Privacy policy

1. Information We Collect

Anonymous Reports: When a report is submitted, we do not collect personal identifiers unless the reporter voluntarily provides them. We may collect minimal metadata (timestamp, general device type) to ensure system functionality.

School Administrator Data: To provide our service, we collect contact information (name, email, school affiliation) from authorized school personnel. This is used solely for account management and communication regarding the platform.

2. How We Use Information

• To Facilitate Reporting: The primary use of data is to deliver incident reports to the designated school administrators.
• To Improve Safety: Aggregated, anonymized data may be used to identify trends and improve our tools, but individual reports remain confidential to the school.

3. Data Security

We implement industry-standard security measures to protect data against unauthorized access, alteration, disclosure, or destruction. All data is encrypted in transit and at rest.

Access to reports is restricted to authorized school personnel. We do not sell student or school data to third parties.

4. Compliance

Upstander is designed to help schools comply with relevant student privacy laws, including FERPA and COPPA. We work with educational institutions to ensure our practices align with their legal obligations.

5. Updates to This Policy

We may update this privacy policy from time to time. We will notify users of any significant changes by posting the new policy on this page.

Last Updated: February 2026