Privacy and security
Where data lives
Section titled “Where data lives”| System | Folder |
|---|---|
| macOS | ~/Library/Application Support/monash-study-kit |
| Windows | %LOCALAPPDATA%\monash-study-kit |
Inside are your course files (files), the database (data), login credentials (secrets, readable only by your own user account) and the login window’s profile (browser-profile). monash open opens the course-files folder.
Credentials it stores
Section titled “Credentials it stores”- the Moodle session cookie
- the Ed API token
- the Moodle calendar subscription link
They stay on your computer and are only sent to Moodle or Ed. Never send the secrets folder to anyone.
What Claude sees
Section titled “What Claude sees”Only what a tool returns when you ask something: a list of deadlines, the text of a post, the text of a course file. Tokens and cookies are never sent to Claude. Do not paste your Ed token into a chat either; enter it in the terminal only.
What it does to Moodle and Ed
Section titled “What it does to Moodle and Ed”It only reads. Requests are spaced out, so it does not hammer university systems like a crawler.
Update checks
Section titled “Update checks”Once a day at most it asks GitHub whether a new version exists, with no personal information. Turn it off with monash config update_check false.
Remove everything
Section titled “Remove everything”monash uninstalluv tool uninstall monash-study-kitmonash uninstall removes it from Claude and asks whether to delete all data. Last, delete the token on Ed’s API token page.
How it is checked
Section titled “How it is checked”The project’s security notes describe what is protected and how it is tested. To report a problem privately, see SECURITY.md.