Your account and questions

Google sign-in

Bishby uses Google to confirm that you have a school-managed account. Google provides an account identifier, verified email, basic profile and Workspace domain. The server checks these to restrict access to the school. It keeps a hashed account identifier and your given name and verified school email in private server storage for your session. It does not request access to Gmail, Google Drive, your contacts or your calendar.

Session cookies

A secure, HttpOnly cookie keeps you signed in for up to 30 days on this browser. A short-lived cookie protects sign-in requests. Signing out immediately ends the session. Sessions survive server restarts and deployments and expire 30 days after sign-in. Sign out when you finish on a shared computer. Hashed account identifiers are used for temporary request limits. The app does not use advertising or analytics cookies.

Search and AI answers

Library search runs against a robotics reference index. When you choose Ask Bishby, your question, up to four earlier exchanges in the current chat, and relevant reference passages are sent to Anthropic to generate an answer. Your Google account details are not included in that request. Avoid entering personal, confidential or student information in questions.

Bishby saves chats in local storage in this browser, separated by signed-in school account. Chats do not sync across devices. Clearing browser data removes them; Delete this chat and Clear all saved chats let you remove them yourself. Signing out hides your chats but leaves them saved on the device. Local storage is not encrypted, so someone with access to this browser profile or device could inspect it. Ordinary chat history stays in your browser. When safety monitoring is enabled, the server also keeps limited safety records as described below. Question text is not written to operational logs. Hosting and service providers may process operational data under their own policies. Anthropic's handling of API requests is governed by its applicable service terms and privacy policy; this app does not promise zero retention by external providers.

FTC focus and safety monitoring

When enabled, a separate Anthropic Haiku model checks questions, conversation context, reference passages, and draft answers. Clearly off-topic questions receive one warning per signed-in account per school day, resetting at midnight America/Los_Angeles. Another off-topic question that day queues one report to Don Fitz-Roy at don.fitz-roy@bishops.com. Deleting local chats or signing out does not reset this server-side count.

Suspicious inputs or outputs are withheld and reviewed in a new, isolated Claude API conversation. The reviewer receives relevant evidence but not the account identity, and it cannot send email or change app settings. A confirmed concern may queue an email to the teacher. Automated flags are fallible and are not disciplinary findings.

Warning counts and queued reviews/reports are stored on the server for up to seven days. Reports can include the verified school email, flagged question, withheld answer, date, and automated assessment. Review evidence is cleared after review, and report text is cleared from the queue after email-provider acceptance. Email copies in the teacher’s mailbox follow the school’s retention practices. Google Gmail processes report email when configured as the sender; the sender authorization permits sending, not inbox reading. Normal unflagged conversations are not saved to the server. If screening is unavailable, answers pause until it recovers; email delivery can be delayed by outages.

School roster

The Roster tab shows robotics students’ names, school emails, and school photos to anyone signed in with a verified bishops.com account. The roster and image endpoints require school authentication. Roster information is not sent to the AI model or saved in local chat storage.

External services and links

The website runs on Fly.io. Google provides sign-in and Anthropic provides AI responses. Padlet and source-document links open external services with their own privacy practices.

Google privacy policy · Anthropic privacy policy · Fly.io privacy policy

Contact

For questions about Bishby or access, contact Don Fitz-Roy at don.fitz-roy@bishops.com.