Privacy Policy

1. Who We Are

TrackEDU (“we”, “us”, or “our”) is operated by Ravlo LLC. This platform is designed for K–12 educators and administrators to track and manage student behavior incidents. We are committed to protecting the privacy of students, educators, and all users of our platform.

2. Information We Collect

We collect the following categories of information:

• Account information: name, email address, role, and school/district affiliation provided during registration.
• Student behavior data: incident records, severity levels, locations, actions taken, and notes entered by educators.
• Usage data: device type, OS version, app version, and session activity to improve the product and troubleshoot issues.
• Push notification tokens for delivering in-app alerts (stored securely; never sold).

3. How We Use Your Information

• To provide core behavior tracking functionality.
• To generate reports and analytics for authorized staff.
• To send email summaries and push notifications when configured by your district.
• To maintain security, detect fraud, and enforce our Terms of Service.
• To comply with applicable law, including FERPA and applicable state student data privacy laws.

4. Student Data & FERPA

TrackEDU processes student education records as a “school official” acting on behalf of the educational institution. We do not sell, share, or use student data for advertising purposes. Student data is owned by the school or district and is used solely to provide the contracted services. All student education records are retained for a minimum of seven (7) years in accordance with FERPA requirements.

5. Data Sharing

We do not sell your personal information. We share data only with:

• Your school or district administrators who have authorized access.
• Service providers who process data on our behalf (e.g., cloud hosting, email delivery) under strict data processing agreements.
• Law enforcement or regulators when required by law or to protect safety.

6. Data Retention

We retain data according to FERPA-compliant retention schedules:

You may request earlier deletion by contacting your district administrator or reaching us at [email protected].

7. Security

We use industry-standard safeguards including TLS encryption in transit, AES-256 encrypted storage at rest, role-based access controls, multi-tenant data isolation, and biometric-protected local sessions. Our infrastructure is SOC 2 Type II certified. No method of transmission or storage is 100% secure; we will notify affected users promptly in the event of a breach.

8. Your Rights

Depending on your jurisdiction, you may have the right to access, correct, or delete your personal data. Requests from educators and administrators can be submitted to [email protected]. Requests related to student records should be directed to your school or district.

9. Illinois SOPPA Compliance

TrackEDU complies with the Illinois Student Online Personal Protection Act (SOPPA). We do not use covered information for targeted advertising, do not build profiles on students for non-educational purposes, and support school operators’ rights to access, correct, and delete student data. Our Data Processing Agreement is available upon request.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated to district administrators via email at least 30 days before they take effect. Continued use of TrackEDU after the effective date constitutes acceptance of the updated policy.

11. Contact Us

Questions or concerns about this Privacy Policy? Contact us at: