Privacy

This policy describes Classmate by Nexup, the campus app, and this website, nexupnow.com. It is based on how those products work now.

Homelander is still in development and is not offered as a public product on this site. This policy will be updated before Homelander collects personal information from the public.

Creating an account stores the details Classmate needs to sign you in and show the right campus:

• Email address. If you use Sign in with Apple, Apple may provide a private relay address instead of your personal inbox.
• Username, and a name if you add one.
• The campus you select.
• Classes you follow, and whether you have finished the class-selection step.
• A timestamp used to mark in-app notifications as seen.

Classmate stores what you submit so other people on that campus can see it. That includes meetup posts, campus posts, comments, votes on campus posts, reports of posts or comments, and accounts you block.

Posts and comments are stored with the account that wrote them, including campus posts that are shown without a name. Those posts are not anonymous to Nexup. Deleting the account deletes posts tied to it, as described below.

Reports include the account that filed them. Other users cannot read the reports collection.

You can sign in with email and password, Google Sign-In, or Sign in with Apple. Firebase Authentication, a Google service, stores the account credentials needed to recognize you. Google or Apple receives the sign-in request when you choose that provider. Nexup does not receive your Google or Apple account password.

Classmate uses Firebase to run the app: Authentication, the database that holds accounts and posts, Cloud Functions for account deletion and optional drafting, and App Check, which helps confirm that sensitive requests come from the Classmate app.

Those services produce operational records, such as function logs. A failed deletion or a failed drafting request can log a user id. This policy does not state a fixed retention period for those logs.

The current Classmate app does not ask for your location, photo library, contacts, camera, or microphone, and it does not include a feature that uploads photos or files. The Firebase configuration shipped with the app has Analytics and Ads turned off. Classmate does not use your information to serve advertisements. Some libraries that ship with Firebase can include measurement code even when those products are switched off in the app configuration. Whether a particular build transmits measurement data is something Nexup confirms from the archived app and the Firebase project, not from this page alone.

Classmate can rewrite a post or suggest labels if you choose that tool. You do not have to use it.

When you do, the text you submit, an optional course label, and a style (clearer, friendlier, shorter, or more academic) are sent to a Nexup Cloud Function. You must be signed in, and the function requires App Check. The function sends that text to OpenAI’s API. The model named in the current function is gpt-4o-mini. OpenAI returns a rewrite or suggested labels, and the function sends that result back to your phone.

The function does not write the prompt or the rewrite into Classmate’s database. A rewrite is stored only if you later post it yourself. Nexup does keep a rate-limit record for the account: how many drafting requests were made in the current window, and timestamps. That record does not contain the post text.

This policy does not say that OpenAI stores, deletes, or trains on those prompts. The Classmate code sends the text to OpenAI’s API and does not record OpenAI’s retention settings. OpenAI’s handling of API data is governed by OpenAI’s terms and by the settings on Nexup’s API account.

Nexup uses the information above to provide and protect Classmate:

• Create your account and keep the sign-in working.
• Show the campus and classes you selected, and the posts and comments in those communities.
• Let you vote, block accounts, and report content.
• Run optional drafting when you ask for it, and limit how often one account can call it.
• Delete the account and the associated records described in this policy when you ask.

Nexup does not sell personal information. The following companies process information because the product needs them to:

• Google Firebase and Google Cloud, for authentication, the database, Cloud Functions, App Check, and related infrastructure.
• Google, when you choose Google Sign-In.
• Apple, when you choose Sign in with Apple, and when account deletion asks Apple to revoke that app’s token.
• OpenAI, only for the text you submit to the optional drafting tools.
• Supabase, for the early-access form on this website, described below.

Nexup may disclose information if the law requires it, or when it is needed to investigate abuse of Classmate, such as a report about a post. Reports are stored so they can be reviewed. This page does not promise a review time.

Classmate restricts database access with security rules, requires a signed-in user for account deletion and drafting, and uses App Check on those functions. Transmission and storage on the internet are not free of risk, and these measures do not make the service immune to unauthorized access.

Account details and content you post are kept while the account exists, because Classmate needs them to show your campus and your posts. This policy does not state a single retention period for server logs, backups, provider copies, or the AI rate-limit record.

Early-access signups on this website are kept so Nexup can write to you about Classmate. You can ask for that address to be removed, using the contact below. There is no fixed expiry in the signup code.

You can delete your Classmate account in the app. Open Settings and choose Delete account. You do not need to email Nexup first.

Classmate asks you to confirm it is you before deletion runs. An email-and-password account enters its password. A Google account signs in with Google again. An account that uses Sign in with Apple signs in with Apple again, and Classmate asks Apple to revoke that app’s token.

When that succeeds, Classmate calls a Cloud Function that deletes the signed-in account and the data tied to it in Classmate’s database:

• The Firebase Authentication user, so the same sign-in can no longer be used.
• The profile document (email, name, username, selected campus, followed classes, and related account fields) and the list of accounts you blocked.
• Meetup posts you wrote, including comments and agent results stored on those posts.
• Campus posts you wrote, including the votes stored on those posts. Posts shown without a name are still tied to the account that wrote them, and they are deleted with the account.
• Comments you wrote on other people’s posts. The comment count on those posts is reduced.
• Reports you filed.
• On that device, the local list of posts and comments you had hidden.

If deletion fails or you cannot sign in to finish it, email support@nexupnow.com from the address on the account and describe what happened. That address is for help with the process. It is not an extra step when deletion in Settings works.

The same deletion function does not remove everything that might mention the account:

Official class catalogs and professor listings. Those are not personal account data.

Votes you cast on other people’s campus posts. The deletion function removes votes stored on posts you wrote. It does not walk other people’s posts to remove your vote.

A rate-limit record used to slow repeated AI requests. That record stores a request count and timestamps for your account, not the text you submitted. The deletion function does not remove it.

Server logs created while operating the service. Cloud Function logs can include a user id. This policy does not set a retention period for those logs.

Text already sent to OpenAI if you used drafting before you deleted the account. Deleting the Classmate account does not change how OpenAI handles that earlier request. See the AI section of the privacy policy.

Browsing nexupnow.com does not require an account. If you join the early-access list, the form sends your email address, an optional university, and which page the form was on. Those fields are stored in Supabase so Nexup can contact you about Classmate. The form does not ask for a password.

The site does not use a cookie banner and does not run its own advertising or analytics product. Hosting and delivery of the pages can still create ordinary server logs at the company that hosts the site. This policy does not name a retention period for those logs.

Classmate is built for university students. It is not a product for children, and this website does not knowingly collect information from children.

If Classmate’s data practices change in a way that matters to this policy, the “Last updated” date on this page will change with the text.

Privacy questions, privacy requests, and help deleting a Classmate account: support@nexupnow.com. Product support is also on the support page.

General questions about Nexup, including business and partnerships: contact@nexupnow.com.