LEGAL
Privacy Policy
Last updated: August 2026
1. Who we are
SimpliRoll ("SimpliRoll," "we," "us," or "our") provides a QR-badge check-in and check-out platform for tutoring centers, childcare and daycare centers, and security/staffing teams. This policy explains what information we collect through our website (simpliroll.com) and through the SimpliRoll product itself, how we use it, and the choices available to you.
2. Information we collect
Through our website: if you contact us (for example, to request a demo or ask about pricing), we receive the information you choose to send, such as your name, email address, and message content.
Through the SimpliRoll product, on behalf of the centers that use it: names of students, members, or staff being tracked; a guardian or emergency contact’s name, phone number, and email address; a birth month and day (never a birth year); check-in and check-out timestamps; and an opaque QR badge identifier that does not itself encode any personal information.
We do not knowingly collect more information than a specific feature actually requires, and we do not use information collected through the product for advertising or any purpose unrelated to operating the service.
3. How we use information
To operate check-in and check-out, including recording attendance and sending automated text notifications to guardians or emergency contacts when someone checks in or out.
To provide staff attendance and payroll-export tools to the centers that use those features.
To operate optional recognition features, such as a birthday notification, where a center has chosen to use them.
To communicate with you if you contact us directly.
We do not sell personal information, and we do not share it with third parties for their own marketing purposes.
4. Children’s privacy
Some SimpliRoll customers use the product to track attendance for children under 13. We treat this information with particular care: birthdates are stored as month and day only, never a year; a center’s data is never visible to any other center; and we do not use children’s information for advertising, engagement analytics, or any purpose beyond operating the attendance feature a center has enabled. Centers using SimpliRoll for children’s attendance are responsible for obtaining appropriate parental consent for the information they choose to enter, consistent with applicable law.
5. Who we share information with
We use a small number of service providers to operate SimpliRoll, each of whom processes information only as needed to provide their service to us: Supabase (database hosting and authentication), Cloudflare (website hosting), Amazon Web Services (encrypted backup storage), and Twilio (text message delivery). We do not permit these providers to use information for their own purposes.
6. Data isolation and security
Each center’s data is isolated at the database level from every other center’s data. Data is encrypted in transit and at rest, and backups are encrypted separately and retained for a limited period rather than indefinitely.
7. Data retention
We retain information for as long as needed to provide the service to an active center, and for a limited additional period afterward as required for backups, legal, or accounting purposes. Backup copies are retained for up to two years and then deleted on a rolling basis.
8. Your choices and rights
You may ask us to access, correct, or delete information associated with you or a child in your care by emailing us at the address below. We will respond to verified requests within a reasonable time.
9. Cookies and tracking
Our website does not use advertising or cross-site tracking cookies. If that changes, this policy will be updated to describe what is used and why.
10. Sign in with Google
If you choose to create or access your SimpliRoll admin account using "Sign in with Google," Google shares your name, email address, and profile photo with us so we can create and authenticate your account. We use this information solely for that purpose -- to identify you and associate your account with your center -- and never for advertising, and never for any purpose unrelated to operating SimpliRoll.
SimpliRoll’s use and transfer to any other app of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. You can review or revoke SimpliRoll’s access to your Google Account at any time at myaccount.google.com/permissions.
11. Changes to this policy
We may update this policy from time to time. The date below reflects the most recent version.
12. Contact us
Questions about this policy or your information can be sent to sales@simpliroll.com.
© 2026 SimpliRoll. All rights reserved.