Privacy Policy

Last updated: April 2026

Overview

Grove is built on a foundation of privacy by design. We believe children's data deserves the highest level of protection. This policy explains what we collect, why, and how we protect it.

Data Isolation

Every school on Grove operates on its own completely isolated database. No data is shared between schools. This isolation is enforced at the infrastructure level, not the application level.

Data Storage

All data is stored on Canadian servers, governed by the Personal Information Protection and Electronic Documents Act (PIPEDA). No data crosses international borders.

What We Collect

• Account information (name, email) for school staff and parents
• Child profiles created by the school (name, class, age group)
• Observations, photos, and learning documentation
• Messages between staff and parents within the platform
• Consent and permission form records

What We Never Do

• Sell data to third parties
• Use data for advertising
• Send children's photos to external AI services
• Track user behaviour for analytics beyond basic usage
• Share data across schools

Data Retention

Casual content (photos, community posts, routine messages) is automatically deleted after a school-configured retention period. Formal records (consent forms, medical notes, incident reports) are retained for a minimum of 7 years as required by regulatory obligations.

Your Rights

You can export your child's complete learning portfolio at any time. You can request deletion of your account and personal data. Your keepsakes belong to you — even after leaving the school.

Contact

Questions about privacy? Contact us at privacy@groveschool.ca