Last updated: May 2026

Privacy Policy

netschool ("we", "us", or "the Service") is a school management platform built for admins, teachers, guardians and students. We take the privacy of children and school communities seriously. This policy explains what data we collect, how we use it, who we share it with, and the choices and rights you have. By using the Service you agree to the practices described here and in our Terms of Service.

Information We Collect

We collect only the information needed to run a school on netschool. This includes:

• Account information: name, email address, birthdate, profile picture, and language preference
• Academic records: grades, attendance, assignments, assessments, report cards, and certificates
• Communication data: chat messages, posts, comments, and inbox notifications
• School data: classes, courses, subjects, timetables, terms, rooms, and school currency
• Relationship data: links between students and their guardians, teachers and their classes
• Media files: documents, images, and other content you upload
• Technical data: authentication tokens, device push-notification tokens, and basic log data needed to operate and secure the Service

How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain the Service for your school
• Authenticate users and keep accounts secure
• Calculate grades, generate report cards and certificates, and track attendance
• Deliver messages, posts, and notifications to the right audiences
• Send transactional emails such as login codes, password resets, and account notices
• Send push notifications to your devices when you opt in
• Display aggregate, non-identifying usage statistics on our public marketing pages
• Detect, prevent, and respond to fraud, abuse, and security incidents
• Comply with our legal obligations

Children's Privacy

netschool is used by schools, and student accounts may belong to minors. Schools act as the data controller for their students and are responsible for obtaining any consent required under applicable law (such as FERPA, COPPA, or GDPR). We process student data only on the instructions of the school and solely to provide the Service. We do not sell student data, and we do not use student personal information for advertising or to build advertising profiles.

Aggregate Public Statistics

We may display anonymized, aggregate figures — such as the total number of schools, users, posts, and post views across the platform — on our public marketing website. These totals do not identify any individual, school, or account.

How We Share Information

We do not sell your personal information. We share data only in the following limited circumstances:

• Within your school: data is visible to other users in your school according to their role and the audiences you choose
• Service providers: trusted vendors who process data on our behalf under contract (see "Third-Party Services" below)
• Optional integrations: services your school chooses to connect, such as Meta for enrollment advertising
• Legal requirements: when required by law, regulation, legal process, or to protect the rights, safety, and security of users and the Service
• Business transfers: in connection with a merger, acquisition, or sale of assets, subject to this policy

Third-Party Services

We rely on a small set of reputable infrastructure and service providers to deliver netschool. These providers process data only as needed to provide their service to us:

• Email: Resend, for transactional emails such as login codes and password resets
• Push notifications: Firebase Cloud Messaging (mobile) and VAPID-based web push
• File storage: Cloudflare R2, for uploaded media accessed through short-lived signed URLs
• Hosting: Fly.io, for production application hosting
• Database and cache: PostgreSQL and Redis, for storing and caching application data
• Meta (optional): when an admin connects a Meta advertising account, we read campaign, audience-reach, and ad-spend information to power the growth dashboard

Data Security

We protect your data with technical and organizational safeguards, including:

• Encryption in transit (TLS 1.3) and encrypted storage at rest
• Password hashing with bcrypt (12 rounds)
• JWT-based session management with secure, HTTP-only cookies
• Role-based access controls enforced at the service layer
• Encrypted storage of integration access tokens, which are never exposed to the browser
• Signed, time-limited URLs for access to uploaded files

For a fuller description of our technical controls, see our Security page. No method of transmission or storage is ever completely secure, but we work continuously to protect your information.

Data Retention

We retain personal data for as long as your account is active and as needed to provide the Service. When a school or user account is deleted, we delete or anonymize the associated personal data within a reasonable period, except where we are required to retain it to comply with legal obligations, resolve disputes, or enforce our agreements. Anonymized aggregate statistics may be retained indefinitely.

Your Rights and Choices

Depending on where you live, you may have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate or incomplete data
• Request deletion of your account and associated personal data
• Object to or restrict certain processing
• Receive a copy of your data in a portable format
• Withdraw consent where processing is based on consent

You can update much of your information directly in your account settings or request account deletion there. Because schools control their students' accounts, students and guardians should direct requests to their school administrator, who can act on them or contact us on their behalf.

International Data Transfers

Your data may be processed and stored in countries other than your own, including by the service providers listed above. Where we transfer personal data across borders, we take steps to ensure it remains protected in accordance with this policy and applicable law.

Cookies and Similar Technologies

We use cookies and similar technologies that are strictly necessary to operate the Service — for example, to keep you signed in and to secure your session. We do not use advertising or third-party tracking cookies on the platform.

Changes to This Policy

We may update this Privacy Policy from time to time. When we make significant changes, we will post the updated policy here and revise the "Last updated" date above. Your continued use of the Service after changes take effect constitutes acceptance of the updated policy.

Contact Us

If you have questions about this Privacy Policy or how your data is handled, please contact your school administrator or reach out to the netschool support team.