Privacy Policy

Introduction

HallPass Education ("HallPass," "we," "us," or "our") is committed to protecting the privacy and security of all users, including students, parents, teachers, and school administrators. This Privacy Policy describes how we collect, use, disclose, and safeguard your information when you use our platform.

Information We Collect

We collect the following types of information to provide and improve our educational services:

• User Account Information: Name, email address, role (teacher, parent, administrator), and authentication credentials.
• Student Information: Student names, grade levels, classroom assignments, and parent/guardian associations. We collect only the minimum student data necessary to facilitate classroom-family communication.
• Classroom Data: Classroom posts, photos, stories, messages, achievement points, volunteer sign-ups, and supply wishlists shared by teachers.
• Usage Data: Log data, device information, and analytics to improve platform performance and user experience.
• SSO Data: When signing in through Clever or Google Classroom, we receive basic profile information as authorized by your school or district.

How We Use Your Information

Your information is used exclusively for educational purposes, including:

• Facilitating communication between teachers and parents/guardians
• Enabling classroom story and photo sharing
• Managing classroom rosters and parent-student associations
• Providing auto-translation services for multilingual families
• Tracking classroom achievements and milestones
• Improving platform performance, reliability, and security
• Sending service-related notifications and updates

Data Sharing and Disclosure

We are committed to safeguarding your data. We do not sell, rent, or trade any personal information, including student data, to third parties for marketing or advertising purposes.

We may share information only in the following limited circumstances:

• Education Partners: With school-authorized services (such as Clever or Google Classroom) solely to facilitate SSO authentication and roster synchronization.
• Service Providers: With trusted service providers who assist in operating our platform (e.g., hosting, error monitoring), bound by strict data protection agreements.
• Legal Requirements: When required by law, regulation, or legal process.
• Safety: When necessary to protect the safety of students, users, or the public.

FERPA Compliance

HallPass Education is committed to compliance with the Family Educational Rights and Privacy Act (FERPA). We operate as a "school official" under FERPA, meaning:

• We use education records solely for the purposes authorized by the school or district.
• We do not disclose personally identifiable information from education records without proper consent.
• Parents and eligible students retain rights to access and request correction of education records.
• We maintain appropriate administrative, technical, and physical safeguards to protect education records.
• We comply with all applicable FERPA regulations regarding the use and protection of student data.

COPPA Compliance

HallPass Education complies with the Children's Online Privacy Protection Act (COPPA). We recognize the importance of protecting children's privacy online.

• Students under 13 do not create accounts directly. Student accounts are created and managed by teachers or school administrators.
• We collect only the minimum information necessary to provide educational services.
• We obtain consent through the school or district acting as an agent for the parent, as permitted under COPPA.
• Parents may review their child's information and request deletion by contacting their child's school or by reaching out to us directly.
• We do not use student data for targeted advertising or any non-educational commercial purpose.

Data Security

We implement industry-standard security measures to protect your information, including encryption in transit (TLS/HTTPS), encryption at rest, secure authentication mechanisms, role-based access controls, and regular security assessments. While no system is completely secure, we are committed to maintaining the highest practical level of data protection.

Data Retention and Deletion

We retain personal information only for as long as necessary to fulfill the educational purposes described in this policy, or as required by law.

• Account data is retained while the account is active and for a reasonable period afterward to support reactivation.
• Student data is deleted or de-identified when a school or district terminates its use of the platform, or upon request.
• Parents and schools may request deletion of their data at any time by contacting us.
• Upon account deletion, personal data is removed from active systems within 30 days, and from backups within 90 days.

Your Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate information
• Request deletion of your personal information
• Object to or restrict certain processing of your data
• Receive a copy of your data in a portable format

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify users of material changes by posting a notice on our platform and, where appropriate, by email. Continued use of the platform after changes constitutes acceptance of the updated policy.

Contact Us

If you have questions or concerns about this Privacy Policy, or wish to exercise your rights regarding your data, please contact us at:

Classroom Data Retention

Archived classroom data is retained for 2 years from the date of archiving. All classrooms are automatically archived on July 31st of each year. Teachers are notified 30 days before permanent deletion. Deleted data includes student records, points, stories, messages, events, permission slips, photos, and funding records.

Users may request account deletion from Settings. Account deletion removes all personal data within 30 days. During the 30-day recovery window, users may contact [email protected] to restore their account.

Payment Information

HallPass uses Stripe as our payment processor. When you subscribe to premium features or contribute to classroom funds:

• Payment card details are collected and processed directly by Stripe. HallPass never stores your full card number, CVV, or bank account details on our servers.
• We store only a reference to your Stripe customer ID and subscription status to manage your account.
• Classroom fund contributions are processed through Stripe Connect. Teacher payout information is managed entirely by Stripe.
• For details on how Stripe handles your data, see Stripe's privacy policy at stripe.com/privacy.

Third-Party Services

HallPass uses the following third-party services to operate the platform:

• Supabase: Database hosting and authentication (data stored in the US).
• Stripe: Payment processing for subscriptions and classroom funding.
• Resend: Transactional email delivery (notifications, consent requests).
• Sentry: Error monitoring to improve platform reliability (no personal data is intentionally captured).
• Google Translate API: Message translation for multilingual families (text only, no user identifiers sent).
• Firebase Cloud Messaging: Push notification delivery to mobile devices.

All third-party providers are bound by data processing agreements and handle data in accordance with their respective privacy policies.

Parent-Student Linking

Parents connect to their children's classrooms through two methods: class codes (requiring teacher approval) and student invite codes (instant link, teacher notified). Both codes are multi-use, allowing both parents to connect to the same child. Teachers retain full control to disconnect any parent at any time.

HallPass is not liable for errors, unauthorized access, or failures in the parent-student connection process. Parents and teachers are responsible for verifying that connections are accurate.

Free Trial

New parents receive a 15-day free premium trial when they first connect to a classroom. The trial includes access to all premium features including message translation, HD photo downloads, read receipts, calendar sync, progress reports, and permission slip reminders. After the trial period, features revert to the free tier unless the parent upgrades to a paid subscription.