DRAFT — pending legal review. This text is not the policy in force yet.

How we look after your family's data

EdRise takes the reports the school already emails you, and the FAST results you choose to upload, and explains them. This page says, with no fine print, what data we use, what for, who it is shared with and how to ask for it to be deleted.

Last updated: [PENDING: publication date]. This text describes what the system does today and must be reviewed by a lawyer before it is published.

Who we are

EdRise is a service of DSC Software, the data controller, located at [PENDING: address]. For any question about your data, write to us at ds880219@gmail.com.

We handle the students' data on behalf of their mother, father or guardian: you are the one who brings it to EdRise and decides about it.

Who it is for

EdRise is for mothers, fathers and guardians of students. It is not meant to be used by children: students do not have an account and do not interact with the service. For now, you can only join by invitation.

What data we use

From your account

Your name, your email and your photo, as Google shares them when you sign in, and the language you choose.
The identifier of your Telegram chat, if you connect Telegram to receive alerts.
The members of your family that you invite, and the role of each one.
The personal key of your Gmail script: we keep only a fingerprint (a hash) of it, never the key itself.

From the school reports

The emails that the school's grading system (Pinnacle, of Miami-Dade County Public Schools) sends to you: they include the student's name, subjects, assignments, grades, categories and attendance.
We keep the original email exactly as it arrived for 90 days, so we can verify it and process it again if we fix a mistake.

From the FAST results you upload

Your child's FAST report (the "Individual Student Report" PDF), if you choose to upload it, and the school grade you enter for them. More details in FAST results.

From what you do in EdRise

The answers you give about attendance (for example, whether an absence is correct), any note you add, and which member of your family answered.
A record of family actions: invitations, people joining and leaving, role changes and deletions of FAST data.

We do not use advertising tools or third-party tracking.

Where it comes from

You install a small Google script (Apps Script) in your own Gmail, from our template. Every minute it looks for the emails that come from the school's grading address (noreply_gb@dadeschools.net) and forwards only those to EdRise. The permission you give it over your Gmail is read-only: it cannot send, delete or change anything. Google also asks you to let it connect to EdRise and schedule itself every minute.

The script identifies itself with a personal key that the portal gives you. When each report arrives we verify its digital signature (DKIM) to confirm that the school really sent it.

You can turn the script off at any time from your Google account, or revoke its connection code in the portal, and from then on nothing else arrives.

FAST results only arrive if you upload the PDF in the portal. EdRise never signs in to the Florida FAST Family Portal: we only give you the link so you can download the report yourself.

FAST results

The FAST report you download from the FAST Family Portal includes your child's name, their Florida Student ID, their date of birth, their school and their results.

We use the name only to check that you uploaded the report of the right student, and we do not store it separately.
Of the Florida Student ID we keep only a fingerprint computed with a secret key (a keyed hash), which lets us recognize the reports of the same student. The ID itself is not stored separately.
We do not extract the date of birth, the school or the district.
Of the results we keep the test, the testing window, the score, the level, the percentile and the result by area and by question.
The original PDF, which does contain all of that data, is kept while your family exists in EdRise, so we can read it again if we improve the reader.
Whoever has the owner role in the family can delete one report, or all of a student's FAST data, from the portal. The deletion is permanent.

During each FAST testing window we may remind you on Telegram to upload the results. The reminder mentions the student's first name, not their results.

What we use it for

Showing you in the dashboard how your child is doing: grades, trends, attendance and what is coming.
Sending you a daily summary on Telegram, and alerts when something changes.
Identifying the topic of each assignment and suggesting free material to practice.
Explaining the FAST results, comparing them with the class grades and suggesting topics to practice.
Letting you know if the reports stop arriving, so you can check the connection, and reminding you to upload the FAST results.

We do not sell your data or your children's data, we do not use it for advertising and we do not build profiles for third parties.

Artificial intelligence

We use artificial intelligence models for these tasks. In each one we send the minimum necessary:

Task	What is sent	What is never sent
Identifying the topic of each assignment	Subject name, period, assignment titles, dates and categories	The student's name, grades, school
Writing the daily summary	Subjects, assignments, topics, grades, weights and dates, with the student's name replaced by a placeholder	The student's first or last name, school, student number
Suggesting practice material	Subject name and topic	Any data about the student
Translating topics into English	Only the topic names	Any data about the student
Explaining the FAST results	Per subject: grade, testing window, level, percentile and strong and weak areas, with the student's name replaced by a placeholder	Name, Florida Student ID, date of birth, school, teacher

Today we use free models through OpenRouter. The providers of those free models may keep or use the content they receive under their own terms, which is why we never send them the student's name or identification numbers. Assignment titles are written by the teacher and are sent as they appear in the school's report.

The AI does not make decisions about your child. A text written by the AI is only used if it passes our checks (for example, that every number matches the data); if it does not, we use a text built directly from the data.

Where it is stored

The data is stored on servers in the United States, encrypted in transit and at rest by our providers.

How long

The original emails from the school are deleted 90 days after they are received. By then we have already extracted what the dashboard needs (grades, assignments and attendance), and the full email is the most sensitive data we keep. Of a deleted email we keep only its fingerprint (a hash), its message ID, when it arrived and how it was processed, so it is never processed twice. Our provider's backups may keep it for a limited time.
Grades, attendance and summaries that were already processed are kept while your family has the account active, so you can see how things evolve during the year.
The FAST reports you upload (the PDF and its results) are kept while your family exists in EdRise, until the family owner deletes them. Our provider's backups may keep them for a limited time.
If the owner dissolves the family from the portal, at that moment nobody else can sign in to it, the keys of the Gmail scripts stop working and all of the family's FAST data is deleted; that data cannot be restored. Everything else about the family (grades, attendance, emails, students and accounts) is kept for 7 days, in case the owner changes their mind and asks us to restore the family; after that it is all deleted permanently. Our provider's backups may keep it for a limited time.
If you ask to close the account, we also delete the rest of your family's data (grades, attendance, emails and accounts) within 30 days, except what the law requires us to keep.

If someone leaves your family, what they contributed (for example, the reports that arrived from their Gmail) stays in the family's history, their connection code stops working and we stop receiving new data from their account.

Your rights

You can ask us at any time, for yourself and on behalf of your children, to:

Show what data we have about your family.
Correct whatever is wrong.
Delete your account and your family's data. A student's FAST data can also be deleted directly by the family owner from the portal.
Stop sending data: turn off the Gmail script or revoke its key in the portal whenever you want. To stop receiving alerts, block our bot on Telegram or ask us to disconnect your chat.

Write to us at ds880219@gmail.com and we will answer within 30 days.

Security

You sign in with Google or with a personal Telegram link that works once and expires in 15 minutes. We do not store passwords.
Every request to the dashboard checks, at that moment, that you are a member of the family and what your role allows.
The keys of the Gmail scripts and the Telegram links are stored only as a fingerprint (a hash).
We verify the digital signature of each school report to rule out fake emails.
Only the technical team of DSC Software has access to the database, and uses it only to run the service and solve problems.

Cookies

We use a single cookie, needed to keep you signed in (it lasts up to 30 days). Your browser also remembers three preferences of yours: light or dark theme, which student you were viewing, and your language. We do not use advertising or analytics cookies. The pages load their typeface from Google Fonts, so your browser connects to Google's servers to download it.

Changes

If we change this policy in an important way, we will tell you in the dashboard and on Telegram before the change applies.