1. The short version
SchoolFolder stores private school-related records for the parent or guardian who creates them. We collect only the information needed to provide, secure and improve the service. We do not create public child pages or public record-sharing links.
2. Information you provide
This can include account details, child nicknames or initials, school context, folder records, notes, incident descriptions, communications, meetings, follow-ups, document metadata and private uploads. You decide what to add.
3. Sensitive information
School records may include sensitive or health-related details. Add only information you are authorised to record and genuinely need. Where possible, use initials or descriptions instead of full names for other children.
4. How information is used
Information is used to authenticate you, display your private folders, create timelines and reports, protect the service, enforce plan limits, respond to support requests and meet legal obligations.
5. Storage and security
Private uploads are stored outside the public web directory and served through authenticated ownership-checked routes. Passwords are hashed. Forms use cross-site request forgery protection, and database operations use prepared statements. No online system can guarantee absolute security.
6. Access, export and deletion
You can update account details, export structured account data and request permanent deletion from Account settings. Some minimal security or transaction records may need to be retained where law requires it.
7. Service providers and payments
Hosting, email and payment providers process limited data on our behalf when configured. Stripe payment collection is disabled until production keys are supplied. SchoolFolder does not store full payment-card numbers.
8. Children’s privacy
Accounts are for parents and guardians, not children. There are no public child profiles. Users should minimise identifying information and avoid recording unnecessary information about other children.
9. Contact
Privacy questions can be sent through the contact page.