Insignia Software ("we," "our," or "us") respects your privacy and is committed to protecting the personal data of parents, guardians, students, and educational staff ("you" or "user") who use the Insignia ISMS Mobile App.
This Privacy Policy details how information is collected, used, processed, and protected within the Insignia Student Management System (ISMS) mobile application.
Educational Data Privacy & Compliance (FERPA & COPPA)
Because Insignia ISMS Mobile App is used by school districts and educational institutions to manage educational records:
FERPA Compliance: Student educational records processed in the app are governed by the Family Educational Rights and Privacy Act (FERPA) and applicable state student privacy laws. We operate as a school official with legitimate educational interests.
COPPA Compliance: In accordance with the Children’s Online Privacy Protection Act (COPPA), student data for users under the age of 13 is collected strictly under the direction and authorization of the school district or parent/guardian.
No Data Selling: Student and educational data is never sold, rented, or used for targeted behavioral advertising under any circumstances.
Information We Collect
A. Student & Parent Profile Data
- Parent/Guardian Account Details: Name, email address, phone number, relationship to student, profile photos, and authentication credentials (including SSO login tokens from Google or Microsoft).
- Student Profile Data: Student name, student ID number, grade level, school assignment, photo, and linked family relationship details.
B. Educational & School Operations Data
- Academic Progress & Grades: Course enrollment, current grades, assignment submission status, teacher feedback, and report card summaries.
- Attendance Records: Daily/period attendance history, absence requests, and tardy notices submitted by parents/guardians.
- Schedules & School Calendar: Daily/weekly student class schedules, teacher assignments, classroom locations, and district event notices.
- Student Documents: Medical records, permission slips, academic transcripts, or administrative documents uploaded by school staff or parents.
- Fees & Financial Transactions: Account fee balances, payment transaction history, lunch account balances, and credit status. Payment processing is handled via secure, PCI-DSS compliant third-party payment gateways; we do not store full credit card details.
- Nutrition & Cafeteria Records: Cafeteria purchase records and student dietary/allergy flags.
C. Communication & Interaction Data
- In-App Messaging & Announcements: Real-time messages exchanged with teachers or school staff via SignalR chat, as well as district-wide announcements.
- Push Notifications: Firebase push tokens used to deliver alerts for new grades, attendance updates, messaging, and announcements.
D. Mobile Device & Technical Data
- Camera & Barcode/QR Scanner Access: Used solely for scanning district setup QR codes, student document uploads, or photo uploads. Images are not stored or transmitted beyond their intended app action.
- Local Application Data: Local application settings stored on the device (using standard APIs such as
NSUserDefaults/SecureStorage).
How We Use Information
The collected data is strictly used to fulfill educational management functions, including:
- Providing parents and students with secure, multi-tenant access to their school district’s ISMS system.
- Displaying real-time attendance, grades, class schedules, and teacher assignments.
- Enabling parent-teacher messaging and instant school notifications.
- Facilitating online payment of student fees and cafeteria account balance management.
- Processing student document uploads requested by school administrators.
- Authenticating user sessions via secure JSON Web Tokens (JWT).
How Information Is Shared
Data processed by the app is shared only with authorized parties necessary for school operations:
- Your School District / School Board: School administrators, teachers, and staff have access to student records in accordance with their district security roles and FERPA permissions.
- Parents & Legal Guardians: Authorized parents or guardians can view information for their linked children.
- Third-Party Identity & Integration Services: When logging in using Google or Microsoft SSO, authentication details are verified through their respective authentication services.
- Secure Service Providers: Infrastructure providers (such as cloud hosting, push notification deliverability, and PCI-compliant payment gateways) process data solely to support app operation under confidentiality agreements.
- Legal Requirements: We may disclose information if required to comply with a valid court order, legal process, or law enforcement request.
Security & Data Protection
- Encryption in Transit & Rest: All network communications between the app and school district servers are encrypted using standard HTTPS/TLS protocols. Sensitive tokens are stored in encrypted mobile storage (iOS Keychain / Android EncryptedSharedPreferences).
- Tenant Isolation: Multi-tenant architecture ensures that school district data is logically separated and only accessible to authenticated users belonging to that specific district.
- Session Expiration: User sessions automatically expire and require token refresh or re-authentication to prevent unauthorized access on shared or lost mobile devices.
Parent & User Rights
Parents, legal guardians, and eligible students have rights regarding their educational records:
- Review & Inspection: Parents can inspect student grades, attendance, and profile details directly within the app.
- Data Correction: If any student information or attendance record is inaccurate, parents should contact their school district office or administrator to request an official record update.
- Notification Control: Push notification permissions can be managed or revoked directly in your mobile device’s settings menu.
Contact Information
For technical inquiries regarding the ISMS Mobile App, please contact Insignia Software Support.