As required by FIPPA (Manitoba) and App Store Guidelines.

1. Introduction & Scope

This Privacy Policy describes how the Red River Valley School Division (the School Division) collects, uses, discloses, and protects personal information and personal health information when you utilize our SchoolBundle-powered website portal and integrated mobile application (collectively, the "Services"). 

As a public body, the School Division is legally governed by Manitoba’s Freedom of Information and Protection of Privacy Act (FIPPA) and the Personal Health Information Act (PHIA). By accessing the website or downloading and logging into the mobile application, you acknowledge and agree to the data collection, management, and storage practices detailed in this policy. 

2. Legal Authority for Collection

Personal information collected through the Services is gathered under the authority of Section 36(1)(b) of FIPPA and Section 13(1) of PHIA, as the information relates directly to, and is necessary for, the administration of public educational programs and ensuring student safety within the School Division. 

3. Information We Collect and Sync

The Services securely access and display information sourced from your user input and our 

internal Student Information Systems (SIS). 

• Account, Authentication, & Single Sign-On (SSO): We collect names, email addresses, phone numbers, and unique portal login credentials. If you choose to authenticate or register using a third-party Single Sign-On (SSO) service (such as Google or Facebook), we collect the basic authentication token and email address provided by that service to verify your identity and link your active profile. 
• Student Information System (SIS) Records: The application dynamically syncs with division databases to display student schedules, timetables, academic progress reports, attendance metrics, and school announcements. 
• Personal Health Information (PHIA): For student safety and emergency response purposes, the application may securely sync and display critical medical alerts, severe allergy flags, and emergency contact details to authorized parent/guardian accounts. 
• Mobile Device Permissions & Data: When using the mobile application, the software may request specific hardware permissions: 
  • Push Notifications: To deliver immediate notifications regarding emergency alerts, security directives, or weather-related school closures. 
  • Camera/Photos: Accessed exclusively if you choose to upload a user profile image or submit an file attachment through an in-app portal workflow. 
• Technical Log Data: We automatically log temporary Internet Protocol (IP) addresses, device hardware identifiers, operating system variants, and anonymized application crash logs to troubleshoot system performance. 

4. How We Use Your Information

We use your information strictly for educational administration and operational communications, including: 

• Verifying your legal identity and authority to access specific student records. 
• Delivering targeted classroom, school, and divisional notifications. 
• Managing school transport updates, attendance reporting, and emergency safety protocols. 
• Diagnosing server errors and optimizing mobile application performance. 

5. Third-Party Service Providers

The technical infrastructure of the Services is operated in partnership with SchoolBundle (Concept Interactive Inc.), acting as our contracted data processor. SchoolBundle is contractually restricted from using, analyzing, selling, or disclosing any user or student data for commercial, marketing, or independent analytic purposes. All data processed by SchoolBundle remains under the direct ownership and control of the School Division. 

6. Data Sovereignty & Jurisdiction

In compliance with Canadian data storage standards and public sector procurement guidelines, all student records, personal information, and authentication data are securely hosted on enterprise servers located physically within Canada. 

7. Data Security and Retention

We utilize industry-standard technical, administrative, and physical safeguards (including Transport Layer Security (TLS) encryption for data in transit and AES-256 encryption at rest) to protect your records from unauthorized loss or access. Information is retained only as long as necessary to fulfill its educational purpose, or in accordance with the mandatory records retention schedules defined by the Manitoba Department of Education. 

8. Account and Data Deletion Rights

Mobile application users may request the deletion of their app-specific login configuration and local device tokens directly via the "Help" or "Account Settings" menu inside the mobile application. 

Please note that requesting the removal of a mobile app profile does not delete, alter, or purge official student files or educational records maintained by the School Division under provincial statutory mandates. 

9. Contact Information

If you have questions, concerns, or wish to exercise your access rights under FIPPA regarding data processed through this platform, please contact our Access and Privacy Officer: 

• Attention: FIPPA/PHIA Access and Privacy Coordinator 
• Mailing Address: Box 400, Morris, MB R0G 1K0 
• Email: inquiries@rrvsd.ca 
• Phone: (204) 746-2317