Effective date: July 11, 2026
Last updated: July 15, 2026
Model B is operated by Model B LLC ("Model B," "we," "us"). Model B provides school operations software used by K-12 schools and districts ("Schools," "you").
If you're a parent, student, or member of the public, please note: Model B's customer is the school, not individual students or families. This policy explains what data Model B collects on behalf of Schools and how Model B, as a service provider, handles it. Questions about a specific student's records should go to the school directly — Schools control that relationship, and Model B acts on their instruction.
Model B is a modular platform — a school only generates data in the sections below for modules it actually uses. A school using only Dismissal, for example, has no data described in the Plan Pal or Substitute Portal sections, because those features are never active for that school. This policy describes every module currently available; it does not mean every school's data footprint looks the same.
When a school staff member creates an account, we collect their name, email address, and (if signing in via Google or Microsoft) their profile photo and account ID from that provider. If signing in with a password instead, we store a securely hashed version of the password — we never store or have access to the actual password, and no one at Model B can view it.
At sign-up and password reset, we check the password against a breach database using a privacy-preserving method that never transmits the actual password — only a small, non-reversible fragment derived from it ever leaves your browser.
For schools using student-facing modules, we collect information provided by school staff, which may include: student name, school-assigned ID, grade level, homeroom or teacher assignment, and dismissal-related information (dismissal method, transportation group, sibling relationships for coordinated dismissal).
Model B does not currently collect parent or guardian names, contact information, or relationship data.
Depending on which modules a school uses, we collect records generated through normal use of the platform: daily dismissal status and timestamps, substitute coverage session records, lesson plan submissions and file attachments, and school-recognition/award records. Each of these is generated by school staff in the course of ordinary operations — Model B does not collect this information independently.
Several areas of Model B allow school staff to enter free-text notes or upload documents — including student records, dismissal records, lesson plans, and other operational fields. School staff should not enter or upload health information, disciplinary records, custody or legal restrictions, or other sensitive personal information in these areas. Model B does not review, moderate, or process the content of free-text fields or uploaded documents; the school and its staff remain responsible for the information they choose to record or upload.
If someone attempts to sign in with an email domain we don't recognize as belonging to an existing school, we may retain that email address to follow up about Model B. This is disclosed at the point of sign-in.
We use the information described above solely to provide, maintain, and support the Model B platform on behalf of the school that authorized its collection. We do not sell personal information, and we do not use student data to serve advertising.
Access is role-based and scoped to the school (or, for district-level roles, the district) the person belongs to:
We do not sell personal information. We share information only with the service providers necessary to operate Model B, listed below, and only to the extent necessary for them to perform their function.
| Service Provider | Purpose |
|---|---|
| Vercel | Application hosting |
| Supabase | Database, authentication, and file storage |
| Sign-in (if you choose to sign in with Google) | |
| Microsoft | Sign-in (if you choose to sign in with Microsoft) |
| Resend | Transactional email (e.g., substitute coverage invitations, absence notifications) |
| Have I Been Pwned | Password breach checking at sign-up and password reset, using a method that never transmits your actual password |
| Better Stack (Betteruptime) | Uptime monitoring and public status page |
This list will be updated as Model B's infrastructure evolves. A current version is always available at our Trust Center.
We may also disclose information if required by law, or to protect the rights, property, or safety of Model B, our users, or others.
We retain data for as long as a school's account with Model B is active, in order to provide the service. If a school's relationship with Model B ends, we will delete that school's data from our active systems no later than 60 days after termination, unless a longer retention period is required by law. Schools may also request deletion of specific data during an active relationship, subject to what's necessary to continue providing the service.
Certain school-recognition features (such as academic and behavioral award announcements) may be visible to all authenticated staff at a school, rather than being restricted to administrators. This content is limited to information consistent with what schools commonly designate as "directory information" under FERPA — the category of student information a school may choose to share without individual consent, subject to the school's own annual notice and any opt-outs it maintains. That designation, and the responsibility for any required notice, belongs to each school — Model B does not make this determination on a school's behalf.
Model B is provided to schools, not directly to children. Any information about students that Model B processes is provided by the school under its own authority as an educational institution — schools act as the point of consent for their students and families, consistent with the school-official exception under FERPA and applicable state student privacy laws. Model B does not knowingly collect information directly from children outside of this school relationship.
Schools are responsible for: providing any legally required notice to parents, families, or staff about their use of Model B; determining what data is appropriate to enter into free-text or uploaded-document fields; and maintaining their own compliance with FERPA, state student privacy laws, and any internal data-handling policies. Model B acts on a school's instructions as its service provider.
We use industry-standard technical and administrative measures to protect information, including encrypted connections, role-based access controls, and secure authentication. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. More detail is available in our Security Overview.
We may update this policy from time to time. If we make material changes, we will update the "Last updated" date above and, where appropriate, notify schools directly.
Questions about this policy or how Model B handles data can be sent to hello@modelb.app.