Privacy Policy

Effective Date: April 21, 2026 · Last Updated: April 21, 2026

1. Overview

Breeze Education ("Breeze," "we," "us," or "our") provides a special education case management platform for teachers, related service providers, and school administrators. We take the privacy of student data seriously and are committed to handling all information in compliance with applicable federal and state law, including the Family Educational Rights and Privacy Act (FERPA) and the Individuals with Disabilities Education Act (IDEA).

2. Information We Collect

Account Information
When educators or administrators create an account, we collect name, email address, role, and school or district affiliation.

Student Records
Schools and educators may input student data including names, grade levels, IEP goals, progress logs, service records, and related notes. This information constitutes educational records under FERPA and is handled accordingly.

Usage Data
We collect basic usage information (feature interactions, session duration) to improve the platform. This data is never linked to individual student records.

3. How We Use Information

We use the information we collect to:

Provide and operate the Breeze platform
Generate IEP progress reports and AI-assisted recommendations
Send in-app notifications about student progress and IEP timelines
Improve platform features and reliability
Respond to support requests

We do not sell personal information. We do not use student data for advertising.

4. Student Data & FERPA

Breeze operates as a school official under FERPA, meaning we access student educational records solely to provide services on behalf of the school or district. We:

Access student records only as directed by authorized school personnel
Do not disclose student records to third parties without school authorization, except as required by law
Support schools' obligations to provide parents and eligible students access to educational records upon request
Do not use student data for any purpose beyond delivering the Breeze service

Schools and districts are responsible for obtaining any required parental consent before entering student data into Breeze.

5. AI Features & Data Processing

Breeze uses artificial intelligence features to assist educators with progress report generation, goal recommendations, and data analysis. These features are powered by OpenAI.

What we send to OpenAI: When you use the AI Workspace, your typed messages and relevant student data — including student names, IEP goals, progress logs, and teacher-written session notes — are transmitted to OpenAI to generate a response. Data is only sent when you explicitly submit a message; nothing is transmitted in the background.

What OpenAI does with this data:

OpenAI does not use data submitted through Breeze to train its models (Zero Data Retention policy)
OpenAI does not retain this data after the request is complete
Breeze has a Business Associate Agreement (BAA) with OpenAI covering this data processing
Users must explicitly enable the AI Workspace and acknowledge this data sharing before it can be used

6. Data Security

Encryption in transit: All data transmitted between your device and Breeze servers is encrypted using TLS (HTTPS)
Encryption at rest: All data stored in our database is encrypted at rest via AES-256
Infrastructure: Breeze is built on Supabase, which is SOC 2 Type II certified. Database access is governed by row-level security policies that enforce strict organization-level data isolation
Access controls: Role-based access controls limit what each user can see and do within the platform

7. Data Ownership

District and school accounts: Student data entered into Breeze by educators who are part of a school district or organization is the property of that district or organization. This includes student names, IEP goals, progress logs, session notes, and all related educational records. This data constitutes educational records under FERPA and belongs to the school, not to individual educators.

If an individual educator's account is removed from a district organization — whether by their own request or by a district administrator — the student records they created remain with the district and will not be deleted. The district may reassign those records to another provider.

Individual accounts: For educators using Breeze outside of a district organization, all data they create is associated with their personal account. If an individual account is deleted, all associated student records, goals, and progress data are also permanently deleted within 90 days.

8. Data Retention

Active accounts: Data is retained for as long as the school or district maintains an active Breeze account
Deleted individual accounts: Upon deletion, all associated personal data and student records will be deleted or anonymized within 90 days, except where retention is required by law
Deleted district member accounts: The educator's personal account is deleted; student records remain with the district
Student records: Schools may request deletion of specific student records at any time

9. Data Sharing

We do not sell or rent personal information. We share data only with:

Recipient	Purpose	Data Shared
Supabase	Database hosting and authentication	All platform data (encrypted)
OpenAI	AI Workspace (explicit user action only)	Student names, goals, progress logs, and notes submitted per request; not retained (ZDR + BAA)
Expo / Apple / Google	Mobile app distribution	App usage analytics only

We may disclose information if required by law, court order, or to protect the rights and safety of our users.

10. Illinois-Specific Protections

Breeze complies with the Illinois Student Online Personal Protection Act (SOPIPA, 105 ILCS 85) and the Illinois School Student Records Act (ISSRA, 105 ILCS 10). In addition to the protections described above:

We do not use student data to build profiles for non-educational purposes
We do not use student data for targeted advertising under any circumstance
Schools may request deletion of any student record at any time and we will fulfill such requests within 30 days
We maintain records of third-party data disclosures to support schools' ISSRA compliance obligations upon request

11. Your Rights & Account Deletion

For educators and staff: You may delete your account at any time directly within the app by navigating to Help & Settings → Delete Account, or by following these instructions. You may also request access to or correction of your account data by contacting us at the address below.

What happens when you delete your account:

Individual accounts: All associated student records, IEP goals, progress logs, and personal data are permanently deleted within 90 days
District member accounts: Your personal login and user profile are deleted. Student data you created remains with the district, as it is the district's educational record

For parents and students: Student educational records are subject to FERPA rights administered by your school or district. Please contact your school directly to exercise FERPA rights. Breeze will cooperate fully with schools in responding to such requests.

12. Children's Privacy

Breeze is designed for use by educators and administrators, not directly by students. We do not knowingly collect personal information directly from children under 13. Student data is entered by authorized school personnel on behalf of the school.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify users of material changes via email or an in-app notice at least 14 days before the change takes effect. Continued use of Breeze after the effective date constitutes acceptance of the updated policy.

14. Contact Us

For privacy questions, data requests, or concerns:

Breeze Education
Email: privacy@breezeteach.com
Website: breezeteach.com