Careful with young students — said honestly
An elementary school holds the records of its youngest children, so the privacy posture here is stated plainly rather than dressed up in absolutes. Records and family contacts stay in our own private system. They are never sold, never shared with outside companies or advertisers, and never sent to an outside AI service. Data involving a minor student is consent-gated — a family opts in before any disclosure — and consent can be withdrawn at any time.
On photos, we state specifics rather than sweeping absolutes. Facial recognition is off by default. Finding a child’s photo is a permission-checked roster lookup, not a face match. Where a parent does opt in, a face template is created — and it stays inside our own private system, is never sent to an outside AI service, is never handed back to anyone (a parent reviewing the opt-in sees a plain reference, not the template), is kept only on a limited window of about a school year (roughly 365 days), which is the point at which it is marked due for destruction, is used only to group that family’s own photos, and is never sold. Withdrawing the opt-in stops the matching, on the spot. That is the honest posture: named limits you can check, not a promise no system could keep.
And one thing we will not overstate, because a parent should be able to check what we say. The step that actually destroys a stored template is not finished, and we are not going to tell you it runs on a schedule when it does not. The cleanup job is built to refuse rather than pretend: when it cannot truly destroy a template, it stops and raises an alert instead of marking the job done. We would rather leave that alert standing than write down a deletion we cannot show you, and when it can be demonstrated end to end this page will say so plainly. What already works, end to end, is the part most parents are really asking about: mark a child do-not-publish and their pictures and their name drop out of the digital edition, the online reader, and the print run.
And to be plain about the youngest students: a minor student’s records are never made public, never indexed by a search engine, and never sold. The roster and every family contact are owned by the school — not by us.