Privacy Policy

Last updated: June 17, 2026

1. Introduction

SPEDup Education ("we," "our," or "us") is committed to protecting the privacy of students, educators, and all users of our behavior tracking platform. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application and web dashboard (collectively, the "Service").

We understand the sensitive nature of student behavioral data and are committed to maintaining the highest standards of data protection for student educational records.

2. Information We Collect

2.1 Information You Provide

  • Account Information: Name, email address, phone number, role (teacher, administrator, etc.), and school affiliation.
  • Student Information: Student names, classroom assignments, and assigned staff members.
  • Behavioral Reports: ABC (Antecedent-Behavior-Consequence) reports, BASE reports, incident details, timestamps, locations, and intervention information.
  • Communication Data: Messages, alerts, and notifications sent through the platform.

2.2 Information Collected Automatically

  • Device Information: Device type, operating system, unique device identifiers.
  • Usage Data: Features accessed, time spent on the platform, interaction patterns.
  • Log Data: IP addresses, browser type, access times, and referring URLs.

3. How We Use Your Information

We use the collected information to:

  • Provide and maintain the Service
  • Generate behavioral analytics and reports for IEP planning
  • Send real-time alerts and notifications to authorized personnel
  • Improve and personalize user experience
  • Ensure platform security and prevent fraud
  • Comply with legal obligations
  • Communicate important updates about the Service

4. Data Protection Principles

SPEDup Education is committed to protecting student data. We follow these core principles:

  • We use student education records only for the purposes for which disclosure was made
  • We do not disclose student information to third parties without proper authorization
  • We maintain appropriate administrative, technical, and physical safeguards
  • We support schools in responding to records requests from parents and eligible students
  • We continuously work to improve our security and privacy practices

5. Data Sharing and Disclosure

We may share information in the following circumstances:

  • Within Your Organization: With authorized school personnel based on role-based access controls
  • Service Providers: With trusted vendors who assist in operating our Service (e.g., cloud hosting), bound by confidentiality agreements
  • Legal Requirements: When required by law, court order, or government regulation
  • Safety: To protect the safety of students, staff, or the public in emergency situations

We never sell student data or use it for advertising purposes.

6. Data Security

We implement comprehensive security measures including:

  • End-to-end encryption for data in transit and at rest
  • Role-based access controls limiting data access to authorized personnel
  • Regular security audits and vulnerability assessments
  • Secure authentication including multi-factor authentication options
  • Automatic session timeouts and activity logging
  • Regular employee training on data protection practices

7. Data Retention

We retain student behavioral data in accordance with your school or district's data retention policies and applicable state and federal requirements. Schools may request deletion of data at any time, subject to legal retention requirements. When a student leaves a school or district, their data can be exported and/or deleted upon request.

8. Your Rights

Depending on your location and role, you may have the right to:

  • Access your personal information
  • Correct inaccurate data
  • Request deletion of your data (subject to legal requirements)
  • Export your data in a portable format
  • Opt out of certain data processing activities

Parents and eligible students should contact their school directly to exercise rights regarding student educational records.

9. Children's Privacy

SPEDup Education is designed for use by educators and school administrators, not directly by students. We do not knowingly collect personal information directly from children under 13. All student data is provided by authorized school personnel in accordance with applicable laws and school policies.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date. For significant changes, we will provide additional notice via email or in-app notification.

11. SMS Communications

SPEDup Education uses SMS text messaging for two purposes only, both of which are transactional and opt-in:

  • Two-Factor Authentication (2FA): When you enable the "SMS Verification" toggle in your in-app Settings > Security, we send a one-time verification code via SMS each time you sign in.
  • Admin Support Alerts: When a teacher in your school designates you as part of their Response Team, you will receive an SMS when that teacher initiates an admin support request from inside the SpedUp Education mobile app.

11.1 How You Opt In

During account onboarding in the SpedUp Education mobile app you are asked to enter and verify a mobile phone number. The phone-entry screen displays the following consent disclosure that you must affirmatively accept by tapping "Send Verification Code": "By tapping Send Verification Code, you agree to receive SMS messages from SpedUp Education, including one-time verification codes if you enable SMS-based 2FA and admin support alerts if a teacher in your school adds you to their Response Team. Message frequency varies. Message and data rates may apply. Reply HELP for help, STOP to cancel." The opt-in is unchecked by default and requires your active confirmation; entering a phone number is optional and can be skipped.

In addition, SMS-based 2FA is off by default. You enable it by toggling "Enable SMS-based 2FA" in Settings > Security, which displays an additional disclosure before activating.

11.2 How You Opt Out

You may opt out of all SMS messages from SpedUp Education at any time by replying STOP to any message you receive. You may also disable SMS 2FA in Settings > Security or ask the Response Team owner to remove you from their team. Reply HELP to any message for assistance. Standard message and data rates may apply. Message frequency varies based on your account settings and incident frequency.

11.3 SMS Data Sharing

No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. All categories of personal information described in this Privacy Policy exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties. SpedUp Education does not send marketing SMS of any kind. SMS messages are delivered through our messaging service provider (Twilio) solely to transmit the transactional messages described above on our behalf.

12. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us:

  • Email: privacy@spedupeducation.com
  • Address: SPEDup Education, Inc.

For concerns about student data, please contact your school's administration, who can work with us to address your questions.