Privacy Policy

Last updated: 22 September 2026

SchoolConnect (“the Service”, “we”, “us”) is a school management platform for preschools, childcare centers and after-school programs. Because much of the data we handle concerns children, this policy is written to the standard of Taiwan’s Personal Data Protection Act (個人資料保護法, “PDPA”) and explains how personal data is collected, processed and used.

1. Scope

This policy covers the following properties operated by us:

• schoolconnect.tw — this marketing site
• app.schoolconnect.tw — the guardian application
• staff.schoolconnect.tw — the staff application
• cdn.schoolconnect.tw — delivery of public assets such as school logos
• The SchoolConnect LINE Official Account and LINE Login

Systems operated independently by a school are not covered by this policy.

2. Our role: the school is the data controller, we are the processor

The school is the data controller. It decides what data is collected and how it is used, and is responsible for providing notice to and obtaining consent from guardians.SchoolConnect acts as a processor on the school’s instruction, handling personal data only to provide the Service.

The Service isolates data per school at the database level: every record belongs to exactly one school, and cross-school access is blocked by foreign-key constraints. We never share one school’s data with another, and we never sell, rent or use personal data for advertising.

If you are a guardian or a staff member and wish to exercise your rights, please contact your school first; we will assist the school as needed.

This controller/processor split applies to data inside the school platform. Where you contact us or apply for the Founding Pilot Program through this marketing site (schoolconnect.tw), SchoolConnect itself determines the purpose of collection and acts as the data controller for that data — see section 11.

3. Categories of personal data we process

3.1 Children (students)

• Name, English name, student number
• National ID number (stored encrypted — see section 7)
• Date of birth, gender
• Enrolment status and its history (start and end dates, reason)
• Classroom assignment
• Attendance records (daily status, check-in time)
• Daily contact book entries: mood, nap start and end times, lunch and snack notes, teacher notes, and photos from the day
• Health information: allergies and medical notes
• Photographs and profile images

3.2 Guardians

• Name and English name
• Email address, phone number, postal address
• Relationship to the child
• LINE user identifier (only if you sign in with LINE and link your account)
• Profile image, if provided
• Invoice and payment records (amount, status, issue and due dates)
• Announcement read and acknowledgement records

3.3 Staff

• Name, English name, staff number
• National ID number (stored encrypted)
• Date of birth, contact number, email address, postal address
• Hire date, specialization, qualifications
• Employment status and its history

3.4 Account and technical data

• Username, email address and a password hash — we never store plaintext passwords
• Audit records: actor, action, before/after values, IP address, browser user-agent and timestamp
• The originating IP address of a password-reset request
• Web push subscription data (browser endpoint and encryption keys, device user-agent)

4. Purposes and legal basis

Under Articles 19 and 20 of the PDPA, we process personal data only as necessary for these specified purposes:

• Providing the Service: attendance, classrooms, daily contact book, announcements
• Creating and maintaining school, guardian and staff accounts and permissions
• Recording and reconciling tuition invoices
• Authentication, preventing unauthorized access, and investigating security incidents
• Providing technical support at the school’s request
• Complying with legal obligations

All of the above is carried out on the instruction of the school. We do not process this data for unrelated purposes such as marketing analytics, advertising, or building cross-school profiles.

5. Where data is stored

Our compute, database, file storage and secret management all run inGoogle Cloud Platform’s Changhua, Taiwan data centre (asia-east1 region).

We use no cloud services, CDNs or SDKs based in mainland China, and no personal data is transmitted through or stored on infrastructure located there.

This section describes where SchoolConnect platform data is stored. For data you submit through this marketing site’s contact or pilot application form, seesection 11.

6. Subprocessors and international transfers (PDPA Article 8)

We engage the following service providers, each receiving only the minimum data its function requires and prohibited from using it for any other purpose:

Web push notifications are delivered through browser vendors’ push services with encrypted payloads; those services cannot read the contents.

Apart from the subprocessors above and where required by law, we do not disclose personal data to third parties. We have never sold, and will never sell, personal data.

7. Security measures

• National ID numbers are encrypted at rest using AES-256-GCM, with a separate irreversible hash used only for uniqueness checks. Plaintext is never stored.
• Passwords are stored as one-way hashes; we cannot recover your password.
• Children’s photos are held in a non-public storage bucket with all public access disabled, reachable only through signed URLs that expire after 1 hour.
• All connections use HTTPS.
• Data is partitioned per school and cross-school access is blocked in the database.
• Role-based access control, with audit records retained for investigation.
• Production secrets are held in a managed cloud secret store.

No method of internet transmission or electronic storage is completely secure; we continue to improve our safeguards but cannot guarantee absolute security.

8. Retention and deletion

Data is retained while a student is enrolled or a staff member is employed, so that contact book, attendance and billing records remain complete. Retention after a student leaves or a staff member departs:

• Student records, attendance and written contact book entries: 1 year after leaving
• Daily contact book photos: 6 months after leaving
• Audit records (including IP addresses): 1 year from creation
• Invoice and payment records: 5 years (required by Taiwan's tax and commercial accounting statutes)

Deletion is initiated by the school in the staff application. When a school stops using the Service, all of its data is deleted within the period set out in theTerms of Service. You may also request deletion of specific data as described in section 9.

9. Your rights (PDPA Article 3)

With respect to personal data we hold, the data subject (or the legal representative of a minor) may:

• Inquire about and review the data
• Request a copy
• Request supplementation or correction
• Request that collection, processing or use cease
• Request deletion

Because the school is the data controller, please direct your request to your child’s school (or your employer school), which can perform lookups, corrections and deletions directly in the staff application. If the school needs assistance, or you cannot reach them, write to hello@schoolconnect.tw and we will help.

As permitted by the PDPA, a reasonable cost-based fee may be charged for inquiries, review or copies, and a request may be refused with reasons where granting it would harm a significant public interest or the significant interests of a third party.

10. Cookies and technical data

This marketing site (schoolconnect.tw) uses PostHog for product and web analytics, session replay, and error tracking. We use it to understand use of the site and pilot application flow, diagnose errors, and improve the user experience. PostHog may use first-party cookies and browser local storage to create pseudonymous visitor and session identifiers.

Data collected through PostHog may include:

• Pages visited, referring page, timestamps, and interactions such as clicks and scrolling
• Browser, device, operating system, screen size, network and performance information, and approximate location inferred from the IP address
• Page structure and interactions used for session replay, plus frontend errors, error messages, and technical stack information
• Pilot CTA clicks; successful or failed form submissions; submission and inquiry type; language; school-size range; desired start timeframe; and consent status. Message contents are not sent.
• After a successful form submission, name, email address, and role so interactions from the same person can be associated

This data is sent to PostHog’s cloud service in the United States and deleted according to the retention settings in our PostHog account or when no longer needed for analytics and debugging. We do not use PostHog data for third-party advertising or cross-site advertising tracking. You can block cookies or clear site data through your browser settings, or contact us under section 14 to request that identifiable PostHog data be stopped or deleted.

The site also uses Cloudflare Turnstile to protect the contact and pilot application forms from bots. Turnstile may process technical information such as the visitor’s IP address during verification. Form submissions are handled as described in section 11.

The guardian and staff applications use strictly necessary authentication cookies only:

• A refresh-token cookie, set HttpOnly and Secure, that keeps you signed in
• A session-hint cookie so the interface knows whether you are signed in

The guardian and staff applications use no third-party analytics cookies, advertising cookies or cross-site tracking.

11. Marketing-site submissions (contact form and pilot applications)

For data you submit through this marketing site’s contact form or Founding Pilot application form, SchoolConnect determines the purpose of collection and acts as the data controller, and processes it as follows:

What we collect: name, email address, school / center name, role, phone or LINE ID, enrollment range, desired start timeframe, your message, the language you submitted in, and the consent choices you make.

Purpose: responding to your inquiry, assessing your pilot application, and analyzing and improving the site’s form flow.

Processors: Cloudflare, Inc. (submission storage in its D1 database) and MailerSend, Inc. (email notification to our team), and PostHog, Inc. (the form events, selected fields, and pseudonymous identifiers described in section 10, used to analyze the form flow).

Where it is stored: on Cloudflare infrastructure, configured with anAsia-Pacific placement preference. This is a placement preference, not a guarantee — Cloudflare does not guarantee that the data resides in any specific country or region.

Retention:

• General inquiries: deleted within 12 months after they are resolved.
• Declined, withdrawn or inactive pilot applications: deleted within12 months after the decision or our last contact.
• Accepted applications: migrated to the customer record when the pilot agreement is signed; the original submission is deleted within 3 months after migration.
• Consent records: retained while the consent is relied upon (migrated together with an accepted application); otherwise deleted with the parent record.

To request correction or deletion of this data, write to hello@schoolconnect.tw.Application data is never used for marketing; only if you separately tick the launch-announcement checkbox will we use your email address, and only for that single purpose.

12. Children’s personal data

All children’s data in the Service is created and provided by the school in the course of its educational and care services; we do not collect data directly from children. Notice to and consent from guardians is obtained by the school under PDPA Article 8, as part of its admission or enrolment process; SchoolConnect, as a processor, does not collect consent from guardians directly. Ask your school for a copy of the notice it provides regarding this Service.

Guardians can view records and photos relating to their own children in the guardian application. Guardians cannot view other families’ data.

13. Changes to this policy

We may revise this policy following changes in law, to the Service, or to our subprocessors. Revisions are published on this page with an updated “Last updated” date; for material changes we will additionally notify the schools using the Service.

14. Contact

For questions about this policy or about personal data, contact us:

• Email: hello@schoolconnect.tw

SchoolConnect is in a pilot phase and is not yet incorporated. Once registration is complete we will add our legal entity name, unified business number and registered address to this section, and update the date at the top of this page.