Privacy Policy

1. Introduction

SPED Goals (“we”, “our”, or “us”) operates the SPED Goals iOS application (the “App”). This Privacy Policy explains what information we collect, how we use it, and your rights regarding that information. By using the App, you agree to the practices described in this policy.

This App is intended for use by licensed special education teachers and educators only. It is not directed at children under 13, and we do not knowingly collect personal information from children.

2. Information We Collect

2a. Information You Provide Directly

• Account registration: Email address, display name, and password when you create an account. If you sign in with Google or Apple, we receive your name and email from those providers.
• Student records: First names (or aliases), grade level, IEP target descriptions, and progress notes that you enter for the students on your caseload. This data is stored under your account and is never linked to student identifiers beyond what you choose to enter.
• Purchase information: If you subscribe to SPED Goals Premium, Apple processes your payment. We receive confirmation of your subscription status, product ID, and expiry date — we never see your payment card details.
• Shopify store orders:If you purchase physical resources in the in-app store, your shipping address and order details are processed by Shopify, Inc. See Shopify's Privacy Policy at shopify.com/legal/privacy.

2b. Information Collected Automatically

• Usage analytics: We use Firebase Analytics (Google LLC) to collect anonymous, aggregated data about how features are used (e.g., screens viewed, buttons tapped, subscription events). No personally identifiable information is included in analytics event payloads.
• Push notification token:If you enable notifications, your device's FCM registration token is stored on our servers to deliver reminders and announcements. You can disable notifications at any time in iOS Settings.
• Crash and performance data: Firebase Crashlytics may capture device model, iOS version, and stack traces when the app crashes. No student data is included in crash reports.

3. How We Use Your Information

We do not sell your data. We do not use your data for advertising.

4. Student Data and FERPA

Student records you enter into SPED Goals (names, IEP targets, progress logs) are stored in your account and are accessible only by you. We act as a service provider / data processor for this data. We do not access, share, or analyze student records for any purpose other than operating the App on your behalf. Teachers using SPED Goals are responsible for ensuring their use of the App complies with FERPA, IDEA, and any applicable district policies.

5. Data Sharing and Third Parties

We share data with the following categories of service providers, each bound by data processing agreements:

• Google LLC (Firebase): Cloud storage, authentication, analytics, push messaging, serverless functions. Google Privacy Policy
• Apple Inc.: In-app purchase processing and Sign in with Apple. Apple Privacy Policy
• Shopify Inc.: Physical store checkout and order fulfillment. Shopify Privacy Policy

We do not share your data with any other third parties except when required by law or to protect our legal rights.

6. Data Retention

• Account data: Retained for the lifetime of your account plus 30 days after deletion.
• Student records: Deleted immediately when you delete a student or close your account.
• Analytics data:Aggregated/anonymous; retained per Google's Analytics retention settings (default 14 months).
• Push tokens: Purged when you log out or uninstall the App.

7. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access a copy of the personal data we hold about you
• Correct inaccurate personal data
• Delete your account and all associated data — you can do this directly in the app (Profile → My Account → Delete Account) or by emailing us at the address in Section 10. See our Account Deletion Policy for full details including what is and is not deleted.
• Withdraw consent for push notifications at any time via iOS Settings → Notifications → SPED Goals
• Lodge a complaint with your local data protection authority

To exercise any of these rights, contact us at the address in Section 10.

8. Data Security

We use industry-standard safeguards: TLS encryption in transit, Firestore security rules that restrict access to authenticated account owners only, and least-privilege Cloud Function authentication using Firebase ID tokens. No method of transmission over the internet is 100% secure; we cannot guarantee absolute security.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you via in-app announcement or email for material changes. Continued use of the App after an update constitutes acceptance.

10. Contact Us

If you have questions, concerns, or data requests, please contact: