MySchoolSyncApp

Privacy Policy

Last updated: April 26, 2026

1. Introduction

MySchoolSyncApp ("we", "us", "our") is committed to protecting the privacy of our users, including school administrators, teachers, parents, and students. This Privacy Policy explains what information we collect, how we use it, and your rights regarding your data.

2. Information We Collect

We collect the following types of information:

  • Account Information: Name, email address, and password when you create an account.
  • School Information: School name, address, timezone, and administrative details.
  • Student Information: Student name, date of birth, grade level, enrollment status, and related academic records (attendance, grades, certificates).
  • Family Information: Parent/guardian names, email addresses, phone numbers, and home address.
  • Usage Data: How you interact with the Service, including pages visited and features used.
  • Payment Information: Billing details processed securely through our payment provider (Stripe). We do not store credit card numbers on our servers.

3. How We Use Your Information

We use your information to:

  • Provide and maintain the Service
  • Manage student registrations, attendance, and grades
  • Enable communication between schools, teachers, and parents
  • Process payments and manage billing
  • Send service-related notifications and announcements
  • Improve the Service based on usage patterns

We do not use student data for advertising, marketing, or profiling purposes.

4. Data Isolation and Multi-Tenancy

Each school's data is completely isolated within our platform. Schools cannot access data belonging to other schools. All database queries are scoped to the authenticated user's school, enforced at the database level through row-level security policies.

5. Children's Privacy (COPPA)

Our Service processes personal information of children under 13 at the direction of schools and parents. We comply with the Children's Online Privacy Protection Act (COPPA). We do not knowingly collect personal information directly from children. All student data is entered by school administrators, teachers, or parents. We do not use children's data for any purpose other than providing the educational service.

6. Data Sharing

We do not sell, rent, or share personal information with third parties except:

  • Service Providers: We use Supabase (database hosting), Stripe (payments), and Resend (email delivery) to operate the Service. These providers process data solely on our behalf.
  • Legal Requirements: We may disclose information if required by law, court order, or government request.
  • School Administrators: Within a school, administrators can access all data for their school. Teachers can access data for their assigned classes. Parents can access data for their own children.

7. Data Security

We implement appropriate security measures to protect your data, including:

  • Encryption of data in transit (TLS/SSL)
  • Row-level security at the database level
  • Secure authentication with hashed passwords
  • Role-based access control for all portals
  • Regular security reviews of our infrastructure

8. Data Retention

We retain school data for as long as the school maintains an active account. Upon account termination, schools may request a data export within 30 days. After 30 days, data may be permanently deleted from our systems and backups within 90 days.

9. Your Rights

You have the right to:

  • Access: Request a copy of your personal data
  • Correction: Request correction of inaccurate data
  • Deletion: Request deletion of your data (subject to legal retention requirements)
  • Export: Request your data in a portable format
  • Withdraw Consent: Opt out of non-essential communications at any time

To exercise any of these rights, contact us at the email address below.

10. Cookies

We use essential cookies for authentication and session management. We do not use tracking cookies or third-party advertising cookies. No cookie consent banner is needed as we only use strictly necessary cookies.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify registered users of material changes via email at least 15 days before they take effect. The "Last updated" date at the top of this page reflects the most recent revision.

12. Contact Us

If you have questions about this Privacy Policy or wish to exercise your data rights, contact us at support@myschoolsyncapp.com.