Privacy Policy

Frogtummy Privacy Policy

Frogtummy Enterprises

Last Updated: July 15, 2026

Introduction

Frogtummy Enterprises, Inc. (“Frogtummy,” “we,” “us,” or “the Company”) provides an integrated suite of web and software for educational institutions in the United States. We are committed to protecting the privacy of all individuals who use our services, including school administrators, teachers, parents, and students. This Privacy Policy describes how we collect, use, disclose, and protect personal information when you interact with our websites, applications, and services (collectively, the “Service”), and explains your rights and choices regarding that information.

This Privacy Policy applies to information we collect through the Service, in electronic communications between you and the Service, and, where applicable, in connection with school-directed activities that use our platform. It does not apply to information collected by third-party websites or services that are not controlled by Frogtummy, even if linked from the Service. We may provide additional or different notices for certain features, programs, or jurisdictions; those notices supplement this Privacy Policy. By using the Service, you acknowledge that you have read and understood this Privacy Policy. If you do not agree, please discontinue using the Service.

We may update this Privacy Policy from time to time (see “Changes to this Privacy Policy” section below). Material changes will be announced in a manner reasonably designed to notify affected users and schools, and the “Last Updated” date above will be revised.

For avoidance of doubt, Frogtummy does not sell personal information or share it for cross-context behavioral advertising, and we do not use student personal information for advertising or marketing.

1. Information We Collect

We collect personal information necessary to provide our Services and to ensure a safe, useful experience. For purposes of this Privacy Policy: (i) “personal information” means information that identifies or can reasonably be linked to an individual; and (ii) “student personal information” means personal information about students that we process on behalf of a school, including education records protected by the federal Family Educational Rights and Privacy Act (“FERPA”). The types of information we may collect include:

Identifiers and Contact Information: This includes name, email address, phone number, and postal address of school staff users and parent/guardian users. For example, when a school staff member registers for a Frogtummy account or when a parent fills out a student enrollment form, we collect names and contact details. We may also collect unique login credentials (such as usernames and passwords) for users accessing the Service.
Student Information and Educational Records: Through our Service’s integration with schools, we may process personal information about students. This can include student identifiers (name, date of birth, student ID), enrollment information, attendance records, and other education-related information that a school or parent provides to the Service. This information is collected and used solely for educational purposes on behalf of the school, in accordance with school directives and applicable law (see Children’s Privacy below for more details on minors’ personal information).
Payment and Transaction Information: If you use our “Payment” online store or any payment feature, we (or our third-party payment processor on our behalf) collect information related to the transaction. This includes the items or fees being paid for, the amount, and billing details such as name and billing address. Payment Card Information (e.g. credit card number, expiration date) is not stored on our servers in plaintext – we use a certified third-party payment processor to handle card transactions securely. We may retain a token or reference number from the payment processor, and basic details like card type or last four digits for receipt purposes, but full card numbers are not accessible to us. All financial transactions are encrypted and processed in compliance with Payment Card Industry (PCI) security standards.
Communications Content: The content of communications sent through our Service may be collected to provide the Service. For example, when schools send communications through the Service, we process the necessary contact information and message content to deliver it. We also collect any responses or feedback (for example, if parents reply to an email or if a message bounces). Additionally, if you contact Frogtummy support or otherwise communicate with us (via email, phone, or our ticket system), we will collect the information you provide in those interactions (such as your name, contact information, and the contents of your inquiry). For more information on SMS, please see our SMS policy in our Terms of Use.
Usage Data and Device Information: Like most online services, we automatically collect certain data about how the Service is accessed and used. This includes technical information such as your device type, browser type, operating system, IP address, device identifiers, and usage details like pages or screens viewed, time spent on pages, dates/times of access, and referring URLs. We may use cookies and similar tracking technologies (e.g. web beacons, local storage) to remember user preferences and to authenticate users. You can configure your browser to refuse cookies or alert you when cookies are used. If you disable cookies, some Service features (such as login) may not function properly.
Analytics: We may use analytics tools to help us understand Service performance and improve functionality. Where feasible, we configure such tools to minimize collection (for example, limiting use to aggregate reporting and disabling advertising features). We do not use analytics tools to engage in cross-context behavioral advertising or to target individual users.
Geolocation Data: For certain features such as “Carpool,” the Service may utilize location-related data. If families opt into the carpool program, we collect addresses or general location details of students/families to facilitate match-ups on the carpool map. This location information is provided either by users (e.g. a parent entering their address). We do not use precise, real-time GPS tracking via your device. Location data is used strictly for the purpose of showing nearby carpool opportunities and is accessible only to authorized school community members participating in the carpool program, not to the general public.
Other Information You Provide: You may choose to provide additional personal information when using our Service. For instance, a school might upload a staff directory that includes teacher biographies or photos, or a parent might fill out a school form requesting emergency contact info or health information for their child. Any such information provided through the Service will be collected and treated in accordance with this Privacy Policy and used only for the purposes for which it was provided. We encourage schools to limit the collection of sensitive information to only what is needed for the relevant educational purpose.
Sensitive Personal Information: We do not knowingly collect highly sensitive personal information such as Social Security Numbers, driver’s license numbers, or biometric identifiers through our standard Service. In cases where such information is required for a specific school function (for example, if a school requires a state-issued student ID number for enrollment, or collects health information for emergency contacts), that collection is initiated and controlled by the school and used only for the intended purpose, with appropriate protection. We treat any such data as confidential and subject to strict security standards.
De-identified/Aggregated Data. We may create de-identified or aggregated information from personal information for purposes such as Service improvement, reporting, and security. We maintain and use such information in de-identified/aggregated form and do not attempt to re-identify it, except as permitted by law.

2. How We Use Information

When Frogtummy processes student personal information on behalf of a school, the school determines the purposes and means of processing, and Frogtummy acts as a service provider under applicable education privacy laws, including FERPA. When Frogtummy processes personal information for its own operational purposes (such as account administration, security, fraud prevention, billing, and customer support), we do so in accordance with applicable law.

Frogtummy uses the collected information to provide, maintain, and improve the Service, as well as to support the operations of the schools that are our clients.

We use personal information for the following purposes:

To Provide Services to Schools: We process personal information as needed to deliver the Service to schools and their communities. This includes using student and parent information to operate school admission lotteries and waitlists, facilitating communications (e.g. sending out school newsletters or absence notifications), displaying class or contact information on school websites, processing payments for school fees, and enabling carpool matching among parents. In short, the data you or your school inputs is used to carry out the school-related functions you expect.
Account Administration and Authentication: We use identifiers like email and password to create and manage user accounts, allow users to log in, and verify identity. We may send administrative communications (for instance, to confirm account creation, facilitate password resets, or notify you of important service updates) using the contact information provided. We also maintain user profiles and permissions (for example, distinguishing a school principal’s administrative rights from a teacher’s more limited access) to ensure each user can only access the appropriate sections of the Service.
Communications and Customer Support: If you contact us with a question or for support, we will use your contact information and any details you provide to respond to you and resolve the issue. Additionally, we may, from time to time, send informational updates about new features, newsletters, or training opportunities to school staff users who have opted to receive such communications. Note: Parents generally receive communications through their school via the Service. Frogtummy sends parents direct communications only in limited circumstances (for example, platform-wide notices) and only where permitted by law.
No targeted advertising or marketing to students. We do not use student personal information for advertising or marketing, and we do not build profiles of students for advertising.
Improving and Enhancing the Service: We analyze usage data and user feedback to understand how our Service is performing and to improve its functionality and user experience. We may utilize cookies or analytics tools to gather usage statistics, subject to the limitations described in Section 1 (“Analytics”). Any data we analyze for product improvement is de-identified or aggregated whenever feasible, and is not used to target or profile individual users. Usage data related to student activities is only used to support educational functions of the Service or to improve the Service in ways that benefit our users.
Safety and Security: We use personal information as needed to maintain the safety and security of our Service and users. This includes using login information and IP addresses to detect suspicious login attempts or account activity, using cookies to prevent fraudulent use of credentials, and monitoring usage for potential abuse (such as detecting inappropriate content on a school’s site or identifying possible unauthorized access to personal information). If we become aware of a violation of our terms or a threat to our systems or users, we may use relevant personal information to investigate and take appropriate action (for example, we might provide pertinent information to school officials or, in serious cases, to law enforcement in order to address safety or legal issues).
Legal Compliance and Protection: We may process personal information to comply with applicable laws, regulations, legal processes, or enforceable governmental requests. For instance, we might retain certain records to fulfill obligations under education laws, or to respond to a lawful subpoena or court order (after verifying the request’s validity). Additionally, we may use or disclose personal information as necessary to protect the rights, safety, and property of Frogtummy, our client schools, our users, or others. This includes enforcing our agreements (such as our contract or Terms of Service with a school) and investigating fraud, technical, or security issues.

We do not use personal information for purposes that are materially different from the ones listed above without providing notice or obtaining appropriate consent. Because Frogtummy primarily acts as a service provider on behalf of schools, we follow school instructions regarding the use of student personal information and use such information only to provide the Service on the school’s behalf.

3. How We Disclose or Share Information

Frogtummy discloses personal information only as described below. As stated in the Introduction, we do not sell personal information and do not share personal information with third parties for their own marketing or advertising purposes.

To the School or Authorized Users: Because we operate on behalf of schools, any personal information collected about students, parents, or school staff is considered owned and controlled by the respective school. Authorized school personnel can access personal information pertaining to their school through our platform (for example, an admissions director can view all student applications and lottery results for their school; a teacher might see a class roster with parent contact details for their students). We provide administrative controls that allow each school to manage which of its personnel have access to specific information or features. Keep in mind, if you are a parent/guardian using our Service as part of a school, the school (and not Frogtummy) decides which of its personnel can view or edit your or your child’s personal information. We simply facilitate that access via our software, in accordance with our contract with the school.
With Service Providers (Processors): We employ reputable third-party companies to perform certain business-related functions in support of our Service. These service providers act on our behalf and receive only the personal information necessary to perform their specific services for us. Examples include cloud hosting providers (for data storage and servers), email and SMS delivery services (to send communications initiated by you or the school), payment processors (to handle credit card transactions securely), map/location services (to support features such as carpool map), and customer support software providers. We require our service providers, by contract, to (i) process personal information only on our documented instructions, (ii) protect personal information using appropriate technical and organizational safeguards, and (iii) not sell personal information or share personal information for cross-context behavioral advertising. Service providers are also contractually obligated to keep personal information confidential and to use it solely for the purpose of providing the contracted services to us, and not for their own independent use. For example, an email delivery service may use parent email addresses only to send messages that we instruct it to send, and may not use those email addresses for any other purpose.
For Legal Requirements or Protection: We may disclose personal information if we are required to do so by law or legal process, for example in response to a subpoena, court order, or regulatory demand. We will also disclose personal information if we believe in good faith that such action is necessary to comply with applicable laws, to protect the rights or property of Frogtummy, to protect the safety of our users or the public, or to investigate and address violations of our terms or this Privacy Policy. If a law enforcement or government agency formally requests user or school data, we will, when appropriate, attempt to redirect the request to the relevant school or user or otherwise notify the school (unless we are legally prohibited from doing so) so that the school may respond.
Business Transfers: In the unlikely event that Frogtummy is involved in a merger, acquisition, bankruptcy, or sale of all or a portion of its assets, personal information in our possession may be among the assets transferred to a successor entity. In such a case, we will ensure that the successor is bound by privacy standards consistent with those described in this Privacy Policy, and where required by law we will provide notice or obtain consent. For example, if Frogtummy were acquired by another company, we would notify our client schools and endeavor to ensure the new owner honors all existing privacy commitments for the personal information we maintain.

Apart from the scenarios above, we do not share personal information with third parties. Notably, we do not disclose student or parent data to advertisers or social media companies for their independent use. Some features of our Service may allow you to share content or information intentionally with others outside our platform (for example, a parent may choose to share a fundraising page or school event link on their personal Facebook or other social media account via a provided share button). Any such sharing is initiated by you and is entirely under your control, and thus is outside of our routine data sharing practices. We advise users to exercise caution when sharing any personal information publicly or via third-party platforms, as those actions are not governed by this Privacy Policy.

4. Children’s Privacy (Users Under 18)

We recognize the importance of protecting children’s privacy, especially in an educational context. Our Service is primarily intended for use by schools, school personnel, and parents. Portions of the Service (such as a school’s public-facing website or a student portal, if provided) may be accessed by children for educational purposes under the guidance of their school or parents. Frogtummy does not knowingly allow any child under the age of 13 to create an account or provide personal information directly to us without parental consent or school authorization, in compliance with the Children’s Online Privacy Protection Act (COPPA).

Role of Schools and Parental Consent: When we process personal information about children under 13, it is generally provided by the child’s school or parent/guardian in connection with school-directed activities. When permitted by COPPA, schools may act on behalf of parents to provide consent for educational uses. Frogtummy relies on the school’s authorization and does not collect personal information directly from a child under 13 unless an appropriate adult (school or parent) has consented. To the extent Frogtummy is considered an “operator” under COPPA, it processes children’s personal information only to provide the Service requested by the school and not for other commercial purposes.

No Direct Marketing to Children: We do not send marketing emails or targeted advertisements to students or profile students for advertising or marketing purposes. Any usage tracking of students within the Service is solely to support educational goals or to improve the Service’s functionality, not to target individual children for non-educational purposes.

If You Believe a Child Has Provided Information Improperly: If you are a parent or guardian and believe your child under 13 has directly provided personal information to us without your consent, please contact us (see the Contact Us section below). We will take appropriate steps to address the issue, including deleting the information as required by law.

Teens and Students 13–18: For students between 13 and 18 years old who use the Service, we primarily obtain personal information through the school or parent and treat it in accordance with applicable law. If a student over 13 is permitted by their school to use a Frogtummy-powered service, the student should do so with school supervision. These students should understand that their personal information is shared with and controlled by their school and/or parent. We encourage all minors to involve their parents or guardians in any online activity and to refrain from sharing unnecessary personal details about themselves online.

In summary, children cannot independently sign up for Frogtummy’s services. Student personal information is provided by schools or parents for legitimate educational purposes and is handled in accordance with COPPA, FERPA, and applicable state student privacy laws.

5. Rights and Choices for Users

Depending on who you are (for example, a school staff user, a parent, a California resident, etc.), you may have certain rights regarding your personal information. Frogtummy is dedicated to respecting those rights and enabling you to exercise control over your personal information. Below, we outline various rights and choices and how you can exercise them:

Access and Correction: If you have an account on our Service, you can access and update some of your personal information directly by logging into your profile or account settings (for example, to change your contact information or password). School administrators have the ability to access and correct information about students and parents contained in their school’s records on our platform. If you are a parent or student using our Service and you want to access or correct information that is not directly accessible to you (such as a mistake in an application or an outdated contact number), you should contact your school. The school can then make the change or instruct us to do so on their behalf. We will assist the school as needed in fulfilling such requests. (Under FERPA, parents of minors, or eligible students, have the right to access and seek amendment of education records maintained by schools. Since Frogtummy acts as a processor for the school, any request we receive from a parent or student to access or change student personal information will typically be referred to the school so it can be handled in accordance with applicable law and the school’s policies.)

Deletion: You (or your school) may request deletion of personal information in certain circumstances. For example, a school administrator may ask us to delete personal information for a student who has left the school, or a parent might request deletion of an online account they created. We will comply with legitimate deletion requests, provided we do not have a legal obligation or compelling legitimate interest to retain the personal information. (For instance, we may need to retain certain records for audit or compliance purposes, or to comply with a court order, or a school might direct us to retain personal information for a period of time as part of their recordkeeping requirements.) If you are an individual user (and not a school official) seeking deletion of personal information, we may need to coordinate with the relevant school that controls that personal information. Note that for student personal information, the school’s approval is usually required before deletion, since those records may be part of the student’s official education record. When we do delete personal information, we will ensure it is removed from our active databases and, where feasible, scrubbed from backups or archived systems (or otherwise secured until those backups are overwritten), in order to fully erase the information.

U.S. State Privacy Rights (including California): Depending on your state of residence, you may have certain rights regarding your personal information, which can include the rights listed below. These rights may be subject to exceptions under applicable law (including where we process information on behalf of a school as part of an education record).

The right to know what personal information we have collected about you in the past 12 months, including the categories of sources of that information, the business or commercial purposes for collection, and the categories of third parties with whom we have shared your information. You also have the right to access the specific pieces of personal information we hold about you (often referred to as data portability).
The right to delete personal information we have collected from you (with certain exceptions allowed by law).
The right to correct inaccurate personal information that we maintain about you.
The right to opt out of the sale of your personal information, or the “sharing” of your personal information for cross-context behavioral advertising purposes.
The right to not be discriminated against for exercising any of the above rights. (We will not deny services, charge different prices, or provide a different level of service just because you exercise your privacy rights.)

Please note that we do not sell personal information, and we also do not “share” personal information with third parties for cross-context behavioral advertising, as those terms are defined under California law. We use personal information only to provide our services to you (or your school) and for the internal purposes described in this Privacy Policy. Therefore, the opt-out right regarding sales or sharing is not applicable in our case (since we don’t engage in those practices). Additionally, we do not use or disclose sensitive personal information for purposes that would trigger a right to limit such use under California law (any sensitive personal information we handle is used only for the core services requested by the school or user).

If you wish to exercise your rights to access, correction, or deletion, you (or an authorized agent acting on your behalf) can contact us using the information in the Contact Us section below. We will need to verify your identity (and/or authority, if your request comes through an agent) before fulfilling the request. This verification may involve asking for additional information to ensure we are interacting with the correct person. If your request relates to student or parent information that we process on behalf of a school, we may consult with the school or direct you to the school, because the school’s obligations under FERPA or other student privacy laws may take precedence. (Educational records held by a school are often exempt from direct consumer requests under laws like the CCPA, meaning the school, rather than we as a service provider, would address those requests.) Frogtummy will assist schools as needed in responding to any privacy requests from parents or students in compliance with applicable laws.

Appeals (where required). If applicable law provides a right to appeal a decision we make regarding your privacy request, we will provide information about how to submit an appeal in our response to your request

Opt-Out of Communications: If we send you any promotional communications or optional updates (for example, a newsletter to school staff highlighting new features or training opportunities), you can opt out of receiving those messages at any time. An “unsubscribe” link or instructions to opt out will be provided in such emails. Please note that you cannot opt out of non-promotional, service-related communications that are necessary for the Service, such as important system alerts (e.g. notification of scheduled downtime or security notifications) or messages that your school sends through the Service (since those are governed by the school; if you wish to opt out of school-initiated communications, you will need to contact the school to adjust your preferences). If you are receiving text messages or automated calls via our platform and wish to stop them, you may follow the opt-out instructions provided in the message itself (for example, replying “STOP” to a text message where that is supported), or contact your school to update your communication preferences.

In all cases, we will endeavor to honor your rights and requests promptly and transparently. Some requests, especially those involving access to or retrieval of personal information, can be complex; if we need additional time to process your request or if we cannot fulfill a request for a lawful reason, we will inform you of the delay or explain the reason we cannot comply. We also note that for K-12 student data, many privacy rights (such as access or correction of education records) are exercised through the school rather than directly with a vendor like Frogtummy. We remain fully committed to cooperating with our client schools to ensure that parent and student rights are respected and enforced in accordance with all applicable laws.

6. Data Security

We take the security of personal information very seriously. Frogtummy implements a combination of administrative, technical, and physical security measures designed to protect your personal information from unauthorized access, disclosure, alteration, or destruction. These measures include, for example:

Encryption and Access Protections: All communications to and from our servers are encrypted in transit. Passwords are encrypted (stored in hashed and salted form so that they cannot be easily recovered even if our database were compromised). Other personal information such as names and email addresses is stored in a secured, password-protected database with strict access controls; this reflects standard industry practice for this category of data. We also employ CSRF protection on web requests, reCAPTCHA at registration to prevent automated abuse, and account-level IP blocking as an additional layer of protection. Each school's data is logically separated at the account level so that one school cannot access another school's data.
Access Controls and Personnel Obligations: We restrict access to personal information within our organization to those employees or contractors who need the information in order to operate, develop, or support our Service. All paid workers are required to execute a non-disclosure agreement and receive training on how to handle secure data. Within our software, we use role-based access controls so that, for example, one school cannot view another school’s data, and within a given school, each user can only see data appropriate for their role. We also maintain blocked-user and restraining-order protections that restrict certain parent access and messaging flows where appropriate.
Security Monitoring: We maintain logging and monitoring of our systems consistent with industry best practices, and we use firewalls and log monitoring to detect and respond to unusual patterns that might indicate a security threat. Our servers are updated on a quarterly basis. Software updates, including updates to underlying frameworks and dependencies (such as upgrading to more recent versions of our application framework), are addressed on an ongoing basis as needs arise. We do not currently conduct periodic penetration testing or engage third-party experts to perform independent security evaluations of our systems, though we remain attentive to emerging vulnerabilities and address them as they are identified.
Data Backups and Recovery: We perform routine data backups to ensure resiliency and to protect against accidental loss or destruction of personal information. We utilize point-in-time recovery for our database, which enables us to restore data to a specific moment prior to any incident. Database backups are retained for up to six (6) months, after which they are securely erased. Geographic distribution of backup data across separate regions is on our near-term roadmap as we continue to invest in our infrastructure.
Employee Training and Policies: We maintain internal policies and procedures regarding personal information confidentiality and security. All team members receive training on protecting student and personal information and execute non-disclosure agreements. We have protocols for reporting and responding to potential security incidents. Multi-factor authentication is required for administrative server access (including our cloud infrastructure). Unique administrative access controls at the application level are currently on our near-term development roadmap and will be implemented in the coming months.

While we strive to protect your personal information, it’s important to understand that no method of transmission over the internet or method of electronic storage is 100% secure. In the event of a data breach, we will follow all applicable laws and coordinate with affected schools and, where required, affected individuals. For incidents involving student personal information, we will work with the relevant school to support notification obligations.

We have a written Incident Response Plan in place to swiftly address any security incidents, should they occur, and to mitigate any harm.

We also encourage you to take steps to help keep your own information secure. This includes protecting your account credentials (username and password) and not sharing them with others, and being cautious about the information you submit or share in any communications. By following good security practices on your end, you can help further safeguard your personal information.

7. Data Retention

We retain personal information for as long as necessary to fulfill the purposes for which it was collected, unless a longer retention period is required or permitted by law. In practice, this means:

For School Data (Students/Parents): We retain student-related personal information as directed by our client schools. Typically, while a school remains a customer, we retain that school’s data to provide the Service. If a school stops using the Service or our contract terminates, we will return or dispose of the school’s data as specified in our agreement with that school, including providing the school an opportunity to export its data. Where not otherwise specified by contract or legal obligation, we generally retain school data for a limited wind-down period after termination to allow the school to complete data export and transition activities, after which we securely delete or de-identify the data. We are committed to not retaining student information longer than necessary. If a school instructs us to delete certain records (for example, to comply with a parent’s request or a data minimization policy), we will do so promptly. Backup copies of data may persist for a limited period, but remain protected in accordance with this Privacy Policy.
For Accounts and Operational Data: For individual user accounts (such as a teacher’s account on a school’s website or content management system), we keep the account data while the account is active. If an account is deactivated or the user is no longer associated with a school we serve, we may delete or anonymize personal identifiers after a period of inactivity. The length of inactivity required before deletion or anonymization may vary based on the nature of the account and applicable legal or contractual requirements. However, some content that the user created as part of a school’s site or records may be retained as part of the school’s data archive (for example, a news post authored by a teacher might remain visible on the school’s site unless the school decides to remove it).
For Legal and Backup Purposes: We may retain certain information as necessary to comply with our legal obligations, resolve disputes, enforce our agreements, or for other legitimate business purposes such as auditing and security. For instance, we might keep logs of system access for a certain period of time for security auditing, or retain certain customer support emails to document how an issue was resolved. Any data retained for such purposes will continue to be protected in accordance with this Privacy Policy and applicable law.

When we no longer need personal information, we will dispose of it in a secure manner by deleting it or anonymizing it so that it can no longer be reasonably associated with an identifiable individual.

8. FERPA Compliance (Student Educational Records)

As an operator of an online service for educational institutions, Frogtummy acknowledges that certain data we handle may be considered part of a student’s educational record, protected by FERPA. Under FERPA, schools (and in some cases, parents or eligible students) maintain rights and control over education records. When Frogtummy acts as a “school official” (as defined by FERPA) processing education records on behalf of a school, we do so in accordance with FERPA’s requirements. In particular:

We use student personal information only for the purposes authorized by the school, and in a manner consistent with FERPA’s limitations on use and redisclosure of education records. We do not re-disclose or share education records with other parties except as directed by the school or as permitted by law.
We rely on the school to obtain any necessary parental consent or to invoke a FERPA exception for the use of our Service. For example, schools may utilize the “school official” exception under FERPA, which allows schools to share education records with contractors like Frogtummy who have a legitimate educational interest, without requiring individual parental consent. We sign agreements with each school (or district) that include data protection terms aligned with FERPA and with relevant state-specific student privacy laws (such as California’s student privacy laws, SOPIPA, or other applicable laws). These agreements ensure we are under the direct control of the school with respect to the use and maintenance of education records, as required by FERPA.
If a parent or eligible student contacts Frogtummy directly to exercise a FERPA right (for example, requesting access to or amendment of a student’s education record), we will inform and coordinate with the relevant school to facilitate the response. Because we are not the educational institution of record, we defer to the school’s authority on whether and how to comply with such requests, as FERPA dictates. The school is responsible for making decisions on requests to inspect or correct a student’s records, and we assist by providing any information or tools the school might need to meet its FERPA obligations.

In summary, Frogtummy is fully committed to student privacy and recognizes that student personal information is subject to stringent legal protections. We treat all student personal information as highly sensitive and handle it in compliance with FERPA, COPPA, and applicable state laws. For instance, we are willing to sign Student Data Privacy Agreements where required by certain states or districts, and we adhere to those contracts diligently. Our goal is to help schools make beneficial use of student data while safeguarding that data from any unauthorized use or disclosure.

9. Third-Party Links and Tools

Our Service may contain links to external websites or integrate third-party tools that are not operated by Frogtummy. For example, a school’s website built on our platform might include links to external resources (like a state education department site or the school’s social media page), or we might integrate a third-party single sign-on option at a school’s request (such as allowing users to log in via Google or Microsoft credentials). We also use certain third-party APIs like Google Maps to enable features (for instance, displaying map locations for the carpool feature).

This Privacy Policy does not cover any third-party websites or services that we do not control. If you click a link to an external site or engage with a third-party service (even one embedded in the Service), you will be subject to that third party’s own privacy policy. We encourage you to review the privacy policies of any third-party website or service that you visit or utilize, especially if you follow links from our Service.

Frogtummy does not share your personal information with third parties for their independent use, except as described in the How We Disclose Information section of this Privacy Policy (for example, with our contracted service providers acting on our behalf). When we integrate a third-party tool, it is strictly to provide functionality within our Service, and those third parties act as our processors. As noted above, any such provider is contractually prohibited from using your information for anything other than providing the intended service to us. For example, if we use an external email delivery service to send out newsletters or notifications, that service is not allowed to use email addresses it sees for any purpose other than sending those emails on our instructions.

However, if you choose to use a feature of our Service that deliberately transmits data to a third party at your direction – such as sharing a school webpage or fundraising campaign on your personal social media account, or using a third-party login (like signing into a portion of the site via your Google or Facebook account) – then any information disclosed (such as your profile information or the content you choose to share) will be handled by that third party under their terms and privacy policy. Frogtummy is not responsible for the content or privacy practices of any external sites or services that are not operated by us.

We do implement measures to “sandbox” third-party integrations and ensure they meet our security standards. If you suspect that an external link on a Frogtummy-powered site is malicious or inappropriate, please notify the school or contact us so that we can review it and take action if needed to protect our users.

10. International Users

Frogtummy is based in the United States, and our services are intended for use by U.S. schools and users. If you access the Service from outside the United States, your information may be processed on servers located in the U.S. or in other jurisdictions where our service providers operate. We take appropriate measures to protect personal information that is transferred across borders consistent with this Privacy Policy and applicable law.

11. Changes to this Privacy Policy

We may update or revise this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or for other operational reasons. If we make a material change we will provide notice reasonably designed to inform affected users and schools, such as through a prominent notice within the Service or by contacting account administrators. The “Last Updated” date indicates when this Privacy Policy was most recently revised.

Changes are effective when posted unless otherwise stated. By continuing to use the Service after an update takes effect, you acknowledge the revised Privacy Policy. If you do not agree with the changes, you should stop using the Service and may request deletion of your personal information as described in the Rights and Choices section.

12. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us using the information below. We will respond as promptly as possible to address your inquiry.

Email: info@frogtummy.com
Mail: Frogtummy Enterprises, Inc., PO Box 491, Kaysville, UT 84037, USA
Phone: (801) 709-1069 (please ask for the Privacy Officer or Customer Support)

For school administrators or officials: you may also reach out to your dedicated Frogtummy account representative, or use our support ticket system, for any inquiries related to data privacy or security on the Service.