🔒
Privacy Policy
Last Updated: October 1, 2025
📋 Quick Summary
We collect your name, email, and achievement data to run this educational platform. We use Supabase to securely store this information. We don't sell your data or use it for advertising. Parents can request to see, correct, or delete their child's information. We follow FERPA and COPPA laws to protect student privacy.
Questions? Email us at admin@fams.school
Introduction
Welcome to the FAMS (Falcon Achievement Management System) Demo. This Privacy Policy explains how we collect, use, protect, and share information when you use our student achievement tracking platform. We are committed to protecting the privacy of our students, teachers, and administrators.
This application is designed for educational use by students, teachers, and administrators at Austintown Schools. Because we serve students who may be minors, we take extra care to protect student privacy and comply with applicable laws including the Family Educational Rights and Privacy Act (FERPA).
Who We Are
FAMS Demo is an educational achievement tracking system operated for Austintown Schools. For questions about this Privacy Policy, please contact us at: admin@fams.school
Information We Collect
Information You Provide Directly
When you create an account or use our services, we collect:
- Name: Your first and last name
- Email Address: Your school-issued email address (e.g., @austintownschools.org)
- Role: Whether you are a student, teacher, or administrator
- Avatar: An emoji avatar you select for your profile
- Password: If you create an account with email/password (stored securely and encrypted)
Information Collected Through Use of the Service
When you use FAMS, we automatically collect:
- Achievement Points: Points earned or spent by students
- Transactions: Records of point awards and redemptions, including comments from teachers
- Classroom Enrollments: Which classes students are enrolled in
- Achievement Data: Badges and achievements earned by students
- Sign-in Information: Dates and times when you access the system
- Technical Information: Browser type, device type, IP address, and operating system
Information from Third Parties
- Google Authentication: If you sign in with Google, we receive your name, email address, and profile information from Google according to your Google account settings
How We Use Your Information
We use the information we collect to:
- Provide the Service: Create and manage your account, track achievement points, display leaderboards, and enable classroom management
- Authenticate Users: Verify your identity when you sign in
- Communicate: Send important updates about your account or the service
- Improve the Service: Analyze how the platform is used to make improvements
- Ensure Security: Detect and prevent unauthorized access or misuse
- Comply with Legal Obligations: Meet our legal and regulatory requirements
✅ We do NOT:
- Sell student information to third parties
- Use student data for advertising purposes
- Share student data for commercial purposes unrelated to educational services
Third-Party Services We Use
🗄️ Supabase (Database and Authentication Provider)
We use Supabase, Inc. as our backend infrastructure provider. Supabase provides:
- Database hosting and management
- User authentication services
- Secure data storage
Supabase acts as a "data processor" on our behalf, meaning they process student data according to our instructions and their contractual obligations to us.
Supabase maintains industry-standard security practices and compliance certifications including:
- SOC 2 Type 2 Certification
- HIPAA Compliance capabilities
- Data encryption in transit and at rest
Supabase's Privacy Policy: You can review Supabase's privacy practices at https://supabase.com/privacy
Data Location: Your data is stored on Supabase's secure servers. You can learn more about Supabase's data storage and security practices in their privacy policy.
Data Processing Agreement: We have appropriate data processing agreements in place with Supabase to ensure student data is protected and used only for educational purposes.
🔐 Google OAuth (Authentication)
We use Google OAuth to allow users to sign in with their Google Workspace accounts. When you sign in with Google:
- Google authenticates your identity
- We receive basic profile information (name, email) from Google
- Google's Privacy Policy applies to their authentication services: https://policies.google.com/privacy
FERPA Compliance
The Family Educational Rights and Privacy Act (FERPA) is a federal law that protects the privacy of student education records. We are committed to FERPA compliance:
- Educational Records: Information collected through FAMS may be considered part of a student's educational record
- School Control: Austintown Schools maintains control over student educational records
- Parental Rights: Parents have the right to inspect and review their child's educational records
- Consent: We do not share student educational records with third parties without consent, except as permitted by FERPA (e.g., school officials with legitimate educational interests)
Data Security
We take the security of student information seriously and implement multiple layers of protection:
- Encryption: All data is encrypted in transit (using HTTPS/TLS) and at rest
- Access Controls: Role-based access ensures users can only see appropriate information
- Authentication: Secure authentication through Google OAuth or encrypted passwords
- Regular Security Updates: We keep our systems updated with the latest security patches
- Limited Access: Only authorized personnel have access to student data
- Monitoring: We monitor for unauthorized access and security threats
⚠️ Important: No system is 100% secure. While we use industry-standard security measures, we cannot guarantee absolute security.
Student and Parent Rights
For Students Under 18
If you are under 18, your parent or legal guardian has certain rights regarding your information:
- Access: Parents can request to see what information we have collected about their child
- Correction: Parents can request corrections to inaccurate information
- Deletion: Parents can request deletion of their child's account and information (subject to school record retention policies)
- Opt-Out: Parents can request that their child not participate in the FAMS system
For Students 18 and Over
If you are 18 or older, you have the right to:
- Access your information
- Request corrections to your information
- Request deletion of your account
- Opt-out of the service
How to Exercise Your Rights
To exercise any of these rights, please contact us at: admin@fams.school
We will respond to your request within 30 days.
Data Retention
We retain your information for as long as:
- Your account is active
- Needed to provide you with our services
- Required by law or school record retention policies
When you delete your account or upon request:
- We will delete or anonymize your personal information within 60 days
- Some information may be retained in backup systems for up to 90 days
- We may retain certain information as required by law or for legitimate educational purposes
Information Sharing
We share your information only in the following limited circumstances:
- With School Officials: Teachers and administrators can access student information relevant to their educational responsibilities
- With Service Providers: We share data with Supabase and other service providers who help us operate the platform (under strict data protection agreements)
- With Your Consent: We may share information with your explicit consent
- For Legal Reasons: We may disclose information if required by law, court order, or to protect safety and security
- In Case of School Transfer: If a student transfers schools, records may be shared with the new school as permitted by FERPA
❌ We do NOT sell or rent student information to third parties.
Children's Privacy
FAMS is designed for use in an educational setting and may be used by students under 13. We comply with the Children's Online Privacy Protection Act (COPPA) and FERPA:
- We collect only information necessary for educational purposes
- We do not require students to provide more information than necessary to use the service
- Parents have the right to review and request deletion of their child's information
- We do not use student data for advertising or marketing
Changes to This Privacy Policy
We may update this Privacy Policy from time to time. When we make changes:
- We will update the "Last Updated" date at the top of this policy
- For material changes, we will notify users via email or a prominent notice in the application
- Continued use of the service after changes constitutes acceptance of the updated policy
We encourage you to review this Privacy Policy periodically.
Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us:
For School-Related Privacy Questions: Please contact Austintown Schools administration