, there's nothing for a "Do Not Sell or Share My Personal Information" request to opt out of, but we still honor the Global Privacy Control (GPC) signal as an opt-out preference where applicable.
We do not use sensitive personal information (such as precise geolocation, or the contents of your communications) for any purpose beyond providing the app's core functionality, so there is nothing to limit under a "Limit the Use of My Sensitive Personal Information" request.
We will not deny you service, charge you a different price, or provide a different level of quality because you exercised any of these rights.
Questions about this privacy policy, requests to delete your data, or general support inquiries can be sent to:
[email protected]
K2 Labs
SRTIP, Sharjah, United Arab Emirates
