Privacy Policy
Effective Date: September 6, 2026
1. Overview
This App ("the App") is designed specifically for use in educational environments with a strong emphasis on student privacy, minimal data collection, and teacher or school control. The App is intentionally built to limit the collection of student information and to support compliance with applicable student data protection standards.
2. Information We Collect
We follow a strict data minimization approach.
We do NOT collect:
- Student accounts or login credentials
- Student email addresses
- Biometric data
- Location tracking data
- Behavioral tracking beyond hall pass usage
We may collect limited operational data:
- Student ID or other teacher-assigned identifier associated with a student
- Student name, when enabled by the teacher
- Hall pass activity, such as time out, time returned, and destination
- Teacher-created room identifiers
- Account information for adult account holders
- Technical information, such as IP addresses and browser or session identifiers, where applicable, as needed to secure, protect, and operate the service.
3. Purpose of Data Use
Any collected data may be used to:
- Facilitate hall pass management
- Provide real-time visibility of students out of class
- Generate reports
We do not use data for:
- Advertising
- Selling personal data to third parties
4. Data Ownership and Management
Data entered into the App is managed by the individual teacher or school using it, as applicable.
- Individual teachers or schools determine what student information they choose to enter and may request deletion of that information
- EdKeep does not claim ownership of user-entered data
5. Data Retention
EdKeep retains personal information only for the specific educational and operational purposes described in this Policy and does not retain student personal information indefinitely. Student personal information is deleted from active systems within 30 days after termination of a signed contract or receipt of a written deletion request, as applicable. Backup copies may be retained for disaster recovery for up to 90 days after deletion from active systems. Information may be retained longer where required by law or reasonably necessary in connection with an outstanding legal matter.
6. Security Measures
We implement reasonable administrative, technical, and physical safeguards, including:
- Secure account-holder access via password and/or PIN authentication
- Encrypted data transmission using HTTPS
- Restricted access to stored data
Because the App does not require student accounts and limits student data collection, the amount of student information collected is significantly reduced.
7. How We Share Information
We do not sell or rent personal data. We may share limited information only as described below:
a. With Authorized School Personnel:
- Student information (such as student ID, hall pass activity, and names, when used) is visible to authorized school personnel with access to the applicable room or rooms.
- In school mode, the names and email addresses of school personnel are visible to other school personnel within the same school.
b. Service Providers:
- Where required by applicable law, EdKeep takes reasonable steps to use service providers capable of maintaining the confidentiality, security, and integrity of covered personal information and relies on applicable written terms, agreements, or other documented assurances regarding those protections.
- Subprocessors:
Subprocessor Function Student Data Certifications Vultr Web hosting & data Yes ISO/IEC 27001, 27017, 27018; SOC 2 Type II; CSA STAR AWS Encrypted backups Yes ISO/IEC 27001, 27017, 27018, 27701; SOC 2 Type II; CSA STAR Transactional emails No Zoho Email hosting No ISO/IEC 27001, 27017, 27018, 27701; SOC 2 Type II Open AI Optional AI assisted reporting No ISO/IEC 27001, 27017, 27018, 27701; SOC 2 Type II Tawk Live chat No - - For optional AI-assisted reporting, the account holder's written report request may be sent to an AI service. Student records are not sent to the AI service.
c. Legal Requirements:
- If required by law or valid legal process.
8. Student Privacy Protections
The App is designed to align with school privacy expectations:
- No student accounts required
- Configurable, minimal student data entry
- No automatic tracking of students across devices
These design choices reduce unnecessary data collection and support student privacy.
9. Compliance with Education Laws
The App is designed with applicable education privacy laws in mind, including:
- FERPA (Family Educational Rights and Privacy Act)
- COPPA (Children's Online Privacy Protection Act), where applicable
- Applicable federal and state-level student data privacy laws
EdKeep's privacy and data-minimization features are intended to support compliance efforts. Individual teachers and schools remain responsible for their own policies, permissions, and use of the App.
When a school discloses personally identifiable information (PII) from students' education records to EdKeep in reliance on FERPA's school-official exception, and the applicable requirements of that exception are satisfied, EdKeep acts as a school official solely for purposes of providing the school-authorized EdKeep service. With respect to such information, EdKeep is subject to the school's direct control regarding the use and maintenance of education records as required by FERPA, uses the information only for the purposes for which it was disclosed, and does not re-disclose the information except as authorized by the school or otherwise permitted by law.
When EdKeep collects personal information online from a child under 13 as part of a school-authorized educational use, EdKeep may rely on authorization provided by the school acting as the parent's agent where permitted under COPPA. Information collected on that basis is used only for the authorized educational purpose and not for advertising or other unrelated commercial purposes.
When relying on school authorization, EdKeep provides the school information about its collection, use, and disclosure practices and permits the school, upon request, to review or request deletion of covered student information and to prevent further collection or use as required by applicable law.
10. Parental and School Rights
The applicable teacher or school manages student information entered into EdKeep. Parents and eligible students should generally contact the relevant teacher or school regarding requests to inspect, review, or seek correction of student records.
Authorized teachers and school staff can use available EdKeep tools to review, edit or delete student roster and pass restriction information, review or download student hall pass activity, and void individual passes where applicable. Where the available tools do not address a particular request, EdKeep will, upon request from the applicable teacher or school, reasonably and promptly assist with access to, correction of, or deletion of student information maintained through the service.
11. Changes to This Policy
We may update this Privacy Policy periodically. Updates will be posted within the App or on the associated website.
12. Contact Information
For privacy-related questions or requests, please email to or contact here.
13. Summary of Privacy Approach
The App is intentionally designed to be privacy-centric:
- No student accounts
- Minimal student data collection
- No automatic tracking of students across devices
- Teacher- or school-managed data, depending on deployment
This approach minimizes risk and supports adoption in K-12 environments.