Effective November 13, 2026

Privacy Policy

The short version: GradeHippo shows you information from your school's StudentVUE account. Your password goes only to your school district. Your grades are stored on your own device. GradeHippo has no user accounts, no ads and no tracking, and it doesn't sell or share your information. The website counts visits with privacy-friendly analytics that use no cookies and never see your grades; the iPhone app has no analytics at all.

This policy covers the GradeHippo iPhone app and the website at gradehippo.com, including the web app at gradehippo.com/app ("GradeHippo", "we"). GradeHippo is independent and is not run by Edupoint or by your school.

What GradeHippo handles

To show your grades, GradeHippo signs in to your school district's StudentVUE service with the student ID and password you enter, and then reads your school records from it: classes, grades and assignments, schedule, attendance, hall passes, documents, school contact details, and basic student information such as your name, grade level, school and photo, when your district provides them.

This information comes from your school district and is sent from your district to your device. GradeHippo doesn't run a database or keep a copy of it on any server.

What's stored, and where

On iPhone

• Your password is not stored by GradeHippo. It's sent through the relay (below) to your district once to sign in. If you choose to, iOS's own Passwords app can save it, and that's handled by Apple, not by GradeHippo.
• Your district, student ID and a sign-in token from your district (so you stay signed in) are kept in the iOS Keychain on your device.
• A copy of your most recent grades and school information is kept on your device so the app opens instantly and works offline. Settings you choose (for example, which classes count as weighted) are stored on your device too.
• Signing out deletes the sign-in token, the cached grades and your settings from the device. Your district and student ID stay so the sign-in form is filled in next time; "Forget saved student ID" on the sign-in screen removes them, and deleting the app removes everything.

On the website

• Your password is not stored. It's sent through the relay (below) to your district once to sign in.
• If you choose "Keep me signed in", your district, student ID and sign-in token are kept in your browser's local storage; otherwise only for the current browser tab session.
• A copy of your recent grades is kept in your browser's storage (IndexedDB) so pages load quickly. Signing out clears it.

Who your information goes to

• Your school district. Your student ID and password, and every request for your records, go to your district's StudentVUE server (operated by your district or by Edupoint on its behalf). Your district's own privacy policies apply to what it does with them.
• Edupoint's district directory, only when you look up your district. On iPhone you can search by zip code or let the app use your location once: your location is converted to a zip code on your device, and only that zip code is sent. Your location itself never leaves your phone and isn't stored.
• The GradeHippo relay. Both the iPhone app and the website send each request to a small relay running on Cloudflare Workers, which forwards it to your district and passes the answer back. The relay doesn't store, log or look at your password, your grades or anything else in the requests it forwards. Like any website, our hosting provider, Cloudflare, records basic technical information about requests (such as IP address, time, and the address requested) for security and reliability; see Cloudflare's privacy policy. The relay also uses your IP address, in memory only, to limit how many requests one person can send per minute. If you looked up your district by zip code, that zip is sent along so the relay can check that the district is one Edupoint's directory lists.
• Cloudflare Web Analytics, on the website only. To know roughly how many people use GradeHippo, the website counts page visits with Cloudflare Web Analytics. It uses no cookies, doesn't follow you across other websites and doesn't build a profile of you. It records the page address, the referring page, your browser and device type, your country, and page-load speed. It never sees your password or grades. The iPhone app has no analytics.

GradeHippo doesn't share your information with anyone else. There are no advertising networks, data brokers, social media trackers or tracking cookies in the app or on the website, and we never sell personal information.

Notifications

If you turn on hall-pass alerts, GradeHippo checks your hall pass status from your district and shows a notification on your device when it changes. These notifications are created on your device; no push notification service receives your information.

Students under 13

GradeHippo is meant for students using their own StudentVUE account. It doesn't collect personal information from anyone, including children under 13: information about you goes between your device and your school district, and we never receive it. If you're under 13, check with a parent or guardian before using GradeHippo.

Your choices

• Sign out at any time to remove your sign-in token and cached data from the device.
• On iPhone, location is only used if you tap "Use my location" while choosing your district, and you can turn location access off in Settings.
• Since we don't hold any of your information, there is nothing for us to export or delete. To view, correct or delete your school records, contact your school district.

Security

All connections to your district, to Edupoint's directory and to the relay use HTTPS. On iPhone, sign-in details are kept in the Keychain and don't sync to other devices.

Changes

If this policy changes, we'll update it here and change the date at the top. If a change affects how your information is handled, we'll also point it out in the app.

Contact

Questions about privacy? Email [email protected].