Privacy Policy

1. Information We Collect

We collect only the data necessary to facilitate safe student dismissals:

• Student Data: Names, Grade Levels, Classroom assignments, and internal Student IDs provided by the School.
• Guardian Data: Names and authorized relationship status to students.
• Usage Data: Timestamps of pickup events, scans, and system interactions for audit logs.

2. How We Use Data

Data is used strictly for:

• Facilitating the dismissal process (matching students to guardians).
• Generating secure QR codes.
• Providing schools with attendance and dismissal history.
• Maintaining and improving system security.

We DO NOT sell, trade, or rent student Personally Identifiable Information (PII) to third parties for marketing or any other purpose.

3. Compliance (FERPA & COPPA)

• FERPA: We act as a "School Official" with a legitimate educational interest in the data we process. We handle student records in accordance with the Family Educational Rights and Privacy Act (FERPA).
• COPPA: We do not collect personal information directly from children under 13. All student data is provided by the School. Schools are responsible for obtaining any necessary parental consent for the use of our services.

4. Data Security

We implement robust security measures to protect your data:

• Encryption: All data is encrypted in transit (TLS 1.2+) and at rest (AES-256).
• Access Controls: Strict role-based access ensures only authorized school staff can view sensitive student data.
• Audits: We maintain logs of who accesses data and when.

5. Data Retention & Deletion

We retain data only for the duration of our agreement with the School. Upon termination of service or written request from the School, we will securely delete, destroy, or de-identify all student data from our active servers within 30 days.

6. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us at:

privacy@leafdismissal.com