Consumer Health Data Privacy Notice

Categories the app may process

A parent may choose to enter disability or support-plan status, evaluation information, behavior or mental-health-related events, missed services, accommodations, and other information that could identify a minor's past, present, or future physical or mental health status.

Source and purpose

The source is the authorized adult using the app. The purpose is to provide the adult-requested local organization, drafting, follow-up, meeting-preparation, multi-child, action-tracking, document-index, caregiver-handoff, export, deletion, and optional AI-assistance functions. Enter only what is reasonably necessary for that purpose.

Collection, sharing, and sale

Sensitive desk content is processed in the adult's browser and is not received into a School Support Desk desk-content database. It is never sold. Hosting requests, payment data, and deliberately submitted feedback must not include desk content.

If the adult deliberately requests AI Assist, the School Support Desk server sends OpenAI only the selected issue type, facts, what remains unresolved, desired next step, and tone. It does not attach a child profile, other issue history, meetings, action items, document-index entries, or documents. OpenAI processes those selected fields to return a draft and practical next-step suggestions. Requests use store: false; OpenAI says API data is not used for training by default unless its API customer opts in, but abuse-monitoring logs may be retained for up to 30 days under OpenAI's current policy. Do not include information that is unnecessary for the request.

A caregiver handoff is an unencrypted local export. School Support Desk does not receive it unless the adult intentionally sends it to support or another School Support Desk-controlled channel. The adult chooses the recipient and transfer method.

The optional resource-email list is separate from the desk and free tools. It requests only an adult's email address and confirmation; do not enter child, school, disability, health, IEP, 504, support-message, or desk information.

A visit through a deliberately published Google Search, YouTube, Pinterest, or Facebook link may imply an interest in IEP or 504 organization. The page may store only the channel's fixed source label in session storage for the current tab and sends nothing back to the channel. If you subscribe in that tab, School Support Desk attaches the fixed label to Stripe metadata. The label contains no child, IEP, 504, school, support-message, free-tool entry, or private-desk information and is not a gclid, keyword, search term, referral code, or user identifier.

Access, withdrawal, and deletion

The adult can view, edit, export, and delete local information in the app. Erasing the desk withdraws future local processing on that browser. Because School Support Desk does not receive the locally stored desk or caregiver handoff file unless it is deliberately sent, it cannot remotely identify, access, or delete those local copies. AI Assist fields already processed by OpenAI may remain in OpenAI abuse-monitoring logs for the period described above. For any health-related information deliberately sent through support, contact support@schoolsupportdesk.com to request access, withdrawal, or deletion.

Security

The service minimizes transmission by keeping the desk local except for fields deliberately submitted to AI Assist, restricts external connections, and does not load analytics or advertising trackers. A discovery source marker is fixed, limited to the current tab, and not a user identifier. Browser storage and caregiver handoff files are not encrypted. Protect the device and exported files, and do not use a shared or public computer for sensitive records.