Privacy Policy

Effective Date: June 18, 2025

Overview

Notifly is a digital communication tool developed for K–12 schools and educational organizations to simplify and enhance communication between school staff and families. The platform provides access to messaging features, contact tools, and customizable notification systems across various plan levels. Schools and districts use Notifly to streamline everyday communication and promote greater family engagement, academic support, and real-time updates within their learning communities. These services, collectively referred to as the “Platform,” are available through a subscription-based model.

Our Privacy Commitment

At Notifly, we recognize that protecting your privacy is essential. We are committed to safeguarding the information shared by schools, districts, educators, students, and families who use our platform. This includes both the organizations that subscribe to our services and the individuals whose information may be managed or accessed through those organizations.

Notifly is dedicated to transparency in how we collect, use, and handle personal data. This Privacy Policy outlines the practices and protections that apply to all features and services offered by Notifly.

Data Scope and Agreements

For purposes of this Privacy Policy, “Personal Data” refers to any information that can identify, directly or indirectly, an individual. This includes data defined as “personal data” under applicable laws such as the General Data Protection Regulation (GDPR). This policy outlines how Notifly collects, processes, uses, and shares information gathered from users who access or interact with the platform, including the handling of Personal Data.

  • Notifly may receive and manage Personal Data under three main circumstances:
    • When it is provided to Notifly by a school, district, or educational institution through a service agreement (the “Institution Agreement”)
    • When it is collected on behalf of the Institution under their direction
    • When it is provided voluntarily by an individual user who creates an account on the platform

The terms outlined in this Privacy Policy, along with any applicable written agreements between Notifly and your Institution, and relevant data protection laws, collectively govern how Personal Data is managed by Notifly in its role as a service provider.

In the event of a direct conflict between this Privacy Policy and any written agreement with your Institution regarding privacy or data security, the terms of that written agreement will prevail to the extent of the inconsistency.

Please note that this Privacy Policy does not extend to third-party websites, tools, or services that are not owned or controlled by Notifly—even if those providers assist in delivering aspects of the platform. However, third-party vendors working with Notifly are required to maintain privacy and security protections that are consistent with Notifly's standards and legal obligations.

We also encourage you to review the Notifly Terms of Use, which outline additional responsibilities and conditions for using the platform.

What Information Notifly Collects

  • Institution-Provided Data: Personal information shared with Notifly by your school, district, or educational organization, typically as part of their official use of the platform.
  • User-Provided Information: Information that you, your parent, or legal guardian may directly submit through the Notifly platform—for example, when creating an account or responding to messages.
  • Usage Data: Aggregated data related to how users interact with the Notifly website and app, such as pages visited, feature engagement, and technical diagnostics used to improve the service.

Each category is handled in accordance with applicable privacy laws and our agreements with participating institutions.

Information Provided by Your School or District

Notifly may receive certain types of information, including Personal Data, from your school, district, or educational organization when they choose to integrate their systems with the Notifly platform. This data is collected under the direction and authorization of your Institution to enable the proper use of our communication services.

  • Full name, user ID, and role or title
  • Contact details such as phone number and email
  • Class enrollments, grade level, and course schedules
  • Academic and behavioral updates
  • School affiliations, group memberships, and extracurricular participation
  • Communication preferences, and emergency contact information
  • Family relationships and guardian details

This information is used strictly to support the services provided by Notifly in alignment with agreements and privacy standards established by your Institution.

Information You Provide to Notifly

Notifly collects and stores the information you voluntarily submit while using the platform. This may include details entered directly into forms or data synced or uploaded from your personal device—such as contacts in spreadsheet files from your device.

  • Your name, phone number, and email address
  • Profile images or photographs
  • School, district, class, or group affiliation
  • Messages, attachments, or media that may contain your image
  • Grades, class participation, or group membership (if applicable)
  • Clubs, teams, or other organizations you're associated with

This information may be used to validate your identity, help personalize your user experience, and enable relevant notifications from teachers, schools, or affiliated organizations.

Depending on the features available in your account, you may also choose to enrich your profile with additional details such as professional background, skills, interests, or areas where you'd like to contribute. Any optional information you provide may be visible to others within your school or district, based on their role and permissions.

You are not required to share all of this information to use Notifly, but choosing not to provide certain details may limit your ability to access specific features or receive targeted messages.

How Notifly Handles Children's Personal Data

Notifly is committed to protecting the privacy of all users, especially students under the age of 13. We comply fully with the Children's Online Privacy Protection Act (COPPA) and only collect, store, or use children's data when permitted by law and with proper consent.

In many cases, Notifly operates as a service provider to schools and districts, and relies on their authorization to collect and manage student data in accordance with COPPA and other applicable education privacy regulations. Due to the nature and scope of Notifly, children under the age of 13 may not have authorization to collect, store, or use children's data when using the platform. Users under the age of 13 or without prior authorization and access to children's data from a school, district, or business have restricted access to collecting, storing, or using children's data or using Notifly for this purpose.

For children under 13, Notifly may receive limited personal data—such as name, grade level, contact details, or enrollment information—solely for the purpose of enabling the platform's functionality and supporting safe and effective communication.

Notifly does not knowingly collect more data than is necessary, and we do not use children's data for advertising or marketing purposes. If we become aware that we have collected personal data from a child under 13 outside of our agreements with a school or district—or without the proper authorization—we will delete that data as quickly as possible.

Parents or guardians who have questions about the data associated with their child, or who wish to modify or delete that data, should contact their school or district directly. Notifly will work with the educational institution to honor such requests in compliance with applicable privacy laws and contracts.

How Notifly Uses Your Information

At Notifly, protecting your privacy—and that of your child—is a top priority. Any personal information shared with or collected by Notifly is used solely to operate, maintain, and improve the Services. Here are the key ways your information may be used:

  1. Service Operations and User Support: Notifly uses the information it collects to deliver core features, provide technical support, and ensure reliable functionality across its web and mobile platforms. We also analyze how users interact with the Services to identify improvements and measure effectiveness.
  2. Communication with Users: We may contact you with important updates, announcements, or reminders relevant to your use of the platform or based on school or district activity. These communications may appear within the app, via email, or through SMS notifications—depending on your preferences and the urgency of the message.
  3. District Reporting and Insight: Information may be used to generate usage reports for your school or district. These reports help administrators assess how well the platform is supporting their communication goals and provide insights for future improvements.
  4. Security and Authentication: Personal data is also used to verify user identities, protect account integrity, and uphold platform security for all participants.

Email and SMS Notifications

If you've provided an email address or phone number, Notifly may send you important administrative messages (such as alerts, updates, or confirmations) on behalf of your school or district. In some cases, these messages may also include relevant summaries or reminders based on your role or preferences.

By maintaining a Notifly account and not opting out, you acknowledge and accept that you may receive messages via email or SMS from school staff, administrators, Notifly, and authorized service providers. Depending on your mobile plan, you may incur data or messaging charges from your carrier. These costs are your responsibility.

You can opt out of most non-critical messages by clicking an unsubscribe link or changing your notification preferences. To permanently stop receiving SMS messages, simply reply "STOP" to any Notifly text.

If you are located in Canada, you may opt out of promotional communications while still receiving messages necessary for school-related communication.

Mobile App and Location Data

When you use Notifly's mobile app, we may collect technical details such as your IP address, device type, and operating system. This helps us support app performance and location-based features like showing nearby schools or localizing communication.

In some cases, and only with your permission, we may request access to more specific location data to help personalize your experience—for example, to suggest relevant groups or classes in your area. We do not track your location without consent, and location data is not stored continuously.

Notifications and Push Alerts

Notifly may send real-time push notifications to your device when new messages are posted, features are updated, or announcements are made by your school, group, or teacher. You can disable these alerts through your device's notification settings. Parents or guardians may also manage notification preferences for students under the age of 13.

If you ever have questions about the communications your child receives or wish to update those settings, you can reach us at privacy@notiflyapp.com or contact your school administrator.

How Notifly Shares Information

Notifly uses data provided by your school or district solely to deliver the services your Institution has subscribed to. We do not sell, rent, or trade your personal information. We only disclose information in accordance with the Family Educational Rights and Privacy Act (FERPA) and under the following limited circumstances:

  • When required by law, regulation, or valid legal process (e.g., court orders or law enforcement requests)
  • To operate and maintain the platform's technical infrastructure
  • To enforce our Terms of Use or other service agreements
  • To protect the rights, safety, or property of Notifly, its users, or the public
  • When explicitly authorized or directed by your school or district

Working with Third-Party Service Providers

Notifly partners with carefully selected third-party providers to support the functionality and delivery of the platform. These partners may assist in:

  • Secure payment processing (for institutions or subscribers)
  • Customer support and communication tools
  • Analytics services to improve user experience
  • Notification delivery (email, SMS, voice, and push messages)
  • Web and application hosting infrastructure
  • Optional district services like mailing tools, volunteer screening, digital newsletters, and resource management
  • Authentication and login tools, such as Google, Clever, or SSO systems linked to your district

Before sharing any personal data, Notifly ensures each third-party provider maintains strong privacy and security standards, equal to or exceeding those we uphold ourselves. Notifly does not share any personal information with individuals or entities that are not legally authorized to access student data under FERPA, state regulations, or contractual obligations.

We may also share aggregated, non-personally identifiable usage data with our partners for the purpose of improving system performance or understanding overall platform engagement. This data cannot be traced back to any individual user.

A list of active third-party service providers used by Notifly, including the types of data shared and links to their privacy policies, will be made available upon request.

Advertising Policy

Notifly does not use student data or user records for behavioral targeting or commercial advertising. We do not create user profiles for marketing purposes. All data collected is used strictly to support school-related communication and educational operations as directed by your Institution.

While your school or district may include links to third-party websites within the platform, Notifly does not control those external sites and is not responsible for their privacy practices. Before interacting with external websites, users are encouraged to review those sites' privacy policies and terms.

Corporate Changes and Data Transfers

In the event that Notifly undergoes a significant business change—such as a merger, acquisition, sale of assets, or other organizational restructuring—your Personal Data may be transferred as part of that transaction. Should such a transfer occur, we will provide you or your Institution with advance notice and, where required, an opportunity to opt out of the continued use or transfer of your information under the new ownership.

Sharing Data with Your Consent

If your Personal Data is ever intended to be shared with a third party not acting on behalf of Notifly, you will be notified in advance. In such cases, you will have the option to withhold your consent and prevent the sharing of that information—except where legal or regulatory obligations require otherwise. Notifly may be limited from providing prior notice if a disclosure is mandated by law or related to an official legal process.

Visibility of Shared Content

You are responsible for any information, messages, or content you share while using Notifly. While we offer privacy settings that allow you or your school to manage access to certain content, Notifly cannot control how others may use or share what you post. Therefore, we cannot guarantee that your content won't be viewed, forwarded, or accessed by unintended parties.

Although Notifly implements safeguards to protect user privacy, no digital platform is completely immune to breaches or misuse. We advise you not to post personal information beyond what is necessary to use the platform effectively. Even when content is deleted, cached versions or archived data may still exist—or be retained by other users who previously accessed or downloaded it.

If a school or district chooses to share certain content externally (e.g., on platforms like Facebook, YouTube, TikTok, Reddit, or others), Notifly requires the district to confirm that appropriate permissions have been obtained. Please note that once information is shared outside the platform, Notifly's privacy policies no longer apply.

Administrative Access and Directory Visibility

Authorized administrators within your school or district may be granted access to user accounts via tools like single sign-on (SSO), student information system (SIS) integrations, or other approved Notifly features. These tools allow verified staff to manage account settings, resolve issues, and implement oversight or safety protocols.

When such access is enabled, your district is responsible for notifying users, obtaining any required consent, and ensuring an acceptable use policy is in place for internal system access.

Your contact information—such as name, email address, phone number, or mailing address—may be included in a digital school directory made available to other verified users, depending on your district's configuration and discretion.

How Notifly Safeguards Your Information

Notifly is committed to upholding strict privacy and data protection standards. We work closely with schools and districts to ensure compliance with FERPA and all applicable privacy regulations. Our staff, contractors, and service providers are held to the same standards and are contractually bound to handle data securely and responsibly.

We also encourage all users to play an active role in protecting their accounts by using strong passwords, logging out when not in use, and reporting any suspicious activity immediately.

Data Security

Notifly takes the protection of your Personal Data seriously. To keep your information secure, we use industry-standard encryption methods both during transmission and while data is stored on our servers. All account-related information is housed on secure servers behind firewalls, and advanced security protocols are in place to safeguard your data against unauthorized access.

We regularly update our infrastructure and employ best practices in cybersecurity to ensure that personal information remains confidential, protected, and only accessible to authorized users.

Data Breach Response

In the event that Notifly becomes aware of a confirmed data breach involving Personal Data, we will take immediate steps to investigate, contain, and mitigate the breach. Notifly will notify your school or district in accordance with applicable data protection laws and the terms of our agreement with your Institution.

If required by law or at the request of your Institution, we will also notify affected users. Our goal is to notify the district within 72 hours of confirming a breach—sooner if applicable law or the contract mandates it.

Should any action be required on the part of your school or district in response to the breach, Notifly will provide guidance and support to help facilitate a coordinated and effective response.

Your Choices and Control Over Information

Managing Your Account

You can review, update, and correct your account information by logging into Notifly. In some cases, updates to your contact details must be made through your school or district's Student Information System (SIS). If direct edits are restricted, your district will provide alternate instructions to ensure your information can be updated appropriately.

Within your account settings, you can customize how and when you receive notifications—including choosing between real-time alerts or daily digests via email, app, or text. You may also opt out of receiving non-essential communications. Please note that opting out of messages will not prevent your school or district from sending critical alerts, such as emergency notifications or school closures.

Deleting Your Account

If you or your child is no longer affiliated with a participating school or district—such as after graduating or transferring—you or your district may deactivate your Notifly account. This means you will no longer have access to the platform, and your information will not be viewable by other users, including school staff, unless required by law or retained under contract.

Notifly retains certain information as needed to comply with legal obligations, resolve disputes, prevent misuse, or enforce platform policies. If a deletion was made in error, your account may be restorable within 30 days of removal, upon request through your district.

If you wish to delete your account or no longer agree with the Terms of Use or Privacy Policy, please reach out to your district directly to initiate account removal.

Special Cases and Parental Rights

Parents or guardians who wish to update or delete their child's information—or rescind permission for future contact—can log in to their Notifly account or contact privacy@notiflyapp.com for assistance. Upon receiving such a request, Notifly will coordinate with the relevant school or district to address the concern within a reasonable time, not exceeding 30 days.

Please be aware that some data may remain in backup systems or system logs even after account deletion. This residual data is used for internal purposes such as technical troubleshooting, compliance with open records laws, and audits. Additionally, messages or content shared with others may continue to exist if copied or downloaded prior to deletion.

Healthcare Information (HIPAA)

Notifly is not a medical or healthcare provider and is not subject to the Health Insurance Portability and Accountability Act ("HIPAA"). If you or your Institution require protections related to health data, please ensure any sensitive health-related communication complies with relevant privacy laws and district policies.

For Residents of the European Union, EEA, Switzerland, and the United Kingdom

Notifly's data infrastructure is currently located in the United States. If you are accessing the platform from the European Union (EU), European Economic Area (EEA), Switzerland, or the United Kingdom (UK), your personal information may be stored or processed on servers located outside your home jurisdiction. By using Notifly, you acknowledge and agree to this data transfer and processing outside your country of residence.

Unless otherwise specified, Notifly processes your personal information under the legal basis of legitimate interest to deliver services to you or your educational institution. If consent is required by law, you will be asked to explicitly provide it before any personal data is collected or used.

As a resident of the EU, EEA, Switzerland, or UK, you have specific rights under the General Data Protection Regulation (GDPR) or relevant local data protection laws, including the right to:

  • Access your personal information
  • Correct or update inaccurate or incomplete information
  • Request the deletion of your data ("right to be forgotten")
  • Restrict or object to certain types of data processing
  • Receive your data in a portable format (data portability)
  • Withdraw consent at any time without affecting the lawfulness of prior processing
  • File a complaint with a supervisory authority

You may exercise any of these rights by contacting privacy@notiflyapp.com. If you request deletion or restrict processing, please note that this may affect your ability to use some or all of Notifly's features, especially if your account is connected to a school or district system.

International Compliance and Data Privacy Frameworks

Notifly is committed to complying with all applicable international data transfer frameworks, including the EU-U.S. Data Privacy Framework (DPF), UK Extension to the DPF, and Swiss-U.S. DPF, as outlined by the U.S. Department of Commerce. We have certified our adherence to these programs and uphold their core principles regarding data handling, protection, and user rights.

To learn more about these frameworks or view our certification, visit www.dataprivacyframework.gov.

Complaints and Dispute Resolution

If you are located in the EU, UK, or Switzerland and have concerns about how your data is handled under the DPF, you may first contact us at privacy@notiflyapp.com. If we are unable to resolve your issue, you may submit a complaint free of charge to our designated independent dispute resolution provider, BBB National Programs' Data Privacy Framework Services. For more information or to file a complaint, visit: https://bbbprograms.org/programs/all-programs/dpf-consumers/ProcessForConsumers

In certain unresolved cases, you may be entitled to invoke binding arbitration under the terms of the DPF.

For additional questions or to exercise your privacy rights under international law, please reach out to our Privacy Officer at privacy@notiflyapp.com. You may also contact your local data protection authority, such as:

We are committed to handling your information responsibly, transparently, and in compliance with applicable global privacy standards.

Updates to This Privacy Policy

Notifly may update, revise, or modify this Privacy Policy from time to time to reflect changes in our practices, technology, or legal obligations. If any material updates are made—such as changes to how we collect or use personal information, or adjustments that may affect the privacy of student or user data—we will notify district administrators directly via email or written notice prior to those changes taking effect.

We encourage users to periodically review this Privacy Policy to stay informed about how their information is handled. Your continued use of Notifly following the posting of any updates means you accept those changes.

If you have questions or need further clarification regarding this policy or Notifly's privacy practices, please reach out to us at privacy@notiflyapp.com.

How to Contact Notifly

If you have questions about your account, your child's information, or how to unsubscribe from communications sent through Notifly, please contact your school or district directly.

For questions related specifically to this Privacy Policy, your data rights, or Notifly's privacy practices, you can contact us by email at privacy@notiflyapp.com.

Notifly Privacy Officer

Notifly Technologies, Inc.
1234 Beacon Avenue, Suite 400
Newbridge, VA 22903
Phone: (888) 555-2412

We're committed to ensuring your privacy and will respond to your inquiries in a timely and transparent manner.