Privacy policy (draft)

Draft, not legal advice

This is a draft with placeholders. It is not legal advice and the school has not signed off on it. A teacher or the school must review it before real students use this app. Operator: [OPERATOR NAME]. Contact: [CONTACT EMAIL].

This tool is made by students from the AT Computer Science class. It is not run by or affiliated with Pascack Valley Regional High School District.

What we collect

• Your Google account name, email address and profile picture link.
• Your grade, graduation year, and goals you choose, such as an intended major and interests.
• Your plans, the courses in them, and any grades or credits you enter yourself.
• What you write in a placement review request, and the decision on it.
• Comments a counselor writes on your plan.
• If you are an incoming 8th grader, a self-reported snapshot of your 8th grade grades and course.
• Course titles from a transcript import that we could not match, if you send them to staff.
• Your notification settings and, if you turn push on, a push address for that browser or phone.
• Your role, such as student or counselor.
• A log of important actions, such as role changes, decisions and who made them.

What we do not collect

We do not ask for or store your birthdate. We only remember that you said you are 13 or older. We do not collect your student ID, state ID, parent or guardian details, or transcript files.

When you import a transcript, the PDF is read inside your browser and is never uploaded. Only the courses and grades you choose to add to your plan are saved.

Eighth graders

The grades an incoming 8th grader types in are a self-reported snapshot. They are used to suggest a starting plan and are deleted at the end of your first placement review cycle.

Who can see it

You can see all of your data. Counselors and admins can see plans and placement reviews they need to review. Department supervisors see placement review requests for their department. Admins manage the site. Staff access is limited to what the job needs and important staff actions are logged.

We do not sell data, share it for advertising, or show ads.

Services that handle data

• Google, for sign-in.
• Resend, to send email. It receives your email address and the text of the message.
• [HOSTING PROVIDER], which runs the servers and the database.
• The push service of your browser maker (Google, Mozilla, Apple or Microsoft), only if you turn push on. Push messages are short and never include grades or answers.

How long we keep it

• Your data stays while your account exists. Sign-in sessions expire on their own.
• The 8th grade snapshot is removed at the end of your first placement review cycle.
• A push address is removed when you turn push off or the device stops accepting messages.
• After you delete your data, everything listed above is deleted. We keep log entries and staff decisions with the person replaced by "deleted user", and a one-way hash of your email on the deletion request, only to show that the request was handled.
• Database backups are kept for [BACKUP RETENTION] and then removed.

Your choices

You can download a copy of your data and delete it from Settings. To delete, you ask, confirm from a link we email you, and wait 14 days. You can cancel any time in that period. After that, the deletion runs and cannot be undone.

A parent or guardian can ask for a student's data to be deleted by contacting [CONTACT EMAIL]. An admin checks who is asking, records the request, and the student is told. The same 14 days apply.

You can choose which emails and push messages you get in Settings. Messages about deleting your data cannot be turned off.

Age

You must be 13 or older to use this app. If we learn that someone under 13 has an account, we delete it.

Changes

If this policy changes, we publish a new version and ask you to accept it again before you continue.