Privacy Policy

Last updated: April 2026

1. Who We Are

Journey Point LLC is a Michigan limited liability company. The Journey Point platform is available at journeypoint.app. For questions about this policy, contact us at info@journeypoint.app.

2. Scope

This policy applies to schools, educators, students, and families who access the Journey Point platform. Journey Point is a B2B2C platform — schools are our direct customers. Students and families access the platform through their school.

3. Information We Collect

From schools and educators:

Name, school email, role, school/district affiliation

From students (via school enrollment):

Name, date of birth, grade level, Michigan MSDS UIC number, local student ID
Enrollment application data (address, emergency contacts, household info)
Academic records: course enrollments, phase completion, assessment scores (MSTEP, NWEA MAP, PSAT, SAT, ACT, WorkKeys), skill mastery data
IEP and 504 accommodation data (highly sensitive, role-restricted)
Attendance records
Learning style preferences

From families (via Milestone family portal):

Name, email, relationship to student, communication preferences

Usage data:

Log data, device type, browser, pages visited — never sold or used for advertising

4. How We Use Information

To operate and personalize the learning platform
To support educator decision-making and MTSS intervention
To generate student progress reports and transcripts
To communicate with families through the Milestone portal
To comply with Michigan MSDS reporting obligations

We never use student data to advertise or build advertising profiles.

We never sell student data — ever.

5. FERPA Notice

Journey Point is a “school official” under FERPA, acting under the legitimate educational interest of the school. Schools retain ownership and control of student education records. Parents and eligible students (18+) have the right to inspect and request correction of records. Contact your school administrator to exercise FERPA rights.

6. COPPA (Children Under 13)

Journey Point does not collect personal information directly from children under 13. All student accounts are created by school administrators. Schools are responsible for obtaining any required parental consent under COPPA before enrolling students under 13. Journey Point provides schools with data processing agreements upon request.

7. Data Sharing — Subprocessors

Journey Point shares data only with the following infrastructure providers to operate the platform:

Supabase (database and authentication infrastructure) — supabase.com/privacy
Google (OAuth sign-in, Google Workspace for Education) — policies.google.com/privacy
Vercel (hosting and edge delivery) — vercel.com/legal/privacy-policy
Resend (transactional email for account invitations) — resend.com/legal/privacy-policy
Anthropic (AI curriculum generation — no student PII is sent to this API) — anthropic.com/privacy

We do not share data with advertisers, data brokers, or any third party not listed above.

8. Data Retention

Student records are retained for the duration of the school’s contract with Journey Point, plus 7 years, unless a shorter period is required by Michigan law or requested in writing by the school. Schools may request deletion of records at any time. Deletion requests from families should be directed to the school.

9. Security

Journey Point uses row-level security at the database level, role-based access controls, encrypted connections (TLS), and Google OAuth for authentication. IEP and clinical screening data is restricted to credentialed staff only and cannot be accessed by students, families, or unauthorized personnel.

10. Michigan MSDS Compliance

Journey Point collects and stores Michigan Student Data System (MSDS) aligned fields including MSDS UIC numbers, enrollment data, and assessment records to support schools’ state reporting obligations.

11. Your Rights

Schools may request a full data export or deletion of their school’s records at any time by emailing info@journeypoint.app. Families should contact their school administrator for record requests. Journey Point will respond within 30 days.

12. Changes to This Policy

We will notify schools by email at least 30 days before any material change to this policy.

13. Contact

James Pack, Founder — Journey Point LLC
info@journeypoint.app