Privacy information
School-controlled student data
Last updated: September 6, 2026
Information used for the service
The service may process a school-approved name, school email, role, grade level, school-issued student ID, destinations, pass requests, approvals, returns, and limited pass notes. It is not designed for medical, disability, counseling, discipline, address, financial, or other sensitive personal information.
How information is used
Waypoint Pass uses school information only to authenticate approved users, operate the hall-pass workflow, show authorized school staff the records they need, and maintain school-requested pass history. It does not sell student information, use it for behavioral advertising, or build marketing profiles from it.
School control and requests
Your school controls the student records it places in Waypoint Pass. For access, correction, export, or deletion requests, contact your school administrator. The school should verify the requester and submit any authorized request through its Waypoint Pass owner or school-admin process.
Service providers
Waypoint Pass uses hosted providers to deliver the service, including Supabase for authentication and database services, Vercel for web hosting, and, when enabled by the school, Google sign-in and Resend invitation email delivery. Schools should review these providers during their vendor review.
Retention and deletion
Records are retained only while the school authorizes the service and according to the school agreement. An authorized school deletion request removes the school workspace and its associated records from the active application. Backups and contractual retention details must be confirmed in the school agreement before production use.
Security
Waypoint Pass uses authenticated accounts, role-based access controls, and school-separated data rules. No online service can promise absolute security. Schools should promptly report suspected unauthorized access to the Waypoint Pass owner and avoid sending student information through unapproved channels.