Privacy Policy

Introduction

HallPass Education ("HallPass," "we," "us," or "our") is committed to protecting the privacy and security of all users, including students, parents, teachers, and school administrators. This Privacy Policy describes how we collect, use, disclose, and safeguard your information when you use our platform.

Information We Collect

We collect the following types of information to provide and improve our educational services:

• User Account Information: Name, email address, role (teacher, parent, administrator), and authentication credentials.
• Student Information: Student names, grade levels, classroom assignments, and parent/guardian associations. We collect only the minimum student data necessary to facilitate classroom-family communication.
• Classroom Data: Classroom posts, photos, stories, messages, achievement points, volunteer sign-ups, and supply wishlists shared by teachers.
• Usage Data: Log data, device information, and analytics to improve platform performance and user experience.
• SSO Data: When signing in through Clever or Google Classroom, we receive basic profile information as authorized by your school or district.

How We Use Your Information

Your information is used exclusively for educational purposes, including:

• Facilitating communication between teachers and parents/guardians
• Enabling classroom story and photo sharing
• Managing classroom rosters and parent-student associations
• Providing auto-translation services for multilingual families
• Tracking classroom achievements and milestones
• Improving platform performance, reliability, and security
• Sending service-related notifications and updates

Cookies

HallPass uses cookies and similar browser storage on our website. We group them into two categories:

• Essential cookies (always on): Required to sign you in, keep your session secure, and remember basic preferences. These cookies are necessary to use the app, so they cannot be turned off. Without them the platform will not function.
• Optional analytics cookies: Help us understand how the platform is used so we can improve performance and reliability. These are non-essential. We do not use cookies for advertising, and we never sell cookie data.

When you first visit our website, a cookie banner lets you accept or decline non-essential (analytics) cookies. Your choice is remembered on your device, and non-essential cookies are only set after you accept. You can change your decision at any time by clearing the hp_cookie_consent value in your browser storage, which will make the banner reappear. Declining non-essential cookies does not affect your ability to use the app, since essential cookies remain active.

Data Sharing and Disclosure

We are committed to safeguarding your data. We do not sell, rent, or trade any personal information, including student data, to third parties for marketing or advertising purposes.

We may share information only in the following limited circumstances:

• Education Partners: With school-authorized services (such as Clever or Google Classroom) solely to facilitate SSO authentication and roster synchronization.
• Service Providers: With trusted service providers who assist in operating our platform (e.g., hosting, error monitoring), bound by strict data protection agreements.
• Legal Requirements: When required by law, regulation, or legal process.
• Safety: When necessary to protect the safety of students, users, or the public.

FERPA Compliance

HallPass Education is committed to compliance with the Family Educational Rights and Privacy Act (FERPA). We operate as a "school official" under FERPA, meaning:

• We use education records solely for the purposes authorized by the school or district.
• We do not disclose personally identifiable information from education records without proper consent.
• Parents and eligible students retain rights to access and request correction of education records.
• We maintain appropriate administrative, technical, and physical safeguards to protect education records.
• We comply with all applicable FERPA regulations regarding the use and protection of student data.

COPPA Compliance

HallPass Education complies with the Children's Online Privacy Protection Act (COPPA). We recognize the importance of protecting children's privacy online.

• Students under 13 do not create accounts directly. Student accounts are created and managed by teachers or school administrators.
• We collect only the minimum information necessary to provide educational services.
• We obtain consent through the school or district acting as an agent for the parent, as permitted under COPPA.
• Parents may review their child's information and request deletion by contacting their child's school or by reaching out to us directly.
• We do not use student data for targeted advertising or any non-educational commercial purpose.

Data Security

We implement industry-standard security measures to protect your information, including encryption in transit (TLS/HTTPS), encryption at rest, secure authentication mechanisms, role-based access controls, and regular security assessments. While no system is completely secure, we are committed to maintaining the highest practical level of data protection.

Data Retention and Deletion

We retain personal information only for as long as necessary to fulfill the educational purposes described in this policy, or as required by law.

• Account data is retained while the account is active and for a reasonable period afterward to support reactivation.
• Student data is deleted or de-identified when a school or district terminates its use of the platform, or upon request.
• Parents and schools may request deletion of their data at any time by contacting us.
• Upon account deletion, personal data is removed from active systems within 30 days, and from backups within 90 days.

Your Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate information
• Request deletion of your personal information
• Object to or restrict certain processing of your data
• Receive a copy of your data in a portable format

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify users of material changes by posting a notice on our platform and, where appropriate, by email. Continued use of the platform after changes constitutes acceptance of the updated policy.

Contact Us

If you have questions or concerns about this Privacy Policy, or wish to exercise your rights regarding your data, please contact us at:

Classroom Data Retention

Archived classroom data is retained for 2 years from the date of archiving. All classrooms are automatically archived on July 31st of each year. Teachers are notified 30 days before permanent deletion. Deleted data includes student records, points, stories, messages, events, photos, and funding records.

You can permanently delete your account at any time directly in the app from Settings → Delete Account. Deleting your account permanently removes your personal data and content from our active systems and disables your sign-in. A 30-day recovery window applies before deletion becomes irreversible; during that window you may contact [email protected] to restore your account. After the recovery window, data is purged from backups within 90 days. You may also request a copy (export) of your data before deleting by contacting [email protected].

Payment Information

Premium subscriptions are purchased through the app store for your platform, and all payment processing is handled by the store — not by HallPass:

• On iPhone, iPad, and Apple Watch, premium is purchased via Apple In-App Purchase. On Android, premium is purchased via Google Play Billing.
• Your payment card and billing details are collected and processed entirely by Apple or Google. HallPass never receives or stores your card number, CVV, or bank account details.
• We store only a record of your subscription status (active, expired, product tier) and the store transaction identifier needed to verify and manage your subscription.
• For details on how Apple or Google handle your payment data, see Apple's and Google's respective privacy policies.

Third-Party Services

HallPass uses the following third-party services to operate the platform:

• Supabase: Database hosting and authentication (data stored in the US).
• Apple App Store / Google Play: In-app purchase processing for premium subscriptions.
• Resend: Transactional email delivery (notifications, consent requests).
• Sentry:Error and performance monitoring to improve platform reliability. Configured to avoid capturing personal data — text and media in diagnostic reports are masked, and we do not attach user profiles to error reports.
• Translation service (self-hosted LibreTranslate): On-request message and post translation for multilingual families. The text submitted for translation may include names or other content contained in the message or post being translated.
• Twilio: SMS reminders for events. This feature is off by default and only transmits data (phone number and message content) when SMS alerts are enabled for your account.
• Apple Push Notification service (APNs) and Firebase Cloud Messaging (FCM): Push notification delivery to iOS and Android devices (device tokens only).
• Anthropic (accessed via the DataDay AI Gateway): Powers an optional in-app AI help assistant. The assistant answers general questions about using HallPass and isnever sent student or parent data.

All third-party providers are bound by data processing agreements and handle data in accordance with their respective privacy policies.

Parent-Student Linking

Parents connect to their children's classrooms through two methods: class codes (requiring teacher approval) and student invite codes (instant link, teacher notified). Both codes are multi-use, allowing both parents to connect to the same child. Teachers retain full control to disconnect any parent at any time.

HallPass is not liable for errors, unauthorized access, or failures in the parent-student connection process. Parents and teachers are responsible for verifying that connections are accurate.

Free Trial

New parents receive a 15-day free premium trial when they first connect to a classroom. The trial includes access to all premium features including message translation, HD photo downloads, read receipts, calendar sync, and progress reports. After the trial period, features revert to the free tier unless the parent upgrades to a paid subscription.