Privacy Policy

ConxK12 is a communication app for teams, groups, and schools. Accounts belong to adults — parents, guardians, coaches, teachers, and organizers. We collect:

• Your account information: name, email address, phone number, and your role (for example, parent or coach).
• Information about children, provided by adults: a parent or organizer may add a child's name to a team roster and link it to their own account. Children do not create accounts or sign in.
• Group content: announcements, events, messages, images, and permission slips that members of your groups create.
• Signatures and consents: when you sign a permission slip electronically, we store your typed signature and the consent record.
• Fee records: organizers can track who has paid a team fee. This is a checklist, not a payment system — we never collect or process card numbers.
• School records (school-connected accounts only): grades, attendance, and assignments shared by a connected school [VERIFY before first school contract].
• Usage and technical data: sign-in cookies, your language preference, an audit log of sensitive actions, and first-party usage events (which features are used). These stay in our own database — we use no third-party analytics services.

We use this information to:

• Run your groups: deliver announcements, events, and messages to the right people
• Keep consent records (like signed permission slips) that organizers rely on
• Send you notifications you have chosen to receive
• Keep the app secure and improve how it works
• Meet legal obligations

We do not sell personal information, and we do not use it for third-party advertising.

If you connect Google Calendar, ConxK12 writes your group and team events into your calendar and updates or removes the events it created. Events we create carry a ConxK12 tag, and syncing reads back only events carrying that tag — we do not read your other calendar events [VERIFY against listTaggedEvents implementation].

ConxK12's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

You can disconnect at any time in the app's calendar settings or at your Google Account's permissions page. Disconnecting deletes the connection token we hold [VERIFY code path]. If you prefer not to connect Google, you can subscribe to your schedule with a private calendar feed link instead; anyone with that link can read the events in the feed, so treat it like a password.

We do not sell personal information. We do not share it for third-party advertising. Information is shared only:

• Within your groups: content you post is visible to the group members it is addressed to, and roster information is visible to that group's organizers.
• With our service providers, who host the service for us and are bound to protect it: Supabase (database), Google Cloud (Kaia computing and calendar sync), and Vercel (web hosting).
• With a connected school or district, for school-connected accounts, as directed by the school.
• When the law requires it, or to protect the rights and safety of users.

We keep information for as long as your account is active, or as needed for the purposes above [VERIFY retention periods and legal-hold exceptions]. Signed consent records may be kept longer because the organizations you signed them for rely on them [VERIFY].

To delete your account and associated data, email privacy@conxk12.com from your account email. We delete associated data rather than merely deactivating the account. An in-app deletion option ships with our mobile apps.

You can:

• Access and correct your account information in the app
• Request a copy or deletion of your data (section 7)
• Disconnect Google Calendar at any time
• Turn Kaia off in your settings
• Opt out of non-essential notifications

Depending on your state, you may have additional rights [VERIFY state-law inventory with counsel]. To exercise any right, use the contact in section 10.

Questions, requests, or complaints about privacy: