Privacy Policy

EduSupervise is a duty-scheduling app for K-12 schools. We collect what we need to do that job and nothing else.

• Email — your login, your reminder delivery channel.
• Name — your display name on the duty roster and in coverage broadcasts.
• Phone — only if you opt in to SMS reminders. Most users don't.
• School name + identifier — to keep your school's data separate from other schools' (multi-tenant isolation).
• Duty schedule data — who covers what shift, when, and where.
• Schedule uploads and staff requests — files you upload, availability preferences, and leave or absence notes you choose to provide. Do not include medical details or student names.
• Optional parent contacts — names, email addresses, phone numbers and route tags entered by your school for coverage alerts. Schools must have permission to use these contacts.
• Device and security information — notification tokens or browser subscriptions, session identifiers, and IP addresses or browser details used for sign-in security and audit logs.
• Notification log — which reminders fired, when, and whether they were delivered. This is for the app, not for advertisers.

• No advertising IDs. No third-party trackers. No Facebook Pixel.
• No location data. We don't track where you are. (The duty location is a school room number, set by the admin — not your GPS.)
• No student or child data. EduSupervise is for staff scheduling only. The students you supervise are referenced by class name (set by the admin), never tracked as individual records.

Your school's data lives in a private Postgres database hosted on servers operated for Ashbi Inc. Connections to the hosted app use HTTPS. Account passwords are stored as hashes.

Each school is a separate tenant. Other schools cannot see your school's data. Staff at your school can see the roster and schedule they need to do their jobs — school admins see more than teachers. We use Postgres row-level security to enforce tenant isolation for school requests. Authorized background services access the data needed to send reminders and maintain the app.

EduSupervise uses a small number of third-party services to deliver the product. Each one receives only the data it needs to do its job.

• Mailgun (email delivery) — receives your email and the message body. Sends transactional email (reminders, coverage alerts, account notifications).
• Stripe (web billing only) — would receive billing details for paid plans. EduSupervise is free during the beta, so no billing details are collected. Stripe is never used inside the phone apps.
• Apple Push Notification service (APNs) — receives a device token from the iOS app and the notification payload. Apple's privacy policy governs that data.
• Google Firebase Cloud Messaging (FCM) — receives a device token from the Android app and the notification payload. Google's privacy policy governs that data.
• Mozilla / browser push services (Web Push only) — receives a per-browser subscription endpoint and a public VAPID key. The notification payload is encrypted so the push service cannot read it.

We keep your data while your account is active. Delete your own account at /account/delete. That starts a 30-day grace period, then we delete the account. School records that other people still use are kept. If you were the last person at a school, email cameron@ashbi.ca and we will remove the leftover school records.

Audit logs (who did what, when) are retained for 365 days during the free beta. We retain them for debugging, not for compliance surveillance.

• Export — there is no self-serve JSON dump. Email cameron@ashbi.ca if you need a copy of your data.
• Delete — delete your own account at /account/delete. That starts a 30-day grace period. Email cameron@ashbi.ca if you need leftover school records removed after everyone has left.
• Correct — change your phone number on Preferences. To change your name or email, write cameron@ashbi.ca.
• Analytics — Plausible analytics is not enabled in this environment.

EduSupervise is a staff tool. We do not knowingly collect personal data from anyone under 18. School admins who reference students by name are responsible for compliance with their district's student data policies; we provide the tool, not the policy.

We will email all school admins at least 30 days before any material change takes effect. The "Effective" date at the top of this page is the source of truth — refresh it from time to time.

Questions, complaints, or formal privacy requests: cameron@ashbi.ca. We respond within 5 business days.