Privacy Policy
Last updated: 25 September 2026
Who this is
Modulo (onmodulo.com) is operated by Muhammad Ehsan, as a sole trader. Throughout this policy, "we"/"us" means Muhammad Ehsan operating Modulo. For anything covered here — questions, requests, or complaints — contact hello@onmodulo.com.
What we collect
Only what's needed to run the service:
- Account information: your email address, username, display name, and an optional avatar image.
- Academic content you create: modules, semesters, sheets (typed notes and hand-drawn ink), assessments, and grade entries. This is your content — we store it so the app can show it back to you.
- Calendar data (if you use calendar sync): the calendar subscription URL you provide, and the events it contains.
- Public profile (optional, off by default): if you switch it on in Settings, anyone with the link can see your username, display name, avatar, the dates you were active (a study calendar and streak) and how many sheets and modules you have. It never shows your notes, email address or grades. You can switch it off at any time and the page stops being visible immediately.
- Lecture audio recordings (Premium feature, opt-in only): stored via Cloudflare R2, a third-party object storage provider, only if you actively choose to record.
- Google account tokens (only if you connect "Sign in with Google" or Google Drive backup): these are encrypted at rest and used only for the feature you enabled.
- Payment information: handled entirely by Stripe, our payment processor. We never see or store your card details ourselves.
- Basic technical data: standard web server logs, and error reports (via Sentry) that help us fix bugs — these capture technical details like stack traces, not the content of your notes.
Cookies
We use only strictly necessary cookies — a session cookie that keeps you logged in, and a CSRF token that protects your account from cross-site request forgery. We don't use advertising or analytics cookies, and we don't track you across other websites.
Why we process your data
To provide the service you've signed up for (storing and displaying your notes, syncing your calendar, tracking your grades), to process payments for Premium subscriptions, to send account-related emails (verification, password reset, and — for Premium users — a weekly digest of what's due), and to keep the service secure and working.
Who we share it with
We don't sell your data. It's shared only with the third-party services that make Modulo work, each acting as a data processor on our behalf:
- IONOS — our hosting provider. The application and your data are hosted on servers located in the European Union.
- Stripe — for processing Premium subscription payments.
- Google — only if you opt into Sign in with Google or Google Drive backup.
- Cloudflare — only if you use lecture audio recording (Premium), for storing the audio files.
- Sentry — for error monitoring, so we can catch and fix bugs.
How long we keep it
We keep your data for as long as your account is active. If you'd like your account and data deleted, email hello@onmodulo.com and we'll action it within 30 days. Some information may be retained longer where we're legally required to (for example, payment records for tax purposes).
Your rights
If you're in the UK or EU, UK/EU GDPR gives you the right to access, correct, export, or delete your personal data, and to object to or restrict how we use it. To exercise any of these, email hello@onmodulo.com. If you're not satisfied with our response, you can complain to the UK Information Commissioner's Office (ico.org.uk) or your local data protection authority.
Security
We take reasonable technical measures to protect your data (encrypted connections, encrypted storage of sensitive tokens, access controls), but no method of transmission or storage over the internet is completely secure, and we can't guarantee absolute security.
Age requirement
Modulo is intended for users aged 16 and over. We don't knowingly collect data from anyone younger.
Changes to this policy
If we make material changes, we'll update the date at the top of this page and, where appropriate, notify you by email.