Your students' information, handled like it matters.
What we store, who can see it, how it's protected, and what we will never do with it. Every statement on this page describes how the app works today.
What we store
Rosters, guardian contacts, fees and payments, forms and signatures, attendance, assignments and recordings, inventory and music: the records a program needs to run. The full list is in our data privacy agreement.
Who can see it
- Each program's records are walled off from every other program, enforced by the database on every request.
- Staff see only the areas their role allows. Families see only their own children.
- When we help with a support question, we open a time-limited session, record the reason, and log it.
How it's protected
- Every connection is encrypted with HTTPS.
- Data is stored with Supabase, which states that data on its platform is encrypted at rest and in transit.
- Passwords and keys for connected services are encrypted before they're stored.
- A full encrypted backup is copied off-site every day, locked so that even our own server can't read it, and kept for 30 days.
- Demo schools are fictional, and nothing they "send" ever leaves the app.
Payments
Card numbers never touch Program Partner. Families pay on Stripe's, Square's or PayPal's own secure pages, and we keep only the card brand and last four digits for the receipt.
What we will never do
- Sell student or family information.
- Use it for advertising, or put advertising trackers in the app.
- Send school records to AI services, or let AI assistants and other outside apps sign in to anyone's account.
- Use it for anything other than running your program.
Student privacy law
- We act as a school official under FERPA, at the school's direction.
- For students under 13, the school provides consent for the information it shares with us, as COPPA allows.
- We'll sign a student data privacy agreement with your district. Request ours below.
Your rights and your data
- Directors and teachers can export student records any time.
- To correct or delete information, contact your program first, or email us.
- When a program leaves or asks us to, we return or delete its records within 45 days.
Request our data privacy agreement
Send us your district's name and, if you have one, the agreement your district already uses. We'll reply within one business day with ours, or with yours signed.
Request the agreement