Geddes Labs
Feather LMS Privacy Policy
Effective July 7, 2026
The short version: Feather LMS stores your organization's data as Google Sheets in your organization's own Google Drive. Geddes Labs operates no servers and no databases, and never receives, stores, sells, or shares your data. We could not hand your data to anyone else even if asked, because we do not have it.
Who we are
Feather LMS is a learning management system published by Geddes Labs and distributed through the Google Workspace Marketplace. You can reach us at support@geddeslabs.com.
How Feather LMS handles data
Feather LMS runs as a Google Apps Script application inside your Google Workspace environment, executing under each signed-in user's own Google account and permissions. All application data - user rosters, roles, teams, courses, learning paths, assignments, learner progress, quiz results, and report snapshots - is written to Google Sheets files created in your organization's own Google Drive.
- Data never transits or rests on infrastructure operated by Geddes Labs.
- Geddes Labs has no administrative backdoor into your files. Access to them is governed entirely by your own Google Drive sharing settings.
- If you stop using Feather LMS, every file remains in your Drive as ordinary, readable Google Sheets that you own and can keep or delete.
Google user data we access, and why
Feather LMS requests the following Google OAuth permissions. Each is used only as described:
| Permission | Use |
|---|---|
| openid, userinfo.email | Identify the signed-in user by email address so the app can enforce roles (admin, editor, manager, learner). No other profile data is read or stored. |
| drive.file | Create and access only the files Feather itself creates in your Drive (the tenant workbook and per-course workbooks), plus any file you explicitly select in a Google file picker. Feather cannot see, list, or search the rest of your Drive. |
| spreadsheets | Read and write those workbooks. They are the application's entire data store. |
| gmail.send | Send assignment notifications and due-date reminder emails from the assigning administrator's own address. Feather never reads, searches, or stores email. |
| script.external_request | Used only by the optional AI authoring assistant, which sends course outline text you provide to the AI provider you choose (such as Anthropic or Google), using an API key you supply. Your key is used per request and never written to any file, property, cache, or log. If you do not use the assistant, no external request is made. |
| script.scriptapp | Create and remove the optional nightly job (report snapshots and reminder emails) that an administrator explicitly turns on from the admin page, and that they can turn off at any time. |
Limited Use disclosure
Feather LMS's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
In practice: data obtained through Google APIs is used only to provide the user-facing features described above. It is never used for advertising, never sold, never transferred to data brokers or credit or lending determinations, and never read by humans at Geddes Labs (we have no access to it at all). The only transfer to another app is the optional AI authoring assistant described above, which happens solely at the user's request, with the user's own API key, to the provider the user chose.
What Geddes Labs collects directly
Almost nothing.
- This website is a static page. It sets no cookies and runs no analytics or tracking scripts.
- Support email: if you write to us, we keep the correspondence so we can help you.
- Purchases: payment is processed by Stripe, which shares with us the purchaser's name, email, and company for license issuance. We never see card numbers. Stripe's handling of payment data is covered by Stripe's privacy policy.
Data retention and deletion
Because all application data lives in your Google Drive, retention and deletion are entirely in your hands: delete the Feather workbooks from Drive and the data is gone, subject only to your own Google Workspace retention settings. To revoke Feather's access to your Google account, visit myaccount.google.com/connections and remove Feather LMS. Revoking access does not delete your files; they remain yours.
Changes to this policy
If this policy changes, the new version will be posted at this address with an updated effective date. Material changes will be called out in release notes shown to administrators in the app.
Contact
Questions about this policy or about how Feather LMS handles data: support@geddeslabs.com.