DueBound Privacy Policy

Last updated: 18 September 2026

DueBound is made by DigiPlugLabs LLC. It is a homework planner: it takes an assignment and its due date, breaks it into steps, and schedules those steps into the free time a student actually has.

DueBound works without an account, and in that mode nothing leaves the device. Signing in is optional and exists so a student can use the same plan on their phone and their tablet. We show ads on the free tier and sell an optional subscription to remove them. We do not sell personal information, we do not use schoolwork for advertising, and we run no analytics or crash-reporting service of any kind.

The content that makes the app work: assignments, the steps inside them, due dates, courses, recurring commitments, study plans, grades you type in, completed study sessions and their notes, templates you save, and terms you archive.

If you sign in, this is stored in our database so it can reach your other devices. If you do not sign in, it stays on your device and we never see it.

Optionally: your name, school year, school, a goal GPA, and an avatar — either one of the emoji we offer or a photo you choose.

A photo you pick is uploaded to private storage that only your account can read. It is not public, not shared, and not readable by another user. Deleting your account deletes it.

An email address and password, handled by our authentication provider, Supabase. We also record the name and platform of each device you sign in on, so you can see what is syncing and remove a device you no longer use.  If you switch on Check new devices, we email a one-time code to your address whenever someone signs in on a device your account has not synced from before, and that device cannot sync until the code is entered. The setting is off unless you turn it on.

If you sign in, your preferences travel with your account, so the app looks and behaves the same on your other devices: light or dark mode, the color scheme you picked, your calendar layout, your focus and break lengths, and whether reminders are on.

If you use Syllabus Import, the image or document you choose is sent to our server and from there to Anthropic, whose model reads the assignment titles and due dates out of it. The image is used to produce that result and is not stored afterwards, by us or by them. What was found is shown to you for review before anything is added to your plan.

DueBound contains no analytics SDK and no crash-reporting SDK. We do not track how you use the app, we do not build a profile of you from your behaviour, and we do not know which screens you visit. We do not collect contacts, location, or anything from your device beyond what is described above.

The free tier shows a banner ad, served by Google AdMob. Paid tiers show none.  Students under 13, and anyone who has not told us their school year, have their ad requests marked as child-directed and below the age of consent. No advertising profile is built for them and no advertising identifier is used to personalise what they see.  On iOS, we ask through Apple's App Tracking Transparency prompt before any identifier is used, and only at the moment an ad is about to appear rather than at launch. Declining is fine — you still see ads, just less relevant ones. Subscribers are never asked, because they never see an ad.

In the EEA and the UK, Google's consent message is shown before ads are served, and your answer is honoured.  Google's own description of how it uses data in this role is at https://policies.google.com/technologies/partner-sites.

Pro and Family are auto-renewing subscriptions sold by Apple or Google and managed through RevenueCat. We are told whether your subscription is active. We never receive your card details.

You can link a parent or guardian so they can see your plan and how it is going. The link is made inside the app and either side can end it. Nobody gains access by knowing your email address — a link has to be accepted.  The limited cases where information leaves your device Supabase — authentication, database and file storage, so your data can reach your other devices. Resend — delivering the emails the app sends you: confirming your address, the one-time code when you sign in on a new device, and password resets. Resend receives your email address and the contents of those messages, and nothing else.

Anthropic — the model that reads a syllabus you photograph, described under Syllabus Import above.

Google AdMob — free-tier advertising.

RevenueCat — subscription status.

Apple and Google — payment processing and app distribution.

These are service providers acting for us. We share your data with nobody else, and we do not sell it.

Everything in transit is encrypted with TLS. Sign-in tokens are held in the device's secure store — the iOS Keychain or the Android Keystore — rather than ordinary app storage. In the database, access is enforced per user by row-level security, so one account cannot read another's records. Profile photos sit in private storage under the same per-user rule.

DueBound is used by students, some of them under 13. We collect nothing from a child beyond what the app needs to run, and advertising for them is configured as child-directed with no profiling. We never require a child to give us more than is reasonably necessary to use the app.  A parent or guardian can ask what we hold, have it deleted, or stop further collection, by emailing support@digipluglabs.com. Deleting the account in the app does the same thing immediately.

Where DueBound is used through a school, we act as a service provider: student data is used to provide the service and for nothing else.

Depending on where you live — for example under GDPR, UK GDPR, or CCPA/CPRA — you may have the right to access, correct, delete, port, or object to the processing of your information. Email support@digipluglabs.com and we will act on it.

We will change the date at the top, and tell you inside the app if a change is material.

DigiPlugLabs LLC

Winter Garden, Florida, USA

support@digipluglabs.com