SCHOOL YEARS, INC.
1. Scope
This Privacy Policy describes how School Years, Inc. ("School Years," "we," "us") collects, uses, discloses, retains, and protects information in connection with the School Years mobile application, website, and related services ("Services"). School Years is initially offered through participating schools in Florida.
2. Information We Receive
From schools and/or authorized photography companies: student name, grade, student ID, student email, parent email, phone number, school-related photographs, city, state, and school content, where provided. Schools and photographers may also provide event photos and videos.
During account activation and use: student ID and date of birth used to match a student to a profile; registration or updated contact details; profile image, sports/clubs, senior quote, short biography, social links; and, for alumni, college, major/minor, email, phone, and social links if entered. Parents may supply photos and videos for purchased tribute pages. Users may submit limited writings on other students' profiles.
Technical and transaction information: device and usage information, logs, security events, and records needed to deliver the Services; purchase status and transaction identifiers from Apple. Apple processes in-app payments; School Years does not need full payment card numbers for Apple in-app purchases.
3. How We Use Information
We use information to establish and verify accounts, deliver school and alumni profiles, display authorized photos/videos and school news, enable purchases and tribute pages, support users, maintain security, prevent misuse, administer the Services, and comply with legal obligations. School-supplied student information is used to operate School Years for the relevant student and school community, not for third-party advertising.
4. Who Can See Information
Visibility depends on account type, school affiliation, and paid access. Eligible students may access profiles and content for their school, subject to purchase and access rules. Alumni may access eligible alumni profiles under applicable access restrictions. Profiles may show a headshot, sports/clubs, senior quote, biography, and social links; alumni may add educational and contact information. Parents can access their child's account through Parent Mode but cannot interact with other student accounts. Limited profile writings are visible only to the participants as described in the Services.
5. Disclosures and Service Providers
We disclose information only as reasonably necessary to operate the Services, including to authorized hosting and infrastructure providers (primarily Contabo and some Amazon Web Services), participating schools and authorized partners as permitted, Apple for in-app purchase processing, and other providers confirmed in our vendor inventory. We may disclose information when required by law or to protect safety, rights, or security. We do not sell student personal information or use it for targeted advertising.
6. Children and Parent Access
School Years serves school communities that may include children under 13. Student records may be provided by participating schools or authorized photography partners before a student or parent activates access. For eligible children, parents/guardians can register through Parent Mode. We handle children's information and parental/school authorization in accordance with applicable law and agreements.
7. Child Safety Reports
School Years maintains a zero-tolerance policy against Child Sexual Abuse and Exploitation (CSAE) and Child Sexual Abuse Material (CSAM). To report suspected child exploitation, abusive content, or related safety concerns, contact our designated safety contact at support@school-years.com.
When we receive a report, we may collect and use information provided in the report and relevant account or content information to review the concern, protect users, enforce our Terms, and make reports to appropriate authorities where required by law. We handle such information in accordance with this Privacy Policy and applicable law.
8. Security
We use reasonable administrative, technical, and organizational safeguards appropriate to the information and Services. No system is completely secure. Users should protect account credentials and notify support of suspected unauthorized access.
9. Retention and Graduation
We retain information as reasonably necessary to provide school and alumni features, maintain purchased content while available, comply with applicable school agreements and law, address disputes, and protect security. After graduation, a student profile may transition to an Alumni Profile and remain available unless deleted or otherwise removed. If a school stops participating, an existing profile may remain unless removal is required or validly requested. We do not promise perpetual storage or access.
10. Choices and Deletion
Users can update available profile information and request account deletion through the app. If unable to access the app, contact support@school-years.com to request deletion; we may request reasonable verification but users should not send sensitive identifiers by ordinary email unless a secure method is provided.
Deletion may not remove copies held independently by schools or other users, and limited records may be retained where legally required or otherwise permitted. Parents/guardians may contact us about a child's information and available rights.
11. Communications
We may send service-related notices, account information, and essential updates. If we send optional promotional messages, recipients may opt out as required by law.
12. Changes and Contact
We may update this Policy and provide notice of material changes as required by law. Questions, privacy requests, or concerns: School Years, Inc., support@school-years.com.
At School Years we allow users to request the permanent deletion of their account and all associated data.
What data will be deleted?
How to request deletion?
If you wish to delete your account and do not have access to the application, send an email following these instructions:
Response Time
Once the request is received, we will process the permanent deletion of your data within a maximum period of 5 business days.