Schoolsy SPED Privacy Policy

Effective date: June 2, 2026

Schoolsy SPED is a mobile app that helps Adapted Physical Education (APE) teachers manage their student roster, award points, track motor-skill checklists, record mile-run times, document student goals and IEP goal sheets, and sync grades to their school's learning management system (LMS). Because APE teachers work with students who have disabilities and Individualized Education Programs (IEPs), protecting student information — especially student names — is the foundation of how this app is built.

Our top priority: keeping student names private. Schoolsy SPED is a local-first app, so student information lives on the teacher's device. When the app needs help reading a goal sheet from a photo, it is built so the teacher can black out the student's name and identifying details on the device before the image is sent, and it warns the teacher and requires an explicit confirmation if no redaction has been added. A student's legal name typed into an IEP goal sheet stays on the device and is never included in what is sent to or returned by our servers.

1. Who this app is for

Schoolsy SPED is intended to be used by teachers and school staff in their professional roles. The app is not directed to children and is not intended for students to use directly. When a teacher uses Schoolsy SPED to record information about a student, the teacher and their school or district remain the owners and controllers of that student information. Schoolsy SPED acts as a tool operating under the direction of the school (a "school official" with a legitimate educational interest under FERPA).

2. Where your data is stored

Local-first Nearly all data you enter is stored on your device only, using the device's secure on-device storage. Schoolsy SPED does not maintain a central database of student records. Data stored on your device includes:

Student roster (names, class periods, notes you add)
Daily points, transactions, attendance, and bathroom/behavior tracking
Motor-skill checklists and check-in history
Mile-run times and lap data
Student goals and IEP goal sheets, including the student's legal name on the IEP form
Your preferences, presets, schedules, and configuration

On mobile devices, sensitive credentials (such as LMS API keys and tokens) are kept in the device's encrypted secure storage rather than in ordinary app storage.

3. How name redaction works

Several features can read information from a photo of a paper goal sheet or IEP form. Schoolsy SPED is designed to keep student identities out of those photos:

You redact on the device. Before a photo is sent, the app lets you crop it and drag solid black boxes over the student name and any ID numbers.
The image is flattened locally. The crop and the black boxes are permanently combined into a single image on your device, so text you have covered cannot be recovered from what is sent.
A privacy guardrail. If you have not drawn any black box, the app warns you and requires an explicit confirmation ("Send anyway") before it will send the image. Because this is a manual step, we strongly recommend redacting every photo; if you choose to send without redacting, the un-blacked-out image — which may include a name — will be transmitted for reading.
IEP legal name stays on the device. The student's legal name, name suffix, and birthdate that you type into an IEP goal sheet are intentionally never sent to our servers and are never returned by the goal-reading feature.

4. Information sent off the device

Schoolsy SPED only sends data off your device for specific actions you choose to take. We do not run background tracking, and our server does not store your students' records.

When	What is sent	To whom & why
You scan a goal sheet / IEP form from a photo	The redacted image only (names/IDs blacked out; IEP legal name never included)	An AI vision provider, accessed through our processing service, to read the goal text and return structured goal fields so you can review and edit them
You import a roster or sync grades	Your LMS credentials/tokens and the specific roster or grade data for that action	Your school's LMS (Aeries, Canvas, Schoology, Google Classroom, or Infinite Campus), through our secure proxy, to read your class rosters and write your assignment scores
You sync your calendar	Your Google authorization and calendar request	Google Calendar, through our secure proxy, to show your events

Our server (the part of Schoolsy SPED that handles these requests) acts as a stateless proxy. It passes your request along, returns the result, and does not keep a copy of your students' records.

5. Third-party services

AI vision provider — reads redacted goal-sheet images you submit; receives no student names.
LMS providers — Aeries, Canvas, Schoology, Google Classroom, Infinite Campus, for roster import and grade sync that you initiate.
Google — sign-in and Calendar, for features you choose to connect.

Each of these services has its own privacy practices. We only exchange the minimum data needed for the action you requested.

6. FERPA

Schoolsy SPED is designed to support schools' obligations under the Family Educational Rights and Privacy Act (FERPA). Student education records you enter remain under the control of your school or district. Schoolsy SPED processes that information only to provide the features you use, operates under the school's direction, does not use student information for advertising, and does not sell student information. Schools and districts may request information about our data practices at the contact address below.

7. Children's privacy (COPPA)

Schoolsy SPED is a tool for educators, not a service directed to children, and students do not create accounts or use the app directly. Where a school uses Schoolsy SPED to process information about students under 13, the school provides the consent contemplated by the Children's Online Privacy Protection Act (COPPA) on behalf of parents, consistent with the school's role under FERPA. We collect from students only the limited information a teacher chooses to record to deliver the educational features described above.

8. How we protect information

Local-first design keeps most student data on the teacher's device, not on a central server.
On-device redaction lets you remove student names from images before they are sent.
On mobile devices, credentials are stored in the device's encrypted secure storage.
Data sent off the device travels over encrypted (HTTPS) connections.
Our server does not retain copies of student records.

9. Keeping and deleting data

Because data is stored on your device, you control it. Deleting a student also deletes that student's goals and related records.
Daily point and transaction data resets on its normal schedule; goals and IEP sheets persist until you delete them.
Uninstalling the app removes the app's local data from that device.
Information held by your LMS or other connected services is governed by those services and your school's own retention policies.

10. What we do not do

We do not sell student or teacher information.
We do not use student information for advertising or to build advertising profiles.
We do not send student names to our AI processing service.

11. Changes to this policy

We may update this policy as the app evolves. When we make material changes, we will update the effective date above and, where appropriate, note the change in the app.

12. Contact

Questions about privacy, or a request from a school or district, can be sent to cross@pe-point-pro.com.