Privacy Policy

Version 1.0 · Effective August 28, 2026 · Last updated August 28, 2026

This Privacy Policy explains what information TrackStudents collects, why it is collected, how it is protected, who can access it, how long it is kept, and what rights you have. It is written for educators, so it avoids unnecessary legal language.

1. Our commitments

  • TrackStudents does not sell student information.
  • TrackStudents does not use student information for targeted advertising.
  • TrackStudents does not use student information to train artificial intelligence or machine-learning models.
  • TrackStudents does not request or intentionally collect student photographs.

2. Information about account holders

When you create an account, TrackStudents stores your name, email address, the account type you chose, your workspace and classroom memberships and role, and your acceptance of these policies (version and timestamp).

TrackStudents also records limited operational activity such as sign-in times, which staff member entered or corrected a record, exports you perform, and support messages you send. This exists so classroom documentation is attributable and auditable.

3. Information about students

Student information is entered by educators, not by students. TrackStudents is designed to hold only what its classroom functions need: student name, classroom enrollment, daily grades and grading events, redirections, positive recognition, safety and behavior documentation, classroom notes, and hall pass activity with timestamps and duration.

TrackStudents does not ask for Social Security numbers, financial information, medical or counseling records, government identification numbers, home addresses, or student photographs, and users are instructed not to enter them.

4. Why the information is collected

Information is used to provide the service you asked for: recording daily performance, producing classroom and parent-facing reports, managing hall passes, supporting staff collaboration inside a workspace, keeping records accurate and correctable, securing accounts, and providing support.

Information is not used for advertising, for profiling unrelated to classroom documentation, or for training AI or machine-learning models.

5. Who can access information

Access is enforced in the database itself through row-level security, not only in the interface. In practice:

  • Teachers and support staff see only classrooms they own or have been invited to and accepted.
  • Workspace administrators see the classrooms and records within their own workspace.
  • Workspaces are isolated from one another; an invitation is the only way access crosses a workspace boundary.
  • TrackStudents platform personnel may have limited administrative access for support, troubleshooting, security, abuse prevention, service maintenance, and lawful obligations.

6. How information is protected

TrackStudents runs on managed cloud infrastructure. Data is transmitted over encrypted connections (HTTPS/TLS) and stored on managed, encrypted database and storage services. Access rules are enforced at the database layer, privileged operations are restricted to verified platform administration, and sensitive actions such as role changes, deletions, and exports are written to append-only audit logs.

TrackStudents does not claim any security certification or audit accreditation, and no service can guarantee absolute security.

7. Service providers

TrackStudents relies on infrastructure and service providers to operate — including managed application hosting, a managed PostgreSQL database and file storage, authentication services, and transactional email delivery. These providers process information only as needed to run TrackStudents and are subject to their own contractual and security obligations. TrackStudents does not sell information to, or allow advertising use by, any provider.

8. Retention and deletion

Records are kept while your account and workspace remain active, so classroom history stays available across the school year.

Archiving keeps records readable and exportable. Deletion by an authorized user removes the data from active TrackStudents systems immediately and is not reversible in the application, so export first. Deleted content may remain briefly in routine encrypted infrastructure backups until those backups age out, or where a legal obligation requires retention.

Removing a staff account does not erase classroom history that other staff still rely on; the account's profile is retired so past entries still resolve to a readable name.

9. Your rights and choices

Authorized teachers and administrators can export the records they are permitted to access at any time from Settings, in CSV form, and administrators can export a full workspace archive. You may request correction or deletion of records you are authorized to manage. Schools and districts may direct requests about their own data through their administrator.

10. Changes to this policy

This policy carries a version number and effective date. Substantive updates may require you to review and accept the current version before continuing to use TrackStudents.

Questions about these documents can be sent through Help & Support inside TrackStudents.