Privacy Policy

Flux Student Directory ("Flux", "we") is a school directory service operated by Flux Technologies LLC. Each school that uses Flux decides which parents, guardians, staff and students are in its directory. We process that information on behalf of the school; the school is responsible for the roster it enters and for deciding who may see it. This applies equally to information about children: we handle student information only to provide the directory to the school, never for our own purposes.

• Parents and guardians: name, email address, phone number(s), home address, optional profile photo, and which student(s) you are linked to.
• Students: name, grade or graduation year, home address (we also compute map coordinates from it), and an optional photo.
• School staff and administrators: name, email, role, and optional biography, photo and contact details they or their school choose to add.
• Things you create: your private stars, notes and custom lists, which are visible only to you.
• News Feed: the text and photos of posts that people your school has authorized publish to the News Feed, with the author's name and the time. If you read the feed you can favorite and save posts and report a post; those choices are yours (see "The News Feed" below). Photos in a post can show children.
• Responses to your school: poll answers, sign-up choices, permission slip responses and notice read-receipts.
• Account and device data: your sign-in credentials (passwords are stored only as secure hashes by our authentication provider), optional authenticator-app second factor, your time zone, and, if you turn on push notifications in the iPhone, iPad or Mac app, a device push token and your notification preferences (which kinds of notification you want, and for which categories).
• If you use our contact form: the name, email address and message you type, and an optional school name. See "Contacting us through the website" below.
• Operational records: audit logs of administrative actions (who changed what, and when) kept for the school's accountability and security.

We do not use advertising or analytics trackers, and the web app does not set tracking cookies. Cookies we do set are strictly functional (for example, your sign-in session and which school you last selected).

Only to run the directory for your school: showing the roster and staff directory to the people your school has authorized, sending school notices and notifications, collecting responses to polls, sign-ups and permission slips, showing the News Feed, showing maps and lunch menus, keeping your account secure, and supporting your school when it asks for help. We do not sell personal information, do not share it for advertising, and do not use it to build advertising profiles.

• School administrators (Senior and Junior Admins) can see their own school's full directory and manage it.
• Parents and guardians can see the school directory subject to the privacy settings each family chooses: a parent can limit their own profile so other families see only their name, and can hide their address. Your private stars, notes and lists are visible only to you, not to other parents and not to administrators.
• Flux operators (our own authorized staff, who sign in with multi-factor authentication) can view a school's rosters (students, parents and administrators) and export a school's data for support and contract purposes. Every such view or export is recorded in an audit log together with the operator's identity. Entering a school's own pages as one of its users is a separate step: it happens only after a Senior Admin of that school approves a support request, expires automatically after one hour, and is recorded the same way. Private notes, stars and lists are never included in anything an operator can view or export.
• News Feed posts are visible to the people in that school who have access to the school's News Feed, and to no one outside the school. No one, including administrators, is shown who favorited or saved a post; authors and administrators see only counts. Your saved posts are private to you.
• Schools are separated from one another at the database level; one school can never see another school's information.

We use the following service providers (sub-processors) to run Flux. Each receives only what it needs for its function:

• Supabase - database and sign-in (account identity, directory data).
• Vercel - hosting of the web application.
• Backblaze B2 - file storage. Student and parent photos and attachments live in a private bucket and are shown only through short-lived links issued after an access check. School logos live in a public bucket.
• Cloudflare - content delivery for school logos and lunch images; it also delivers News Feed photos: a Cloudflare service checks a short-lived access link and then fetches the photo from our private Backblaze storage for you. Cloudflare also provides the Turnstile check on our public contact form, which tells people from automated programs.
• Resend - sending email (registration invitations, notices, password resets, support notifications, and the questions sent through our contact form).
• Google - Maps and Geocoding (a home address is sent to turn it into map coordinates and to display the directory map) and, for lunch menu illustrations, the Gemini API (only menu text is sent, no personal information).
• Apple - push notification delivery (APNs); and, only if you choose "Continue with Apple" or "Continue with Google", Apple or Google as your sign-in provider.

• Who posts: only people the school has authorized. School administrators can post, and a Senior Admin can allow other members, such as a class parent, to post. Authors accept the school's posting policy before their first post, which includes a reminder to check the school's no-photo list. Each school decides which children may be photographed and is responsible for any permissions it needs for the photos its authors post.
• Photos: a photo is processed on our servers before anyone sees it. Location and camera details embedded in it are removed, and it is resized. If your school turns it on, a watermark (text and/or the school logo) is added. Photos are kept in private storage and shown only through short-lived links after an access check.
• Removal: an author can edit or delete their own posts, and a Senior Admin can remove any post. Removing a post takes it out of the feed and deletes its photos from storage; devices drop it the next time they sync. If you would like a post or a photo of your child taken down, ask your school administrator or contact us.
• Reports and moderation: any reader can report a post. A report goes to the school's Senior Admins only, never to other readers. A Senior Admin can remove a post, and can switch the News Feed off for the school; switching it off hides it and stops its notifications without deleting anything.
• Notification choices: in the iPhone, iPad and Mac app you can turn push notifications on or off for each kind of content (including News Feed posts) and choose which categories you want. Your choices follow your account to a new phone. They affect push notifications only; the in-app list still shows everything meant for you.
• Administrative actions on the feed (posting, editing, removing, granting and revoking authorship) are recorded in the school's audit log.

The contact form asks for your name, an email address we can reply to, your question, and optionally your school. It is sent by email to our support team, and we reply to the address you gave. We use it only to answer you. The form uses Cloudflare Turnstile to check that a person, not an automated program, is writing; Turnstile receives technical information from your browser, including your IP address, for that check, and does not set advertising cookies. The form does not require an account.

The iPhone and iPad app includes an Interactive Tour that lets anyone try the app before they have an account. It runs entirely on your device with made-up sample schools and people. It needs no sign-in and sends nothing about you to us or anyone else, and anything you change in the Tour stays on your device and is discarded when the Tour resets at 3 a.m. (device time), when you choose Reset, or when you exit.

Flux never uses real school, parent or student data for testing or development. All testing and development uses synthetic, generated data.

You can only create an account if your school has added your email address to its approved list. We use that list to link your account to the right school and students.

• Deleting your account: from your Account page you can delete your account. Your access is switched off immediately; you have 30 days to change your mind and restore it, after which your account and your private notes, stars and lists are permanently purged. Content you published for the school (notices, documents, polls, sign-ups, permission slips, calendar events) stays with the school and is reassigned to a school administrator; a permission slip you answered keeps your name and email as the signer.
• News Feed posts: published posts stay in the school's feed until they are removed. [Daniel to confirm: how long removed posts are kept before permanent deletion, if at all, beyond the removal of their photos.] When an author leaves or their authoring right is revoked, their posts stay with the school.
• Removed students and parents: when a school removes a student or a family, the related directory data is deleted from the school's roster.
• School export: a school's administrators can export the school's directory data (roster, guardians, staff, notices, menus and more) at any time. Private parent notes, stars and lists are never included in an export.
• When a school leaves Flux: the school's data is archived and can be exported or deleted at the school's request.
• Operational audit logs are kept for as long as needed for security and accountability.

You can view and correct your own contact information, change who sees your profile and address, turn off push notifications or choose which kinds you receive, enable a second sign-in factor, leave a school, or delete your account at any time from your Account page. For anything else - including requests to access, correct or delete information about you or your child - contact your school administrator first, since the school controls the roster; you may also contact us using the details below and we will route or act on your request.

Data is encrypted in transit, access is controlled by per-school database rules, sensitive administrative access requires multi-factor authentication, and administrative actions are logged. No system is perfectly secure; if we learn of a breach affecting your information we will notify the affected school(s) as required by law.

Flux is used by parents, guardians and school staff. Students do not create accounts or sign in. Information about children is entered by their school or their parents and is used only to provide the school directory. Photos that school authors post to the News Feed may show children; they are visible only inside the school's own News Feed, as described above, and are removed from storage when a post is removed.

We may update this policy; the effective date above shows the current version. Material changes will be communicated to schools and, where appropriate, in the app.

Flux Technologies LLC
Contact us through our contact form, and we will reply by email.