DrillReady Privacy Policy

Overview

DrillReady is a school safety application designed to help schools manage emergency drills and real emergencies. We take the privacy of student and staff data seriously. This policy explains what information we collect, how we use it, and your rights under applicable law.

Information We Collect

How We Use This Information

We use collected information only to provide the DrillReady service:

• Synchronizing drill and emergency data across authorized devices at your school
• Displaying real-time student and staff accountability during drills and emergencies
• Generating drill reports for record-keeping
• Delivering push notifications to staff when a drill or emergency begins or ends
• Allowing staff to reset their passwords

Data Storage

All data is stored in Apple's CloudKit public database, hosted on Apple's servers. Data is scoped to your school's unique school code — devices from other schools cannot access your data. We do not operate our own servers.

Apple's data practices are governed by Apple's Privacy Policy.

FERPA Notice (United States)

DrillReady is designed to support compliance with the Family Educational Rights and Privacy Act (FERPA), 20 U.S.C. § 1232g.

• DrillReady acts as a school official under FERPA, accessing student education records solely to perform functions that the school would otherwise perform directly.
• Student data (names and grade levels) is used exclusively for emergency accountability purposes.
• DrillReady does not disclose student information to any third party.
• Schools retain full control over student data. Administrators can delete any student record or drill report at any time from within the app.
• DrillReady does not collect Social Security numbers, birthdates, addresses, or any information beyond name and grade level.
• Schools are responsible for ensuring they have appropriate authority under FERPA to enter student information into DrillReady.

Canadian Schools (PIPEDA)

For Canadian schools, DrillReady complies with the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy legislation.

• Personal information is collected only with the knowledge of the school administrator.
• Information is used solely for the purpose for which it was collected (emergency accountability).
• Data is not transferred outside of Apple's CloudKit infrastructure.
• Individuals may request access to or deletion of their information by contacting us at drillreadyschools@gmail.com.

Data Retention

Drill and emergency session reports are retained until deleted by a school administrator. Administrators can delete individual reports at any time from within the app. Student and staff records remain until removed by the administrator.

We do not retain any data independently — all data lives within your school's CloudKit records.

Children's Privacy

DrillReady does not collect information directly from students. Student records (name and grade level) are entered by school administrators and staff. We do not knowingly collect personal information from children under 13 beyond what is entered by authorized school personnel for safety purposes.

Your Rights

School administrators may at any time:

• View all data associated with their school
• Delete individual student or staff records
• Delete drill and emergency session reports
• Delete all user accounts

Changes to This Policy

We will update this policy as the app's features change. The effective date at the top of this page will reflect the most recent revision. Continued use of DrillReady after a policy update constitutes acceptance of the revised policy.

Contact