Legal

Privacy Policy

Last updated: August 2026

This is a draft.

This policy accurately describes what PTSA.app's software actually does today, but it has not been reviewed by a lawyer. Please have it reviewed before relying on it as a binding legal document.

What we collect

When you create an account, we collect your name, email address, and a securely hashed password (we never store your actual password — see "How we protect your data" below). Depending on how you use PTSA.app, we may also collect:

  • Your school/organization affiliation and role (parent, student, staff, or PTSA leadership)
  • Names and grade levels of students you add to your family (never sensitive information like medical or disciplinary records — we don't collect that at all)
  • Payment information when you pay membership dues or make a donation — handled entirely by Stripe; your card details never reach PTSA.app's own servers
  • Your IP address, briefly, to prevent abuse (e.g. automated account creation or password guessing)
  • Messages you send us through our Contact form

What we don't do

  • We don't sell your data, to anyone, ever.
  • We don't run advertising or ad-tracking on this site.
  • We don't use third-party analytics trackers.
  • We don't collect Social Security numbers, medical information, or student disciplinary records.

Who we share data with

We use a small number of infrastructure providers to run PTSA.app:

  • Stripe — processes membership and donation payments. We never see or store your full card number.
  • Cloudflare — hosts our application and database (Cloudflare Workers and D1).

We don't share your information with anyone else, except when required by law.

How we protect your data

Passwords are hashed (never stored in plain text) using PBKDF2, an industry-standard algorithm. Sessions are protected with secure, HTTP-only cookies. All traffic to PTSA.app is encrypted (HTTPS). Every request is checked against cross-site request forgery (CSRF) before anything changes in your account.

Children's information

PTSA.app is designed for use by parents, school staff, and PTSA leadership. Where students use the platform directly (for example, to see school announcements or volunteer opportunities), we collect only their name and grade level — nothing more. If you're a parent and have concerns about your child's information, contact us using the details below and we'll help.

Your choices

You can update your communication preferences at any time from your dashboard. To request that we delete your account or data, contact us — we'll respond promptly.

Changes to this policy

If we make material changes to this policy, we'll update the "last updated" date above.

Contact us

Questions about this policy? Contact us or email hello@ptsa.app.