Privacy Policy

database 1. Data We Collect

• person Account information — name, email address, and role (educator or student). If you use Sign in with Apple, we receive only the identifiers Apple shares based on your choices.
• calendar_month Schedule & attendance data — lessons, events, leaves, and calendar entries created by educators.
• assessment Assessment data — developmental-level assessment responses and results for students aged 0–6.
• devices Device & usage metadata — IP address, request timestamps, and anonymous crash/performance diagnostics (when enabled by the user).

build 2. How We Use Your Data

• check_circle Provide and improve the core scheduling and assessment features.
• check_circle Authenticate users and enforce role-based access.
• check_circle Send service-related notifications (e.g., schedule changes).
• check_circle Monitor system health and prevent abuse.

lock 3. Data Storage & Security

We operate globally and may transfer your personal information in locations around the world for the purposes described in this privacy policy. Wherever your personal information is transferred, stored or processed by us, we will take reasonable steps to safeguard the privacy of your personal information. Additionally, when using or disclosing personal information transferred from the European Union, we abide by the Safe Harbor Principles as set forth by the U.S. Department of Commerce, use standard contract clauses approved by the European Commission, adopt other means under European Union law for ensuring adequate safeguards, or obtain your consent. We also apply the substantive requirements of the Safe Harbor Principles when transferring personal information from Australia.

schedule 4. Data Retention

We retain your data for as long as your account is active. If you delete your account, all personal data is removed within 30 days, except where retention is required by law.

Email Consent

If the application wishes to collect personal information from a child, COPPA requires that we first seek a parent or guardian’s consent by email. In the email we will explain what information we are collecting, how we plan to use it, how the parent can provide consent, and how the parent can revoke consent. If we do not receive parental consent within a reasonable time, we will delete the parent contact information and any other information collected from the child in connection with that activity.

School-based Activities

COPPA allows teachers and school administrators to act in the stead of parents to provide consent for the collection of personal information from children. Schools should always notify parents about these activities. For more information on parental rights with respect to a child’s educational record under the Family Educational Rights and Privacy Act (FERPA), please visit the FERPA site.

gavel 5. Your Rights

You may request access to, correction of, or deletion of your personal data at any time by contacting us. Under applicable privacy regulations (including GDPR and CCPA), you also have the right to data portability and to withdraw consent.

child_care 6. Children’s Privacy

Scaffold is designed for use by educators. Student accounts are created and managed by educators; children do not create accounts themselves. Assessment data is linked to educator-managed student profiles.

Our policy is in accordance with the U.S. Children’s Online Privacy Protection Act (“COPPA”), and outlines our practices in the United States and Latin America regarding children’s personal information. For more information about COPPA and general tips about protecting children’s online privacy, please visit OnGuard Online: https://www.consumer.ftc.gov/articles/0031-protecting-your-childs-privacy-online.

update 7. Changes to This Policy

We may update this policy from time to time. Material changes will be communicated through the app or via email. The effective date at the top of this page reflects the most recent revision.