1. Who is responsible for your information
AnyGraide is run by ANYGRAIDE WEBSITE APPLICATION SERVICES, a sole proprietorship registered with the Department of Trade and Industry (Business Name No. 8316133), at Fisheries Ave, Zone 2, Barangay Zone 2, City of Talisay, Negros Occidental. Its proprietor is Andrew Joseph Prudente Weber.
- For your own account information, we are the personal information controller.
- For your students' information, you and your school are the controller. We act as your personal information processor, on your instructions. Section 5 explains what that means.
Data Protection Officer: Andrew Joseph Prudente Weber — andrewjosephpweber@gmail.com.
2. What we hold about you, the teacher
- Your account — your email address; your password, stored only as a one-way hash we cannot read; your name; your school; the level you teach and the subject area you teach; your department, if you gave one before 25 September 2026; and, only if you answer them when you sign up, the subjects you teach this term, how long you have been teaching, whether you teach at one school or more, and how you heard of AnyGraide.
- Your work — your classes, your syllabi and the topics read out of them, your uploaded teaching materials, the tests AnyGraide builds for you, and your school letterhead if you upload one.
- How you use the site — which screens you open and which actions you take, keyed to your account. These records carry counts and identifiers, never a student's name or email.
- Payments — which plan, which period, the amount, and whether the payment succeeded. We never see or hold your card number or your GCash credentials.
- Error reports — when something goes wrong, a technical report goes to our error monitoring service. It can include the page you were on and your internet address.
3. What happens to the files you upload
This differs by the kind of file, and the difference is worth knowing.
Teaching materials you use to make a test — handouts, modules, reviewers, chapters. The file itself never leaves your computer. Your browser opens the PDF, pulls the text out, and sends only that text to us. We never receive the original file, so there is nothing of it for us to store. We do keep the text, and the tests built from it.
Your syllabus. The file is sent to our server so we can read it. The text is pulled out on our own machines — we never send a syllabus to an outside reading service. A scanned syllabus is refused rather than sent away to be read. We keep the reading (your topics, outcomes and course details) and a fingerprint of the file. We do not keep the syllabus file itself, and once a syllabus is published it cannot be read again.
A reading shared between schools. Many teachers upload the same official document. Where the same file has already been read for two or more different schools, we treat that reading as a reading of a public document and may reuse it for the next school that uploads it, instead of reading it again. This never happens with a document only one school has uploaded.
Your school letterhead. This one file we do keep, so your tests can carry it.
4. What is shared with other teachers, and what is not
Not shared: your uploaded materials, your syllabus reading for your own school, your classes, your students, their papers or their marks. Your uploads are held in a separate lane in the system and are scoped to your account.
Shared: when you build a test from a textbook already in AnyGraide's library, the questions written for you are added to the shared question bank and may be used again for another teacher working on the same chapter. Those questions are written from the shared textbook, not from anything you uploaded.
5. Your students' information
You decide; we carry out. When you enter a class list or scan your students' papers, you and your school are the ones responsible under the Data Privacy Act for deciding it should happen. We handle that information to do the job you asked for, on your instructions, and for nothing else.
What we hold about a student:
- name, student number, email address and phone number, as you or the student enters them;
- a photo of their handwriting, where one is supplied, used to work out whose paper is whose;
- the scan or photograph of their paper;
- what our reading of that paper says, the mark proposed, the mark you recorded, and every correction a human made to it;
- if you send a student their marked paper, their name, email and score are used to send it.
Why this is sensitive, in the legal sense. Section 3(l) of the Data Privacy Act defines sensitive personal information to include information about a person's education. The National Privacy Commission has said this covers a student's grades, performance and awards (Advisory Opinion 2022-014). A student's name attached to their marks is therefore sensitive personal information, and the Act's stricter rules apply to it.
Before you upload student work, tell your school and make sure your school agrees. If your school wants a written agreement with us, ask — we have one ready, and the Act's implementing rules require one between a controller and its processor.
6. Why we process, and on what basis
| What we do | Why | Our basis |
|---|---|---|
| Run your account and let you sign in | So you can use AnyGraide | Necessary for our contract with you (§12(b)) |
| Read your syllabus and materials, build your tests | It is the service you asked for | Necessary for our contract with you (§12(b)) |
| Read and mark your students' papers | It is the service you asked for | We act as processor; the basis belongs to your school |
| Email you about your account | To run the service | Necessary for our contract with you (§12(b)) |
| Take payment | To sell you a plan | Necessary for our contract with you (§12(b)) |
| Record how the site is used, and errors | To keep it working and improve it | Our legitimate interests (§12(f)) |
| Improve how AnyGraide reads handwriting | To make it work on Filipino papers | Consent — see section 7 |
We do not use your information for direct marketing, and we do not profile you for advertising.
7. Learning from real papers
AnyGraide is trying to read Filipino students' handwritten work, including handwritten maths, and it gets better at that by learning from real examples. Crops of handwritten maths from papers you grade, together with the page they came from, are saved to a private store so they can be used to improve that reading.
This only happens if you and your school have agreed to it, and you can withdraw that agreement at any time. Withdrawing is as easy as giving it, and when you do we delete what we hold under this section.
8. How automated processing works, and what it means for a student
The Act's implementing rules require us to give meaningful information about the logic of automated processing and its likely consequences. Here it is.
What is automated. When a paper is scanned, software works out where one student's paper ends and the next begins, reads the handwriting, tries to match the name or the handwriting to your class list, and compares each answer to the answer key. Where the answer is maths, it also checks whether the working is equivalent to the expected result rather than merely identical to it. The result is a proposed mark for each question, with a confidence, and a flag where it is unsure.
What the consequence is. The proposal can be wrong: a misread digit, a name matched to the wrong student, a correct method marked down. Nothing is recorded as a grade by the software.
A person always decides. The teacher reviews and approves. A flagged paper is put in front of her specifically. The grade a student receives is the teacher's decision.
If a student disagrees, they can tell their teacher, and where the teacher sends a marked paper out for checking, the student can flag an error directly and the teacher reviews it.
9. Who else sees the information
To do its job AnyGraide sends information to other companies. All of them process outside the Philippines. Here is the full list, and what each receives.
To write questions and read documents
| Company | What we send |
|---|---|
| Google (Gemini) | The text of your teaching materials and of textbook chapters; images of figures |
| Amazon Web Services (Bedrock, in Australia) | The same text, when Google is unavailable |
| NVIDIA, Groq, Cloudflare, OpenRouter, OpenCode Zen | The same text, when Google is unavailable |
| OpenAI | The part of your syllabus we could not map automatically — which can include your school's name, the course code and your weekly topics |
| Voyage AI | The text of questions, topics and textbook passages, turned into numbers so similar ones can be found |
To read papers and propose marks
| Company | What we send |
|---|---|
| Anthropic | The student's paper itself, and for name-matching, your class list of student names and each student's handwriting sample |
| Mathpix | Student paper pages containing maths. We have switched off their use of our data for their own improvement. They delete page images after 30 days and text after 90 |
| Google (Gemini) | Crops of handwritten maths from student papers |
| Baidu AI Studio | Pages of an answer key you upload, to read the text off them |
To run the service
| Company | What they hold |
|---|---|
| Supabase | Our database, our file storage and our sign-in system — everything above lives here |
| Vercel | The website |
| Railway | The part of AnyGraide that reads documents and marks papers |
| Resend | Emails we send, including a student's name, email and score when you send them their marked paper |
| PayMongo | Your email address and the amount, when you pay |
| Sentry | Technical error reports |
| Cloudflare | The check that a visitor is a person and not a machine, which sees their internet address |
We do not sell personal information to anyone, and we never will.
Sending information out of the Philippines. The Data Privacy Act allows this and keeps us accountable for it: section 21 makes us responsible for personal data we hand to a processor "whether domestically or internationally", and requires us to use contractual means to give it a comparable level of protection.
10. Where information is kept, and for how long
Our database, our files and our sign-in system are with Supabase.
How long we keep things
| What | How long |
|---|---|
| Your account and your work | Until you delete it or close your account |
| Student records | Until you delete the class, or close your account |
| Payment and invoice records | For as long as Bureau of Internal Revenue rules require us to keep books and invoices |
| Usage records and error reports | Up to twelve months |
| Handwriting-reading examples | Until you or your school withdraw the agreement in section 7, or your account closes |
11. Closing your account
You can close your account yourself, from Settings. Doing so deletes your classes, your students, their submissions, your materials and your tests. It cannot be undone.
What closing an account does not currently reach, and what to do about it:
- scans and handwriting images held in file storage;
- pending correction tasks, which hold student names, student emails and paths to their scans;
- the reading of your syllabus;
- the handwriting-reading examples described in section 7;
- usage records.
If you want those cleared as well, write to us and we will do it by hand.
12. Your rights
Under the Data Privacy Act you have the right to:
- be informed — what we hold and what we do with it, which is this notice;
- object — to processing, including to automated processing and profiling, and to withdraw consent where consent is the basis;
- access — see what we hold, where we got it, who we shared it with, how it was processed, and when it was last accessed or changed;
- rectification — have what is wrong corrected;
- erasure or blocking — have information removed or suspended where the law allows;
- damages — be compensated if you are harmed by our mishandling it;
- data portability — get an electronic copy in a structured, commonly used format;
- complain to the National Privacy Commission.
To use any of these, write to andrewjosephpweber@gmail.com. We will answer within fifteen days.
We do not ask you to waive any of these rights. A waiver of a data privacy right, including the right to complain, is void under NPC Circular 2023-04 §20.
If you are a student and your teacher uses AnyGraide, ask your teacher or your school first — they decide what happens to your records. Tell us as well and we will make sure your teacher can act on it.
13. Students who are under 18
Some students in Philippine classrooms are minors, particularly in senior high school. Where a student is under 18, their school and their parent or guardian decide, not the student. If you teach minors, make sure that permission is in place before you upload their work.
14. Keeping information safe
- Everything travels over an encrypted connection.
- Database records are walled off from other teachers by the database itself: a teacher can only reach rows belonging to her own classes.
- Scans of student papers sit in private storage and are opened through short-lived links.
- Passwords are stored as one-way hashes we cannot read.
- Card and GCash details never reach us.
No system is perfectly safe, and AnyGraide is early software built by one person. We say so plainly rather than claim otherwise.
15. If there is a breach
If personal data in our care is exposed in a way that could seriously harm someone, we will notify the National Privacy Commission and the people affected within 72 hours of knowing, as section 38 of the implementing rules requires, and tell you what happened and what to do.
We remain responsible for notifying even where the breach happens at one of the companies in section 9.
16. Changes to this notice
If we change something that matters, we will email you at least 30 days before it takes effect. Smaller corrections take effect when published. The date of the current version is at the bottom.
17. Complaining
Write to us first: andrewjosephpweber@gmail.com. We will acknowledge within two working days and answer within fifteen.
If you are not satisfied, you may complain to the National Privacy Commission (privacy.gov.ph), and for anything about the sale itself to the Department of Trade and Industry.
Version 1.3, 5 October 2026.