Privacy Policy

Last updated: May 29, 2026

Scope

This policy covers wesleykamau.com and its sub-pages, including the /review course-management dashboard. wesleykamau.com is a personal site operated by Wesley Kamau. The /review feature is a single-user tool that the operator uses to manage his own coursework — there is no public sign-up and no third-party end users.

Data we collect

Authentication. A short PIN you enter to access /review. The PIN is stored only as a one-way SHA-256 hash; the raw PIN never leaves your browser.
Phone number (optional). Stored only if you enter one at /review/settings to receive SMS reminders.
Email address (optional). Stored only if you enter one to receive email digests.
Web push subscription (optional). The browser endpoint your device gives us after you grant notification permission.
Notification preferences. Quiet hours, channel toggles, daily SMS cap, nudge profile.
Assignment state. Status (todo / in-progress / done), pin/snooze flags, notes you type, AI-completion session history.
Activity logs. Per-notification log row (channel, timestamp, success/failure). These auto-delete 30 days after the notification is sent.
Standard server logs. Request IP, user-agent, and path, retained transiently by our hosting provider (Vercel).

How we use it

Send you SMS, email, and web-push reminders about your own assignment due dates — and nothing else.
Render your dashboard, priority queue, and grade projections.
Generate AI-assisted assignment drafts you explicitly request via the Complete-with-AI feature.
Debug failures via the notification log (30-day retention).

Who we share it with

No third party receives your data for marketing or advertising — ever.Your data is never sold, rented, or used for any purpose beyond delivering the dashboard's features directly to you. We use the following processors strictly to deliver the dashboard's own functionality:

Twilio — routes SMS messages from our servers to your phone. Twilio receives only the message body, your phone number, and our sender ID.
Resend — routes email messages. Receives the recipient address, subject, and body.
Anthropic — runs the Claude model that drafts assignment content when you click Complete-with-AI. Receives only the assignment material you are working on, never your contact info.
MongoDB Atlas — database hosting.
Vercel — web hosting and serverless function execution.
Browser push services (Apple, Google, Mozilla) — deliver web push payloads to your device after you opt in.

What we don't do

We do not sell, rent, or trade any of your data.
We do not use your data for advertising or marketing.
We do not share your data with affiliates, partners, or any party beyond the strict processors listed above.
We do not track you across other sites.

Your controls

Stop SMS. Reply STOP to any SMS, or toggle SMS off at /review/settings.
Stop push. Click Disable on the push card at /review/settings, or revoke notification permission in your browser settings.
Stop email. Toggle email off at /review/settings.
Delete your data. Email the address below; we will purge your settings record, assignment state, and notification history within 7 days.

Retention

Notification log rows auto-delete 30 days after they're sent.
Other records (settings, assignment state, AI session history) persist until you request deletion or the account is closed.

Security

All connections use HTTPS. Database access requires authenticated credentials stored as environment variables on our hosting provider. The PIN that protects the dashboard is hashed; raw PINs are never stored.

Changes

We may update this policy. The "last updated" date at the top reflects the most recent revision.

Contact

Questions or deletion requests: wesley@wesleykamau.com.