Privacy policy

Who this application serves

The application is designed for invited adult parents, guardians, teachers, office staff, and school administrators. It is not intended for children to create or operate accounts. A guardian or authorized school employee manages any information about a child.

The current public demo and internal-test builds contain fictional identities and synthetic school records. Please do not enter real student, family, medical, attendance, financial, or confidential school information while the release is marked as a synthetic evaluation.

Information used by the current demo

Demo role selection, drafted messages, profile edits, sample photos, calendar choices, and other synthetic changes may be stored locally in the browser or application storage so the demonstration survives a refresh. The demo does not require a production school account. Resetting demo data or clearing the application’s local storage removes those local changes.

Basic security and reliability logs may include a timestamp, requested route, response status, and coarse device or browser information. They are intended to diagnose errors and protect the service, not to advertise or build commercial profiles.

Information a future connected service may use

Connected accounts remain disabled for real school use. If the school authorizes a connected release, the service may process only the information required for approved features, such as:

• account identity, role, contact details, session, and security information;
• authorized household, guardian, child, class, and staff relationships;
• messages, attachments, calendar events, invitations, RSVPs, and notification preferences;
• attendance or logistics requests and documents intentionally submitted to the school; and
• audit, delivery, synchronization, and operational records needed to secure and support the service.

Each connected data domain must pass the school’s authority, minimization, consent, retention, security, and vendor review before it can be enabled. FACTS remains the authoritative source for any domain the school has not formally migrated.

How information is used

Information is used to authenticate authorized adults, provide school and family communication, complete requested school workflows, deliver notifications, protect accounts, prevent abuse, maintain service reliability, and meet approved school or legal obligations. The application does not sell personal information and does not include third-party advertising.

Service providers and access

The planned connected architecture uses Supabase for authentication and structured records, Cloudflare for protected media processing and delivery, Expo and the Apple or Google platform services for signed mobile builds and notifications, and school-approved email or notification providers. Providers receive only the information needed to perform their contracted function. Their final production configuration and data disclosures must be verified before connected school use.

Access is limited by school role, household, class, and task. Sensitive documents are intended to use private storage and short-lived access links. Hidden buttons are never treated as authorization; connected access is enforced by authenticated server operations and database policies.

Retention, deletion, and choices

Synthetic demo changes can be reset from the Account area or removed by clearing local application data. Before real school data is enabled, the school must approve a record-specific retention and deletion schedule. Some official school, safety, audit, or legal records may need to be retained even after account access ends; optional profile information and user-provided media should be removed when no longer required under that schedule.

Account and data-deletion instructions are available at waldorfmaui.app/account-deletion. Guardians may also manage available directory visibility and notification preferences inside the application.

Contact and policy changes

Privacy or data questions may be sent to support@waldorfmaui.app. Do not include student medical details, documents, or other sensitive records in ordinary email. This policy will be updated before any connected school-data release and whenever material practices or providers change.