Privacy Policy

Last updated: May 27, 2026

Who we are

MoveableIQ (also referenced as www.dev.moveableiq.com) is an internal attendance-intervention tool operated by the school district. Access is limited to authorized district staff.

What student data we store, and what we don’t

The system was designed to follow the same FERPA-cautious posture as its V1 predecessor:

• We do not retain a roster of student names, grades, addresses, raw student IDs, or week-by-week attendance numbers in our database. Each time a staff member opens the tool, the current week’s data is loaded fresh from the district’s Skyward export, used in memory for that session, and dropped when the staff member closes the tab.
• The only student-related information we persist is a contact log — a record of which staff member reached out to a family, when, by what channel, and the outcome. Inside that log, the student is identified by a one-way SHA-256 hash of their student ID plus their school code, never by name or by raw ID. The hash cannot be reversed back to a student’s identity by anyone with database access.
• The contact log also captures the staff member’s account ID, the tier classification at the time of contact (on-track / at-risk / chronic), and the staff member’s free-text notes on the conversation. These notes should not contain student-identifying information; staff are asked to keep them quantitative or procedural.

What staff data we store

For each authorized staff account, we store: name, work email, work phone (optional), staff title, the schools the staff member is permitted to view, the role(s) assigned by an administrator, and standard authentication metadata (last login, lockout state, etc.). This information lives in the application database for the duration of the staff member’s authorization.

How we use this information

• To authenticate staff members and authorize their access to specific schools.
• To populate the family-communication scripts staff use to reach out.
• To compute district-level outreach summaries (no student names; based on the hashed contact log).
• To send transactional emails related to the staff member’s account (password reset, two-factor codes, account confirmations).

Cookies and session data

We use a single first-party authentication cookie to keep signed-in staff signed in across pages. We do not use advertising, tracking, or third-party analytics cookies.

Third-party services

Outbound email (account confirmations, password resets, contact-form messages) is delivered through Azure Communication Services or an SMTP provider configured by an administrator. Attendance data is read from a district-controlled Google Sheet that the district maintains. These providers process data on our behalf under their own privacy terms.

Data retention

• Contact-log entries: retained as-is for the life of the system; periodic district-level review may apply.
• Staff account records: retained while the staff member is authorized; deactivated when access is revoked.
• Roster/attendance data: not retained beyond the request that loaded it.

Security

The application runs on HTTPS only. Sensitive system credentials (API keys, third-party service passwords) are encrypted at rest using AES-256 with a master key held outside the database. Staff authentication uses standard ASP.NET Identity password hashing. Two-factor authentication is available and may be required by the administrator. Database access is restricted to the application and to a small number of administrators.

Your rights as a staff member

You can review and update your name, contact information, and staff-title fields from the Account Management page after signing in. To request changes to your role, school assignments, or to deactivate your account, contact your administrator. To request deletion of contact-log entries you authored, contact your administrator and reference the relevant week.

Questions

Use the Contact form to reach the MoveableIQ team with privacy-related questions, or escalate to your school’s administration or the district’s designated FERPA officer.

Internal district tool. Not licensed for redistribution outside the district.