Skip to content
Legal

Privacy Policy

Plain-language commitments about how district, student, and staff data is handled. Last updated August 2026.

Who this policy covers

This policy explains how Swipe K12 Solutions, Inc. handles information when a school or district uses our attendance, campus safety, and student ID products.

Districts are the data controller for student records. We act as a school official / service provider under FERPA and process data only on the district's instructions.

Information we process

Student and staff roster data supplied by your student information system: name, student or staff ID, grade level, schedule, guardian contact details, and photo where the district enables ID printing.

Event data generated by using the product: check-ins, tardies, hall passes, visitor sign-ins, and device or scanner identifiers.

Account data for district administrators, including name, work email, and audit logs of administrative actions.

How we use it

To deliver the features the district has licensed, to provide support, to keep the service secure, and to produce reporting for authorized district staff.

We do not sell student data. We do not use student data for advertising, targeted marketing, or to build commercial profiles. We do not train third-party advertising models on district data.

Sharing

Data is shared only with subprocessors that host or operate the service under contract, and only to the extent needed to run it. We disclose data to law enforcement solely when legally required and, where permitted, notify the district first.

Children's privacy

Where COPPA applies, the district provides consent on behalf of parents as permitted for school-authorized educational services. Parents may direct requests to their district, which can then instruct us.

Retention and deletion

We retain district data for the duration of the agreement. On request or within 30 days of termination, we delete or return district data, excluding backups that expire on a rolling 35-day schedule.

Security

Data is encrypted in transit and at rest, access is role-based and logged, and staff access to production data is limited to personnel who need it for support. See our Security & Compliance page for details.

Your rights and requests

Parents, guardians, and eligible students should contact their school or district to review, correct, or delete records. Districts may submit requests to us at any time and we will respond within 30 days.

Changes

If we make a material change to this policy, we notify district administrators by email before it takes effect.

Contact

Swipe K12 Solutions, Inc., St. Augustine, FL 32095. Email privacy@swipek12.com or call 800-613-5767.