Privacy Policy

Last Updated: January 29, 2026

Introduction

CHE Comms ("the App") is an internal communication application developed exclusively for CHE School staff members. This Privacy Policy explains how we collect, use, and protect your personal information when you use the App.

By using CHE Comms, you agree to the collection and use of information in accordance with this policy. This app is intended solely for authorized CHE School staff members with valid @che.school or @ventureoff.org email addresses.

Information We Collect

1. Authentication Information

When you sign in using Google Sign-In, we collect:

• Email Address: Your CHE School email address (@che.school or @ventureoff.org)
• Name: Your full name as provided by Google
• User ID: A unique identifier from Google/Firebase for your account

2. App Usage Data

To provide app functionality, we collect:

• Push Notification Tokens: Device tokens required to send you push notifications
• Device Information: Device model, operating system version, and app version (collected when submitting feedback)
• Location Data: Only when using Google Maps features for site visit locations (processed locally, not stored)

3. User-Generated Content

When you use app features, we may collect:

• Messages: Direct messages sent to other staff members
• Photos: Receipt images uploaded for expense reports
• Feedback: Beta feedback submissions (including device information)
• Form Submissions: Invoices, help tickets, site visit records, and other administrative data

How We Use Your Information

We use the collected information solely for the following purposes:

• App Functionality: To provide staff updates, alerts, messaging, calendar, directory, and administrative features
• Authentication: To verify your identity and ensure only authorized staff can access the app
• Notifications: To send you push notifications about important updates, alerts, and messages
• Communication: To facilitate direct messaging between staff members
• Administrative Functions: To process expense reports, help tickets, site visits, and other administrative tasks
• App Improvement: To analyze feedback and improve app functionality

Third-Party Services

CHE Comms uses the following third-party services to provide functionality:

1. Firebase (Google Cloud Platform)

• Authentication: Google Sign-In for secure login
• Database: Firestore for storing app data (messages, updates, alerts)
• Cloud Functions: Server-side processing for notifications and app features
• Storage: Firebase Storage for file uploads (receipts, attachments)

Firebase's privacy policy: https://firebase.google.com/support/privacy

2. Airtable

• Staff Directory: Staff contact information and organizational data
• Administrative Records: Invoices, help tickets, site visits, and other records

Airtable's privacy policy: https://www.airtable.com/privacy

3. Google Services

• Google Sign-In: Authentication service
• Google Maps: Map display for site visit locations

Google's privacy policy: https://policies.google.com/privacy

4. Expo

• Push Notifications: Expo Push Notification service for delivering notifications
• App Updates: Over-the-air updates for app improvements

Expo's privacy policy: https://expo.dev/privacy

Data Storage and Security

Your data is stored securely using industry-standard encryption and security practices:

• All data transmitted between the app and servers uses HTTPS encryption
• Firebase uses encryption at rest for all stored data
• Access to data is restricted to authorized CHE School administrators
• Authentication is required for all data access

Data Sharing

We do not sell, rent, or share your personal information with third parties except:

• As necessary to provide app functionality through the third-party services listed above
• When required by law or legal process
• To protect the rights, property, or safety of CHE School, staff members, or others

Data is shared only with service providers who are contractually obligated to protect your information and use it solely for the purposes of providing services to CHE School.

Your Rights

As a CHE School staff member using this app, you have the right to:

• Access: Request access to your personal data stored in the app
• Correction: Request correction of inaccurate or incomplete data
• Deletion: Request deletion of your account and associated data (subject to legal and administrative requirements)
• Opt-Out: Disable push notifications in app settings

To exercise these rights, please contact CHE School IT support using the contact information below.

Data Retention

We retain your personal information for as long as necessary to provide app functionality and comply with legal and administrative obligations. When you leave CHE School or request account deletion, we will delete or anonymize your personal data within 90 days, except where retention is required by law.

Children's Privacy

CHE Comms is intended exclusively for CHE School staff members and is not designed for use by children. We do not knowingly collect personal information from children. If you believe we have inadvertently collected information from a child, please contact us immediately.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date. You are advised to review this Privacy Policy periodically for any changes.

Contact Information

Consent

By using CHE Comms, you consent to this Privacy Policy and agree to the collection and use of information as described herein. If you do not agree with this policy, please do not use the app.