Privacy Policy

Cue (“Cue”, “we”) helps students find deadlines in their email and tells them when to start each one. Cue is a student-built project created for the AfroTech x PROPEL Future of XYZ Challenge and is currently in testing with invited students. This policy explains what Cue reads, what it keeps, who helps us process it, and how you can delete it. Questions: hello@yourcue.me.

What Cue accesses

• Your Google account basics: your name, email address and profile photo, used to sign you in and show who is signed in.
• Your Gmail, read-only: with your permission (the gmail.readonly scope), Cue reads messages from roughly the last 30 days when you run a scan. Cue cannot send, delete, label or change your email.
• Emails you paste in: if you paste an email into Cue, we process it the same way.

What Cue keeps

• For each email it looks at: the subject, the sender, the date it arrived, and a short snippet of at most 500 characters. Cue never stores the full text of your emails.
• The deadlines and tasks Cue suggests, which ones you accept, edit, dismiss or finish, their start-by dates, and the reminders and in-app alerts created for them.
• Your settings: time zone, date format, and whether you want reminder emails.
• A Google sign-in token that lets Cue run scans you start. It is kept in a server-only table that your browser and other users can never read.
• If you turn on notifications on a device: that browser’s push subscription (an address and keys from its push service), one per device, kept in a server-only table. Turning notifications off removes it.
• Your appearance choice (light, dark or system) is saved only in your browser, not on our servers. We use cookies only to keep you signed in.
• We count anonymous page views with Vercel Web Analytics, which uses no cookies. No email content is ever part of it.

How Cue uses it

• To find deadlines and requirements in your email and show them to you for review.
• To work out when you should start each task and send you reminders, in the app and by email.
• To count totals across all testers (for example, how many emails were scanned and how many suggestions were accepted) for our competition pitch. These counts never include email content or anything that identifies you.

We do not sell your data, use it for advertising, or build profiles for anyone else. People do not read your email: deadlines are found by automated processing. We would only look at stored data for a specific account if you ask us to (for example, to fix a problem you report), for security reasons, or to comply with the law.

Google user data

Cue’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Gmail data is used only to provide the deadline-finding features you see in Cue, is not transferred to others except as described below to provide those features, and is never used for advertising or to train generalized AI models.

Who processes data for us

Cue relies on a few service providers, each only for the job listed:

• Anthropic (Claude API): the text of an email being scanned (up to about 20,000 characters) is sent to Anthropic’s Claude model to identify deadlines and requirements. Anthropic processes it to return the result; under its commercial terms, API data is not used to train its models.
• Supabase: our database and sign-in provider; stores the data listed in “What Cue keeps”.
• Resend: delivers reminder emails. It receives your email address and the reminder text (the task title and dates).
• Your browser’s push service (Google Firebase Cloud Messaging for Chrome and Android, Apple for Safari and iPhone, Mozilla for Firefox): if you turn on notifications, reminders reach your device through it. It receives the reminder text (the task title and dates), encrypted so only your device can read it.
• Vercel: hosts the Cue website and app, and counts anonymous page views.
• Google: provides sign-in and the Gmail API.

Deleting your data

• In Cue, open Profile and choose Disconnect Gmail & delete my data. Cue asks Google to revoke its Gmail access, then deletes your Cue account and everything in it: tasks, reminders, alerts, scan history, stored email details, settings, push subscriptions and the Google token. If Google’s revoke step fails, the deletion still happens, and you can remove access yourself as described below.
• You can also remove Cue’s access at any time from your Google Account’s third-party access settings.
• Or email hello@yourcue.me and we will delete your account and data.

Otherwise we keep your data while your account is active, so Cue can avoid duplicates and keep your reminders.

Security

Data is sent over HTTPS. Every table is protected so each account can reach only its own rows, sign-in tokens and API keys stay on the server, and email content is treated as untrusted data. No system is perfectly secure; if you think something is wrong, tell us at hello@yourcue.me.

Who Cue is for

Cue is built for college and university students. It is not directed to children under 13, and we do not knowingly collect their information.

Changes

If we change how Cue handles your data, we will update this page and its date, and tell testers about significant changes before they take effect.