Daily Summa LLC ("Daily Summa," "we," "us," or "our") operates the Daily Summa service, which delivers automated homework and assignment digest messages to families via email and SMS. This Privacy Policy explains what information we collect, how we use it, who we share it with, and what rights you have regarding your data.
By using Daily Summa, you agree to the practices described in this Privacy Policy. If you do not agree, please do not use our service.
Who We Are
Daily Summa LLC is a Florida limited liability company headquartered in Tampa, Florida. We provide a subscription service that connects to your school's learning management system (currently Canvas LMS) using a Canvas API access token you voluntarily generate and provide, and delivers daily academic digest messages to parents and guardians.
Daily Summa is an independent service and is not affiliated with, endorsed by, sponsored by, or a product of Instructure, Inc. or Canvas LMS. Canvas is a trademark of Instructure, Inc. Daily Summa accesses Canvas solely through API tokens voluntarily generated and provided by parents and guardians who authorize Daily Summa to act on their behalf.
Information We Collect
2.1 Information You Provide Directly
When you enroll with Daily Summa, you provide:
- Parent or guardian name and email address
- Student first name and grade level
- Student email address (optional)
- Your school's Canvas LMS URL
- A Canvas API access token (read-only, generated from your Canvas account)
- Phone number (if you opt into SMS alerts)
- Notification preferences
2.2 Information We Access From Canvas
Using the access token you provide, we retrieve the following read-only academic data from your school's Canvas instance:
- Assignment names, due dates, and submission status
- Course grades and grade changes
- Teacher messages and announcement content (where accessible)
- Grading period information
We access only the data necessary to generate your daily digest. We do not access, store, or process any data beyond what is required for this purpose.
2.3 Information We Do Not Collect
- We do not collect your Canvas login password
- We do not collect payment card numbers directly (payments are processed by Stripe)
- We do not collect location data
- We do not use cookies or tracking pixels on our website beyond what is necessary for form submission
How We Use Your Information
We use the information we collect solely to:
- Generate and deliver your daily homework and assignment digest emails and SMS messages
- Detect changes in grades, submission status, and upcoming deadlines
- Alert you to missing assignments, grade drops, or urgent teacher communications
- Maintain your account and notification preferences
- Respond to support requests
- Send service-related communications (account changes, token expiration alerts)
How We Store and Protect Your Data
4.1 Storage Location
Your data is stored on a dedicated server hosted by a U.S.-based cloud infrastructure provider that maintains SOC 2 Type II certification and industry-standard physical and network security.
4.2 Encryption
Canvas API access tokens are encrypted at rest using industry-standard symmetric encryption. The encryption key is stored separately from the data it protects and is never written to disk in plain text.
All data transmitted between your browser and our website is encrypted using TLS (HTTPS).
4.3 Access Controls
Access to family data is restricted to authorized Daily Summa systems and personnel. Raw academic data retrieved from Canvas is used only to generate digest messages and is not retained beyond what is necessary for day-over-day change detection.
4.4 Data Minimization
We cache only what is necessary to detect changes between daily runs — primarily grade snapshots and submission status. We do not build long-term archives of your student's academic history.
Third-Party Services
Daily Summa uses the following third-party services to operate. Each service receives only the minimum data necessary for its function:
- Google (Gmail API) — used exclusively to send digest emails from hello@dailysumma.com. Daily Summa requests only the
gmail.sendscope and does not read, access, modify, or store any Gmail inbox content, drafts, labels, or email history. See policies.google.com/privacy. - Twilio — used to deliver SMS alert messages to your phone number when you opt into SMS notifications. Twilio receives your phone number and message content. See twilio.com/legal/privacy.
- Formspree — used to process enrollment and token refresh form submissions on our website. Formspree receives form field data you submit. See formspree.io/legal/privacy-policy.
- Stripe — used to process subscription payments. Stripe receives payment information directly and we do not store card numbers. See stripe.com/privacy.
- DigitalOcean — provides the U.S.-based cloud server infrastructure on which Daily Summa runs. See digitalocean.com/legal/privacy-policy.
We do not sell, rent, or share your personal information or your student's academic data with any third party for marketing, advertising, or commercial purposes.
Student Data and FERPA
Daily Summa is designed for use by parents and legal guardians of K–12 students. We access student academic data only through Canvas API access tokens voluntarily generated and provided by the parent or guardian who holds rights to that information.
We do not contract directly with schools or school districts in our current model. As a result, we operate as a service used directly by families rather than as a school official under FERPA. We nonetheless treat all student academic data with the care and discretion that FERPA's principles require.
We do not:
- Sell student data
- Use student data for behavioral advertising
- Disclose student data to any third party except as described in Section 5 above
- Retain student data after account cancellation beyond the deletion period described in Section 8
Children's Privacy (COPPA)
Daily Summa is a service for parents and guardians aged 18 and older. We do not knowingly collect personal information directly from children under the age of 13. Student academic data is collected from Canvas on behalf of the parent or guardian who enrolled, not directly from the student.
If you believe we have inadvertently collected information from a child under 13 in a way that conflicts with COPPA, please contact us at privacy@dailysumma.com and we will delete it promptly.
Data Retention and Deletion
We retain your family's data for as long as your subscription is active. When you cancel your subscription or request deletion:
- Your family configuration file is deleted from our server within 7 days of your cancellation request
- Cached grade and submission data is deleted within 7 days of your cancellation request
- Your email address is retained for up to 30 days for transactional purposes (final billing confirmation, cancellation confirmation) and then deleted
To cancel your subscription or request deletion of your data, email privacy@dailysumma.com with your family name and the subject line "Cancel My Account." We will confirm cancellation and data deletion within 7 days.
You can revoke Daily Summa's access to your Canvas data at any time by deleting the access token from your Canvas account settings under Account → Settings → Approved Integrations.
Your Rights
You have the right to:
- Access the personal information we hold about your family
- Correct inaccurate information
- Request deletion of your data
- Withdraw consent and cancel your subscription at any time
- Receive a copy of your data in a portable format
To exercise any of these rights, contact us at privacy@dailysumma.com. We will respond within 10 business days.
Changes to This Policy
We may update this Privacy Policy from time to time. When we do, we will update the "Last Updated" date at the top of this document and notify active subscribers by email at least 14 days before any material changes take effect.
Continued use of Daily Summa after the effective date of a revised policy constitutes acceptance of the updated terms.
Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy or how we handle your data, please contact us:
We are a small team and we respond to every inquiry personally.