Privacy Policy

SchoolSwipe Privacy Policy

SchoolSwipe, LLC recognizes the importance of privacy. This Privacy Policy is designed to align with applicable U.S. student data privacy laws, including the Illinois Student Online Personal Protection Act (SOPPA), and to support School participation in the National Data Privacy Agreement (NDPA), where applicable. This Privacy Policy explains how we collect, store, use, disclose, and process personal information. It applies to our software products and services used by schools and districts in the United States. It also applies to our websites.

This Privacy Policy contains four sections.

1. Section 1 explains how we handle personal information about students when schools use SchoolSwipe Services.
2. Section 2 explains how we handle personal information about parents, guardians, teachers, and school staff who use SchoolSwipe Services.
3. Section 3 explains how we handle personal information from adults who visit our public websites.
4. Section 4 explains the effective date of this policy and how to contact us.

Section 1. Student Information

This section explains how we handle personal information about students ("Student Information"). We receive Student Information from Schools and through student use of the Services. Student Information is linked to an identifiable student. Aggregated or de-identified information is not Student Information.

SchoolSwipe processes Student Information solely on behalf of, and under the direction of, the School. Student Information is processed only to provide and support the Services and for no other commercial purpose. SchoolSwipe complies with applicable federal and state student data privacy laws, its contractual obligations with Schools, and this Privacy Policy. SchoolSwipe does not sell Student Information and does not disclose Student Information except as permitted by this Privacy Policy, applicable law, or a written agreement with the School.

APPLICABLE LAW

SchoolSwipe complies with applicable federal and state student data privacy laws, including the Family Educational Rights and Privacy Act ("FERPA"), the Children's Online Privacy Protection Act ("COPPA"), and applicable state student privacy laws such as the Illinois Student Online Personal Protection Act ("SOPPA"). Where required, SchoolSwipe will enter into a National Data Privacy Agreement ("NDPA") or substantially similar data protection agreement with Schools.

Under FERPA, SchoolSwipe acts as a school official with a legitimate educational interest and remains under the direct control of the School with respect to the use and maintenance of education records. Student Information is used only for School-authorized purposes.

Under COPPA, Schools provide consent on behalf of parents or guardians for the collection and use of Student Information solely for educational purposes.

CONSENT

We may collect Student Information from Schools, Students, Parents, and Educators, as well as automatically through use of the Services, depending on School settings.

Information collected from students may include identifiers such as usernames, school email addresses, school-issued IDs, and student images, as well as information submitted through the Services and usage activity.

Information collected automatically may include device information, browser type, IP address, system details, and usage logs.

Information collected from Schools may include enrollment, scheduling, roster, and contact information necessary to support the Services.

Information collected from Parents may include contact details where communication with parents is enabled.

When a user or School enables Google integrations, SchoolSwipe may access specific Google user data, including: your Google profile information (name, email address, and profile picture). This data is accessed via Google OAuth API scopes to facilitate seamless login and roster synchronization.

HOW WE USE STUDENT INFORMATION

We use Student Information to:

• Operate and support the Services;
• Provide reports, logs, and analytics to Schools;
• Provide technical support;
• Comply with applicable legal obligations;
• Protect the security and integrity of the Services.

SchoolSwipe's use and transfer to any other app of information received from Google APIs will adhere to Google API Services User Data Policy, including the Limited Use requirements. Specifically, Google user data is used only to provide or improve user-facing features that are prominent in the SchoolSwipe interface and is not used for any other purpose, such as serving advertisements.

We do not sell Student Information, build commercial profiles, or use Student Information for advertising. Student Information is not used for targeted advertising, behavioral advertising, or marketing profiles, and is not disclosed except as permitted under this Privacy Policy, applicable law, or a School agreement. We may use aggregated or de-identified data to improve the Services.

HOW WE SHARE STUDENT INFORMATION

We do not share Student Information with third parties except as described below:

• Service Providers: Vendors who support our operations under contractual confidentiality and security obligations. We do not share Google user data with third parties unless it is necessary to provide or improve our services, to comply with applicable law, or as part of a merger/acquisition.
• Schools and Parents: As permitted under FERPA and COPPA.
• Business Transfers: Student Information may be transferred or disclosed as part of a corporate transaction involving SchoolSwipe, such as a merger, acquisition, reorganization, or sale of all or substantially all of SchoolSwipe's assets.
• Legal Requirements: When required by law or to address safety or security concerns.

Student use of third-party tools linked through SchoolSwipe is governed by those third parties' privacy policies.

SECURITY AND PROTECTION

We use administrative, technical, physical, electronic and procedural safeguards to secure and protect Student Information, consistent with generally accepted industry standards. These safeguards are designed to comply with SOPPA and NDPA security expectations, including the use of AES-256 encryption for data at rest and TLS 1.2+ for data in transit. Access is limited to authorized personnel only with a legitimate need. No system is completely secure, and users are responsible for safeguarding account credentials.

If a data breach occurs, we will notify affected Schools and Students in accordance with applicable law, including SOPPA, and any applicable NDPA or contractual obligations.

RIGHTS AND RETENTION

Schools are able to review, update, correct, or request deletion of student information. Parents and eligible students may exercise their rights through the School, consistent with FERPA, COPPA, SOPPA, and NDPA requirements.

Student Information is retained only as long as necessary to provide the Services or as otherwise required by law. Unless otherwise directed by the School, Student Information is deleted within thirty (30) days following termination of the School's contract. SchoolSwipe will honor School-specific retention or deletion instructions set forth in an NDPA or other written agreement. Aggregated or de-identified data may be retained for platform improvement purposes only.

Section 2. Parents and Educators

This section applies to personal information associated with parents, guardians, teachers, and School staff ("Parent and Educator Information").

We may collect names, email addresses, and contact details to support accounts and communications, as well as records of customer support interactions. Parent and Educator Information may be associated with Student Information during normal use of the Services.

We do not sell Parent or Educator Information or use it for advertising. We share this information only as described for Student Information and only to provide the Services.

Section 3. Site Visitors

This section applies to adults visiting public portions of our websites.

We may collect IP addresses, browser information, pages viewed, and contact details submitted through forms. This information is used to operate and improve our websites and respond to inquiries.

We do not sell Site Visitor information. We share it only with service providers who support our websites or when required by law.

Section 4. Other Information

EFFECTIVE DATE

Effective Date: February 02, 2026

This Privacy Policy is effective as of the date listed above and may be updated from time to time. Schools will be notified of material changes.

GEOGRAPHIC SCOPE

This Privacy Policy is intended to apply nationwide within the United States. Where state law imposes additional or different requirements, SchoolSwipe will comply with such requirements as applicable to the School, including through an NDPA or similar agreement.

CONTACT

You are able to reach SchoolSwipe, LLC at: