Privacy Policy

Modulo Flow operates Modulo Flow and is responsible for the personal information described here. If you have any question about your data, the contact address is at the bottom of this page.

• Account details: your email address, your name if you give one, and, if you sign in with Google or Microsoft, the basic profile they return.
• Onboarding details: the university, degree, and learning-management system you tell us during setup, so the app can match your institution. You can skip these.
• Your coursework: the outlines, timetables, notes, files, assessments, and questions you put into the app.
• Usage and AI metering: enough to run the service and keep it fair: sign-in events, and a per-account count of AI requests and their cost.

We do not run third-party analytics, session recording, or advertising trackers. There is no ad pixel on this site.

• to run the service: build your plan, track assessments, and answer your questions;
• to keep it working and fair, including rate-limiting AI use per account;
• to secure accounts and prevent abuse;
• to contact you about the service, including while it is in testing.

We do not sell your personal information, and we do not use your content to train AI models.

Two features can read your own course material: building recall cards from your notes, and answering questions using your files. Both are off by default and turn on only with your explicit consent, which you can withdraw at any time. Withdrawing it deletes the index built from your files rather than merely hiding it, and the app shows you exactly what has been read.

Your data is stored in Sydney, Australia, and the app is served from the same region, so your coursework does not leave the country to be stored. Each account is isolated at the database level, not only by application code, so a request for your data cannot return anyone else’s.

We use a small number of trusted providers to run the service. They process data only to provide their part of it, under their own security and privacy obligations:

• Anthropic: the AI provider. The relevant parts of a question you ask (which can include text or files you attach) are sent to Anthropic to generate an answer.
• Hosting & database: our cloud hosting and managed database, located in Sydney.
• Sign-in & email: providers such as Google, Microsoft, and Resend, used for authentication and to send you sign-in links.

On the desktop app, connecting your learning-management system (Blackboard or Canvas) keeps that session encrypted on your own machine. Your LMS username and password are never seen, sent, or stored by us.

We keep your data while your account exists. When you delete your account, we delete your personal information and content, except where we must keep something to meet a legal obligation. You can ask us to delete your data sooner.

You can access, correct, export, or delete your data, and withdraw any consent you have given. Under the Australian Privacy Principles you may also complain to us and, if unsatisfied, to the Office of the Australian Information Commissioner. To exercise any of these, email the address below.

We protect your data with per-account database isolation, encrypted connections, and access controls. No system is perfectly secure, but we design for the assumption that a bug above the database must not be able to expose another account’s data.

The service is intended for secondary and tertiary students. If you are under 18, you should use it with a parent or guardian’s permission. We do not knowingly collect data from children under the age at which consent is required in their country without that permission.

We may update this policy as the product changes; the “last updated” date above reflects the current version. If a change is significant, we will make a reasonable effort to tell you.

Questions about your privacy, or a request about your data? Email info@moduloflow.com.