For schools and districts

Reviewing Daylit

Daylit is a free dashboard that gives a student their bell schedule, a live class countdown, an agenda, and a GPA tracker. This page answers the questions a technology or privacy reviewer usually asks first.

At a glance

Cost
Free for students and schools. No ads, no paid tier.
Audience
Students in grades 6 to 12, on personal phones and school Chromebooks.
Install
None. It runs in the browser at www.daylit.net.
Sign-in
Email and password, or Google. No school roster, directory, or LMS connection is required.
Student data
Name the student types, email, schedule, assignments, tasks, and grades they enter themselves.
Not collected
Government IDs, home addresses, phone numbers, location, photos, or health information.
Tracking
No ads, no third-party analytics, no advertising identifiers. Data is never sold or used for profiling.
Hosting
Vercel (web) and Supabase (database and sign-in), in the United States.
Protection
HTTPS everywhere, encryption at rest, and row-level security so each account can only read its own rows.
Deletion
Students can reset their data in the app, or email us to delete their account. Server data is removed within 30 days of a request.

Our commitments

  • Student data is used only to run Daylit for that student.
  • We do not sell, rent, or monetize student data, and we never show students ads.
  • We collect the fewest fields that make the app work, and nothing is required beyond an email.
  • We delete a student’s data on request and tell the school if we are legally forced to disclose it.
  • We notify affected users within 72 hours of learning about a breach.

Who controls the data

Each account belongs to the student, not to us or the district. There is no school admin console yet, so a school that wants a record exported or removed emails us, and we act on a request from the student, a parent, or the school. If districts need a console, rostering through Clever or ClassLink, or single sign-on, tell us. That is how we decide what to build next.

Subprocessors

VendorPurposeData
VercelWeb hostingRequest metadata (IP, time)
SupabaseDatabase and sign-inAccount and app content
ResendAccount emailsEmail address
GoogleOptional Google sign-inOnly if the student chooses it
GroqTriage of reported messagesOnly when messaging is on. Currently off.

Social features

Group messaging exists in the code but is switched off in production. There is no student directory, no search, no photos or file sharing, and no way to contact a student who has not shared an invite code in person. If it is ever turned on, schools will be told first and it can stay off for a district.

Network allowlisting

If a web filter blocks Daylit, ask your filter administrator to allow www.daylit.net and recategorize it as Education or Productivity. Daylit loads no ads or third-party trackers. Email hi@daylit.net with the filter name and we will help with the vendor’s review form.

Agreements and documents

  • Privacy policy and terms of use, written for students to read.
  • A signed student data privacy agreement, if your district or state requires one. Send us your template or the National Data Privacy Agreement and we will review it.
  • Data export or deletion for any student, on request from the student, a parent, or the school.

Accessibility

Daylit uses semantic markup and visible keyboard focus, respects reduced-motion and dark-mode settings, and targets WCAG 2.1 AA. An independent accessibility audit has not been done yet, so we do not claim formal conformance. If your district needs one, tell us and we will prioritize it.

Contact

hi@daylit.net. A person reads every message.