Legal

Privacy Policy

Effective June 1, 2026 · Last updated October 5, 2026

1. Who we are and what this covers

Grow Metrics 360 ("Grow Metrics 360," "we," "us") is a development tracking, family reporting, and conference scheduling platform for early childhood programs. This policy explains how we handle information in the Grow Metrics 360 app at app.growmetrics360.com and on our website at www.growmetrics360.com.

This policy covers three groups: school staff (teachers and administrators), parents and guardians, and the children whose development is documented in the platform. It also covers visitors to our website.

2. Schools are in control

Grow Metrics 360 is provided to schools. The school decides which children, families, and staff are added, what is documented, and when reports are released to families. We process student and family information on the school's behalf and only to provide the service to that school.

If you are a parent and have a question about your child's records, including a request to review, correct, or delete them, please contact your child's school first. We will support the school in responding.

3. Information we collect

About children

Information entered by school staff, which may include: name, date of birth, classroom and age group, developmental ratings and written teacher observations, one writing sample per semester, and classroom photos used for documentation. Classroom photos are visible only to school staff. They are not shown to families and do not appear in printed reports.

About parents and guardians

Name, email address, the password you create (stored in protected form), which child or children your account is linked to, and conference bookings you make.

About school staff

Name, email address, role, password, and the classrooms they are assigned to.

Technical information

Like most online services, our hosting providers automatically record basic technical information such as IP address, browser type, and the date and time of a visit, for security and to keep the service running.

We collect only what is needed to document development and connect schools with families. We do not collect Social Security numbers, payment card information, or medical records in the platform, and we do not track your location.

4. How we use information

• To let teachers document development and prepare progress reports
• To let parents view their own child's reports, print or save them, and schedule parent-teacher conferences
• To send service emails, such as account invitations, verification codes, and notices that a report is ready
• To secure accounts, prevent misuse, and troubleshoot problems
• To maintain and improve the platform for the schools that use it

5. What we never do

• We do not sell or rent student or family information.
• We do not use student information for advertising, and we do not show ads in the platform.
• We do not build marketing profiles of children.
• We do not share student information with anyone other than the school and the service providers described below, unless the law requires it.

6. Who can see student information

Only three kinds of users have logins: teachers, school administrators, and parents or guardians. There is no public access, and no part of the platform can be viewed without signing in.

• Parents and guardians see only the child or children assigned to their account.
• Teachers and administrators have staff access so they can document progress, prepare reports, and manage conferences.
• Grow Metrics 360 team members access school data only when needed to provide support or keep the service running.

These permissions are enforced by access rules on the data itself, so information outside your role is never sent to your device, rather than simply being hidden on the screen. A few other safeguards:

• Reports are released on purpose. Families see a report only after the school releases it. Drafts in progress stay visible to staff only.
• Staff access ends when a role ends. When a teacher or administrator leaves, the school removes their account and their access stops immediately.
• Access follows the school's records. If a family's custody or contact information changes, the school updates which accounts are linked to a child.

7. Account security

Every account requires user authentication before it can be used. When an account is created, a verification code is sent to the account's email address, and the account is not active until the code is entered. Users then sign in with their own email address and password. An account is linked to a child only when its email address matches the one the school has on file.

• Passwords are never stored in readable form, and our team cannot see them. If you forget yours, use Forgot password? on the sign-in screen to reset it by email.
• Signing out ends your session on that device. We recommend signing out on shared or public computers.
• We will never ask for your password by email, phone, or text.

Please keep your password private and let your school know right away if you believe someone else has used your account.

8. Where data is stored and how it is protected

Grow Metrics 360 is built on Base44, an application platform owned by Wix.com. Based on Base44's published security information:

• Base44 holds SOC 2 Type II and ISO 27001 certifications and is independently penetration tested.
• Data is encrypted in transit using TLS 1.2 or higher, and at rest using AES-256, including backups.
• App data is stored on servers in the United States.
• Under its Data Processing Addendum, Base44 acts as a processor on our behalf, uses the data only to provide the service, and may not sell or share it.
• Base44's security is tested regularly by internal and independent third-party teams, and it runs a bug bounty program that invites outside researchers to report vulnerabilities responsibly.
• Passwords, keys, and other credentials that connect the platform to its services are encrypted and held in a dedicated cloud key management service.
• Base44's vendors that receive personal information are bound by strict data processing agreements.

On our side, we limit who on the Grow Metrics 360 team can access production data, review the platform's access rules before releasing new features, and use the platform's built-in security scanning to check for configuration problems.

No method of storing or transmitting information online is completely secure, but we and our providers use safeguards designed to protect it from loss, misuse, and unauthorized access.

9. If something goes wrong

If we learn of a security incident that affects student or family information, we will act quickly to contain it, investigate what happened, and notify the affected school without unreasonable delay. We will give the school the information it needs to notify families, and we will provide any notices required by law, including Florida's data breach notification law.

10. Service providers

We rely on a small number of providers to run Grow Metrics 360:

• Base44, for application hosting, data storage, user authentication, and service email. Base44 uses its own vetted subprocessors, which are listed on the Base44 Security Trust Center.
• GoDaddy, for hosting our public website.

These providers may use information only to provide their services to us.

11. Children's privacy

Grow Metrics 360 is not directed to children, and children do not have accounts or log in. Information about children is entered by their school. Schools are responsible for obtaining any parental consent that applies when they add a child to the platform, and parents may ask their school at any time about the information held about their child.

12. Student records

Where the Family Educational Rights and Privacy Act (FERPA) or a similar state law applies to a school, we handle that school's student records as a service provider under the school's direct control, use them only for the purposes the school has authorized, and do not disclose them except as the school directs or the law requires.

13. How long we keep information

We keep student and family information for as long as the school uses Grow Metrics 360, or until the school asks us to delete it. When a school asks us to delete information, we remove it from the active platform. Copies in our providers' automatic backups are deleted on their regular schedule. We may keep limited information when the law requires it.

When a family leaves the school, the school can remove the parent account. A school that stops using Grow Metrics 360 can ask for a copy of its records before they are deleted.

14. Your choices

• Review: parents can view their own child's released reports at any time by signing in.
• Correct or delete: contact your child's school, or email us and we will work with the school.
• Emails: service emails, such as verification codes and report notices, are part of using the platform. We do not send marketing emails to parents.

15. Our website

Our public website does not use advertising cookies, tracking pixels, or third-party analytics. If you request a demo, the form opens your own email program, and we receive only what you choose to send us. We use that information only to reply to you.

16. Changes to this policy

If we make meaningful changes, we will update the effective date above and let schools know before the changes take effect.

17. Contact us

Questions about this policy or your information? Email info@growmetrics360.com.

See also our Terms of Use.