Shulware | Children Privacy Policy

School Module Student and Children Privacy Notice

Effective Date: March 3, 2026

This Student and Children Privacy Notice (“Student and Children Privacy Notice”) applies to the School Module application (the “Application”) offered by Shulcloud, LLC (“Shulcloud”, “we”, “our”, or “us”), and explains our practices for student-related information and information about children and/or minors under the age of 18 (“child” or “children”) that we collect, store, and process on behalf of educational agencies or institutions (“schools”) that utilize our Application.

When we use the term “student-related information” in this Student and Children Privacy Notice, we mean “education records”, “personally identifiable information”, and “directory information”. These terms come from the federal Family Educational Rights and Privacy Act (FERPA), which gives parents and eligible students (students age 18 or older, or students enrolled in postsecondary education at any age) specific rights over student-related information. You may also have rights under state rules, including California’s K-12 Pupil Online Personal Information Protection Act (KOPIPA). This Student and Children Privacy Notice endeavors to make you aware of those rights and how Shulcloud handles student-related information.

This Student and Children Privacy Notice also describes our practices for handling information about children we may receive from schools and is required under the U.S. Children’s Online Privacy Protection Act (“COPPA”). We do not collect any information directly from children. Children do not have access to the Application. Instead, a school delivers or otherwise makes available to us information about children in connection with the school’s use of the Application. The information we may collect is the student-related information described in this Student and Children Privacy Notice. We will specify where there are any differences in the way we treat student-related information generally, and information about children.

This Student and Children Privacy Notice uses terms that are defined in our general Privacy Policy. Unless specifically noted, this Student and Children Online Privacy Policy does not apply to the general websites https://shulware.com/ or https://www.shulcloud.com/ (together, the “Site”).  We do not knowingly collect or maintain personal information of any children from the Site, and no parts of the Site are directed to or designed to attract children.  For more information on our privacy practices for the Site, please see our general Privacy Policy.

If we collect electronic protected health information, we do so at the direction of the school and in compliance with applicable law, including the Health Insurance Portability and Accountability Act of 1996 (“HIPAA”).

What is an education record?

Under FERPA, an education record generally means records directly related to a student and maintained by a school or someone acting on the school’s behalf. Education records we collect may include:

grades, class lists, and course schedules
biographical information such as date of birth, gender, and family relationships
identifiers such as addresses or other information that can identify or locate a student

What is personally identifiable information?

Under FERPA, personally identifiable information (“PII”) generally includes information that directly or indirectly identifies a student. PII that we collect may include:

name and address
names and addresses of parents or family members
indirect identifiers like birth date or a parent’s maiden name

Certain categories of PII we collect may include “sensitive” PII as that term is defined in various U.S. federal or state laws, including religious information, disabilities, and socioeconomic information. Any PII, including any sensitive PII, will be handled in accordance with this Student and Children Privacy Notice and applicable law.

What is directory information?

Under FERPA, directory information means information contained in an education record of a student that would not generally be considered harmful or an invasion of privacy if disclosed. Directory information we collect may include:

name, mailing address, or telephone number
email address
date of birth
grade level
attendance dates and enrollment status

Directory information may not include a student’s:

username, or other system identifier unless they are only accessible with a PIN, password, or authentication factor

Sharing student-related information under FERPA

FERPA generally requires the parent’s or eligible student’s written consent before sharing education records or PII. However, schools may share information without consent with education service providers, like Shulcloud, that:

perform services schools would normally handle themselves
serve a legitimate educational interest
are under the school’s direct control regarding use of student-related information

If a school designates an education record as directory information, the school can disclose that information without the parent’s or eligible student’s written consent. The school must first, however, provide public notice to the parent or eligible student of:

the information designated as directory information
the parent’s or eligible student’s right to opt out of or restrict directory information designations
the time period provided to exercise that right

How we handle student-related information

For any student-related information in our possession, we use reasonable methods to restrict access, destruction, use, modification, or disclosure, including physical, administrative, and technological controls.

We will only use student-related information for the reason it was provided. In addition, we will ensure that student-related information is not re-disclosed to others unless the parent or eligible student consents or an exception applies (e.g., information related to health or safety emergencies).

We will only request or collect the minimum amount of student-related information that is needed to support the school in its use of the Application. Finally, we will delete any student-related information for any student who the school notifies us has not been enrolled for the past 60 days. Whenever we delete student-related information, we follow specific disposal protocols designed to ensure the information is unreadable or undecipherable.

When we may share student-related information with others

We may share or disclose student-related information in a limited number of instances, which we identify under the “Sharing of Information” section of our general Privacy Policy. We do not share any student-related information with third parties for those third parties’ direct marketing purposes.

Interest based advertising

We do not disclose student-related information to third parties related to targeted advertising, including email marketing and cross-contextual behavioral advertising.

Cookies and other information collection tools

When users interact with the Application, certain information may be automatically collected, both to make our Application more useful but for various purposes related to our business. Examples include the type of computer operating system, the user’s IP address or mobile device identifier, the web browser, the frequency with which the user visits various parts of our Application, and information regarding the online or mobile service provider. This information is collected using technologies such as cookies, web beacons, and other unique identifiers, which we describe under the “Cookies and Other Information Collection Tools” section of our general Privacy Policy. This information is collected directly by Shulcloud. This data is principally used for internal purposes only, in order to:

provide users with access to features on our Application
operate and improve our Application
troubleshoot technical issues and maintain quality of our Application
provide general statistics regarding use of our Application
help detect and prevent fraud

Third-party data collection

We do not utilize any third parties to automatically collect information when a user interacts with our Application, e.g. an advertising network or social network plug-in, the use of a persistent identifier.

Your rights under FERPA and COPPA

Under FERPA and COPPA, parents have the right to, and under FERPA, eligible students also have the right to:

Access education records

You may inspect and review the student’s education records in our possession.

To request access, please email us at questions@shulcloud.com. We will promptly forward your request to the school, who will provide you access to the education records.

Request corrections

You may request correction of education records you believe are inaccurate, misleading, or violate the student’s privacy rights.

To request a correction, please email us at questions@shulcloud.com. We will promptly forward your request to the school, who will work with you to make the correction.

File a complaint

You may file a complaint with the U.S. Department of Education if you believe a student’s FERPA rights have been violated. You may learn more about FERPA’s complaint process here.

You may also file a complaint with the U.S. Federal Trade Commission (“FTC”) if you believe your rights under COPPA have been violated. You may learn more about the FTC’s complaint process here.

Contact information; questions

If you have any questions regarding this Student and Children Privacy Notice, please contact us at legal@togetherwork.com.

Notification of changes to this Student and Children Privacy Notice

Any changes to this Student and Children Privacy Notice will be posted to this page so parents and eligible students are always aware of the student-related information we collect and how we use it. Accordingly, please refer back to this Student and Children Privacy Notice frequently as it may change.