Start with school authorization
Hallway Hero supports educational hall-pass management. An authorized school representative must determine whether the service is approved, what records are necessary, and which notices, consents, and agreements apply. An individual teacher's acknowledgment alone does not establish a school-official exception or satisfy every child-privacy obligation.
This overview is not an executed data-processing agreement. Before importing student records where an agreement is required, contact Andrew Hall at hello@hallwayhero.app with your school's review process. Do not email student rosters or sensitive records with an initial inquiry.
Permitted purposes and school control
Student records support classroom rosters, queue and pass management, authorized reporting, service security, support, and recovery. They are not sold, used for student advertising, or repurposed into unrelated student profiles. Schools direct the authorized educational use and which staff may access the records.
Records use short names and stable internal identifiers, with optional school student numbers for approved school joins. They remain identifiable education records in context. Do not treat a short name, UUID, or hashed identifier as anonymous data.
Access, correction, export, and deletion
Teachers access authorized classroom data; authorized school administrators receive school reporting. Student-facing screens use restricted projections. The operator can perform authorized administration and troubleshooting. Schools must review shared-device placement and viewer-link visibility.
Verified school representatives can use service tools or contact support to request access, correction, export, return, or deletion. Families should normally work through their school. On termination, coordinate exports and access removal with the operator. Record retention and backup expiry must be confirmed for the deployment rather than assumed.
Security and backup boundaries
Role checks, tenant access controls, private student-facing views, credential hashing, and protected sessions support service security. A working server must be able to read the records it displays. Host administrators or compromised authorized processes may still access data even when storage encryption is enabled.
Encrypted storage and encrypted recovery artifacts require correct configuration and recoverable keys. The intended Unraid-to-Google-Drive backup workflow requires operator verification of coverage, freshness, retention, and an isolated restore. This page does not assert that those live checks have passed or that a specific recovery time is guaranteed. Ask for current evidence as part of school review.
Providers and incidents
The subprocessors page describes the purposes of adult payment, account email, registration protection, optional public analytics, and backup providers. Schools should confirm provider identities, storage locations, access, and any required contractual terms with the operator.
Report suspected exposure to hello@hallwayhero.app. The operator will investigate, preserve appropriate evidence, and coordinate affected-school communications and applicable requirements. Notification timing and contractual obligations are governed by applicable law and the school agreement.
Agreement checklist
School review should establish the parties and authorized representatives, permitted purpose and instructions, record categories, access and disclosure restrictions, provider requirements, security evidence, incident cooperation, request handling, retention, return and deletion, and termination procedures. Any applicable direct notices or consent process remain part of that review.
Do not ask students to accept customer terms at the kiosk. Account acknowledgments record an adult's agreement and stated authority; they do not certify legal compliance or replace the school's approval process.
Talk with the operator
Andrew Hall · Florida, United States
hello@hallwayhero.appFor school review, agreements, privacy requests, or security concerns. Please keep student records out of initial emails.