01About this policy
Oakwood One is an independently developed iOS app by Merow Fartaj for students using Oakwood Connected, the school’s Blackbaud portal. This policy explains how the app handles information. It does not replace the privacy policies of your school, Blackbaud, your sign-in provider, or Apple.
This policy includes native assignment attachment uploads and first submission, with Student ID marked Coming soon. The section on earlier versions also explains the card feature previously available in TestFlight.
02School information and sign-in
When you sign in, the app retrieves information your school account can access: your name, student identifier, grade level, school year, courses, teachers, schedule, assignments, published grades and feedback, submission details, bulletin boards, school resources, and community directories. It uses this information to display your school day, preserve recently viewed content, and provide optional reminders.
Sign-in takes place on the school’s real website in an embedded browser, including its sign-in provider when required. The app does not read or store your password. It keeps the sign-in information needed to access your account on your device, protected by its built-in security. The embedded browser may retain cookies and website data to keep you signed in.
Portal requests go from your device to Blackbaud. There is no separate Oakwood One server that receives your grades or mirrors your school account. Blackbaud and the sign-in provider receive the information needed to operate their services, including normal connection information such as your IP address.
When you explicitly change an eligible assignment status, the app sends that change to Blackbaud for your account. For eligible online file assignments, Add attachment sends your chosen file contents, filename, and assignment information directly from your device to Blackbaud and saves the attachment as an unsubmitted draft. Submit assignment separately sends the instruction to submit your existing saved work after you confirm. The app does not change grades. School records and uploaded work remain controlled by the school and its service providers.
03Community directories
When you open Directory, the app retrieves the directories and people your school account is allowed to see. Published entries can include names, photos, email addresses, phone numbers, mailing or street addresses, grade levels, job titles, and departments. The app displays only the fields the school makes available to your account.
Directory searches and filters are sent to Blackbaud. Directory results are held in memory for display and short-term request caching, rather than saved in the school display cache on disk. The app does not upload your device contacts or send directory records to the developer.
04What stays on your device
When you use Add work, the app reads only the file or photo you select, or the pages or photo you capture. Camera access is requested when you choose Take photo or Scan pages. Photos are prepared as JPEGs and scanned pages as a PDF on your device before upload. Taking a photo does not automatically save it to your photo library or upload it. Chosen files may contain personal information or metadata, so review what you select before uploading.
Your selected attachment is held locally for review until you explicitly choose Add attachment. This review is not a durable background upload queue. Successfully uploaded drafts and submitted work remain on Blackbaud under school and provider retention rules; closing the composer, signing out, or resetting the app does not delete those uploaded copies.
The app saves a limited cache of school information and your screen preferences so previously viewed content can appear while refreshing or reconnecting. The display cache is separated by student and school year, protected by your device’s security, excluded from device backup, and limited by size. Older cache entries can be replaced as you use the app.
Notification preferences and a local assignment snapshot help detect changes and schedule reminders. That snapshot includes assignment identifiers, due dates, status, and whether a grade exists, but not grade values. Downloaded documents are written to temporary storage for preview. Files you choose to share or save elsewhere are controlled by the destination you select.
The app uses local diagnostic records to troubleshoot request failures and decoding issues. These can include endpoint names, timing, counts, and identifiers. The app does not include advertising, behavioral tracking, third-party analytics, or automatic uploads of these diagnostic records to the developer. Apple may provide crash reports and TestFlight feedback under its own settings and policies.
05Optional notifications
Notifications are off until you enable them. They are scheduled on your device using information the app has already retrieved. Reminder delivery does not use an Oakwood One push-notification server. Notifications may contain assignment or course information, but do not show grades or scores.
You can change reminder preferences in the app’s Settings or turn off notification permission in iOS Settings. Your iOS lock-screen preview settings control whether others can see notification content. Background refresh, when iOS permits it, contacts Blackbaud to check for changes.
06Demo mode
Demo mode uses fictional people, classes, assignments, grades, and resources included with the app. It does not require a school account or contact Blackbaud. Attachment uploads and assignment submission are unavailable in demo mode. Sample status changes and preferences are saved separately on your device. Reset demo data restores the sample state, and Exit demo removes demo notifications.
The Privacy policy link opens this public website in your browser. Visiting the policy therefore makes an ordinary web request even if you entered it from demo mode.
07Student ID and earlier versions
Student ID is marked Coming soon in the current app. Card scanning and adding a card to Apple Wallet are unavailable in both demo and school-account mode.
Earlier TestFlight versions offered card scanning. If you used that feature, camera or selected photo input was processed on the device. The card image, photo, confirmed details, and original barcode were stored locally. If you chose Add to Apple Wallet, your confirmed name, student number, class year, card color, and barcode were sent to the Oakwood One signing service hosted by Vercel to create a pass. Your photo, school password, and Blackbaud session credential were not sent to that service.
The signing application creates a pass in memory and does not maintain a card database or log request bodies. Hosting providers may retain technical connection or security logs under their own policies. Previously saved cards can remain on the device until sign-out or full app reset. Removing app data does not remove a pass already added to Apple Wallet; remove that pass in Wallet.
09Retention, deletion, and your choices
Saved school content remains on your device until replaced, evicted from the cache, cleared when the account or school year changes, or removed by sign-out or reset. A stored session credential may remain after it expires to support reconnecting; explicit sign-out removes it. Temporary documents can remain until iOS clears temporary storage or you use the full app reset.
In school-account mode, Progress > Settings > Account > Sign out clears the saved session, app-owned web sign-in data, school display cache, saved card, and notifications. On earlier builds, Sign out is under Progress > Debug. If local diagnostics have been unlocked, Settings > Debug > Reset app to first launch also clears app preferences, temporary downloads, and demo data. Sign out clears the local Debug unlock. In demo mode, use Settings > Reset demo data. iOS permission decisions remain controlled in iOS Settings.
Clearing the app does not delete your school account, school records, uploaded draft attachments or submitted work on Blackbaud, provider logs, files you exported, or messages you sent for support. Contact your school to request access to or correction or deletion of school-held records. Requests involving sign-in providers, Apple, or other external services are subject to their policies.
If you contact us, your email address and message are used to respond and resolve the request. Please do not send passwords, session credentials, student records, or unredacted screenshots. You can request deletion of correspondence; information needed to address an ongoing request or a legal obligation may need to be retained.
10Students and security
Use a school account only if you are authorized to access it. Students and parents or guardians can contact the school about school data, or contact the developer about the app. Demo mode is available without providing student information.
The app uses encrypted connections and your device’s built-in security to help protect your information. No method of storing or sending information is risk-free. Protect your device with a passcode and avoid sharing signed-in access.
11Changes to this policy
We will update this page when the app’s data practices change and revise the date above. A future Student ID release will need corresponding privacy information and any required permissions before you use it.
12Contact
For questions about this policy or requests about information you have sent to the developer, contact Merow Fartaj.