Heads Up Privacy Policy

Last updated: 12 October 2026

Heads Up is a browser extension that shows you graded coursework your Canvas To-Do list does not surface. This policy describes exactly what it sends off your device, because that is the only part that matters.

What stays on your device

Your Canvas access token is never sent to us. The extension creates it on your own Canvas account, stores it in the browser's extension storage, and uses it only to call your own school's Canvas server. We never receive it. Anyone who got hold of it could use it on your Canvas account, which is why it never leaves your device.

The token lasts 90 days, which is the longest Canvas allows. Heads Up replaces it with a new one before it runs out and keeps doing so until you disconnect, so you are not asked to reconnect. That renewal happens on your device against your own Canvas account. You can end it at any time with Disconnect, or by deleting the token yourself in Canvas under Account, Settings, Approved Integrations.

Also local only: your Canvas user ID, your name, your email address, your grades, and the list of pages the extension has read.

When you mark work as done, or mark it as important, those lists are stored in your own Canvas account so your own devices can see them. They are not sent to us and we do not store them.

Heads Up does not track your browsing. It reads your Canvas account through Canvas's own API. It does not observe what other sites you visit.

Heads Up starts fetching your Canvas courses as soon as you open it, on your device, so your list is ready when you connect. Nothing is sent to Heads Up until you press Connect.

What is sent to us

When the extension reads your course pages, it sends to our extraction service:

That page text is sent onward to OpenRouter and to the AI model provider that performs the extraction. We do not store the page text itself. What we keep is what was found on the page: each assignment's title, due date, and the short quote from the page that shows where it came from. That result is filed under a one-way hash of the page text, a fingerprint that cannot be turned back into the text, so that a page already read for one student does not have to be re-read for another. Results are deleted after 14 days.

Course pages are written by teachers and can mention people by name. We do not ask for names and do not use them, but we cannot promise none are present in page text.

Abuse prevention. To limit how often the extractor can be called, we count requests per day under a scrambled code made from your network's IP address and a secret key that changes every 3 days. The IP address itself is never stored, and the code cannot be turned back into it. We also keep your browser's user agent and basic request details. These records are deleted after 30 days.

Error reports. When something goes wrong after you connect, Heads Up sends us an error report so we can fix it. A report describes the problem, not you: what failed, the kind of Canvas request involved (never its address, your school, or any course or page), the version of Heads Up, your browser and its language and time zone, and technical details of what the extension was doing at the time. Reports are kept for 90 days.

Usage statistics. Once a day, after you connect, Heads Up sends us one anonymous record so we can tell whether it is working for the people using it: the date, the week you first connected, which week of use this is and the last week you used it before, the version of Heads Up and which browser it runs in, roughly how many times it checked your courses, how many times you opened it that day, how many items your Canvas To-Do list was not showing you, and how many such items it found that day for the first time. A record contains no persistent identifier: only a random value made fresh for that one record, so a record sent twice is counted once. It carries neither the random installation identifier above nor anything about your school, your courses, or any assignment. Records are kept for 90 days; totals added up across everyone, which describe no one, are kept longer. Nothing is sent before you connect, and disconnecting deletes anything not yet sent.

Uninstalling. If you remove Heads Up while connected, your browser opens a page of ours explaining how to delete the Canvas access token it created. Opening that page tells us the week you first connected, the last week you used Heads Up, its version and your browser, with no persistent identifier, only a random value so a reloaded page is counted once. The page has an optional box for telling us what didn't work; anything you type there is sent only if you press Send, and is kept for a year.

What we never do

Diagnostics files

If something looks wrong, you can save a diagnostics file from the popup (Diagnostics, then Save file). Heads Up builds it on your device when you ask and saves it to your computer. It is never sent anywhere automatically; it reaches us only if you choose to send it.

The popup lists what is in it before you save. It holds your courses, modules and assignments as Canvas lists them, with due dates and whether you turned each one in; which module pages Heads Up read or skipped and why; what Heads Up found on each page; and your list as it shows now. By default it also holds the text of your module pages and assignment instructions, which you can leave out.

It never holds your Canvas token, your name, email or student ID, your scores or grades, or anything you wrote or turned in. If you send us one, we use it only to fix the problem it shows and delete it once that is done.

Limited Use

Heads Up's use of information received from your Canvas account adheres to the Chrome Web Store User Data Policy, including the Limited Use requirements. We use that information only to show you the coursework your Canvas To-Do list doesn't surface, and to count, anonymously, how much of it Heads Up finds (see Usage statistics above). We do not sell it, use it for advertising, or use it to determine creditworthiness or for lending. We do not transfer it to anyone except as needed to provide that feature: module page text is sent to our AI model provider, through OpenRouter, to find assignments. Beyond that, we transfer it only to comply with the law, to protect against fraud or abuse, or as part of a merger, acquisition or sale of assets, and in that last case only after asking for and getting your explicit permission first. No person reads your information unless you ask us to, for example by sending us your diagnostics, or when it is needed for security or required by law.

Deleting your data

Disconnecting inside the extension deletes the local copy of your token, your results, and your marked-done list, and asks Canvas to revoke the access token on your account. If Canvas does not confirm the token is gone, the extension tells you so, and you can remove it yourself as described below. Once the token is revoked, Heads Up can no longer reach your Canvas account at all.

Your marked-done and marked-important lists stay in your own Canvas account, where reconnecting will find them again. What was found on your pages is deleted from our cache after 14 days.

You can also revoke the extension's access at any time from Canvas directly: Account → Settings → Approved Integrations.

Children

Heads Up is used by school students, including students under 13. It collects no personal information from anyone, of any age, beyond what is described above, and shows no advertising.

Contact

Questions about this policy, or requests about data: tryheadsup@gmail.com

Changes

If what leaves your device changes, this page changes with it, and the date at the top moves. The extension's listing links here.