IEPDesk Privacy Policy

Effective date: 2026-05-15 · Last updated: 2026-05-15

Short version: Your records — promises, service logs, goal progress, communications, meeting notes, disciplinary incidents, and attached documents — live on your phone. We have no servers and no analytics; we never see your records. The only network communication the app performs is with Apple's StoreKit to verify your subscription status.

1. Who we are

IEPDesk is published by an independent iOS developer (Apple Developer Team ID ZM8LF8494F). For any privacy-related question, write to captainlongevity@gmail.com.

2. Information we do not collect

We do not collect, transmit to a server we control, store on a server we control, sell, share, or analyze:

Your child's name, date of birth, grade, school, district, diagnosis, case manager, or any identifying detail
The text or attachments of any IEP, 504 plan, evaluation, IEE, Prior Written Notice, or progress report you store in the app
The content of any service log entry, communication entry, meeting note, goal progress entry, or disciplinary incident record
Your name, email, phone number, or any account identifier
Device identifiers (IDFA, IDFV) for advertising or tracking purposes
Location data
Crash reports or analytics events sent to any third party

3. Information stored on your device

All records you enter are stored locally on your iOS device using Apple's SwiftData framework. This data is included in your standard iOS device backup (iCloud Backup or Finder/iTunes backup) if you have device backup enabled — your IEPDesk archive is included automatically alongside everything else on the device. We do not have access to your device backups; only Apple does, under their published privacy terms.

4. No cloud sync

IEPDesk does not sync your records to iCloud, to our servers, or to anywhere else. Your archive lives only on this device. To save a copy elsewhere, use Settings > Data > Backup and restore, which produces a JSON file you can store wherever you choose — Files, AirDrop, email, an external drive, your choice. To move your records to a new iPhone, restore that iPhone from a standard iOS device backup; IEPDesk and its archive are restored automatically.

5. On-device processing (Pro features)

Several features process data locally on your device only:

Document scanning uses Apple's VisionKit framework on-device. Scanned documents are saved as PDFs to your device's app sandbox; they are never transmitted off-device.
App Lock uses Apple's LocalAuthentication framework. Your Face ID or Touch ID biometric data never leaves Apple's Secure Enclave; the app only receives a success or failure signal.
Reminders for annual review, triennial reevaluation, and goal target dates are scheduled via Apple's UserNotifications framework and fire locally on your device. No remote push servers are involved.

6. Subscriptions and StoreKit

IEPDesk offers an optional Pro subscription via Apple's StoreKit 2. When you subscribe, restore a purchase, or when the app verifies your entitlement, your device communicates directly with Apple's servers. IEPDesk receives only the entitlement status (active or inactive) and a purchase identifier. We do not see your Apple ID, payment method, billing address, or transaction history. Apple's handling of subscription information is governed by Apple's Privacy Policy.

7. Permissions the app requests

Camera — only when you tap "Scan IEP Document" (the system document scanner triggers the prompt).
Face ID / Touch ID — only after you enable App Lock in Settings.
Notifications — only after you enable annual-review, triennial-reevaluation, goal target-date, or disciplinary-threshold reminders.

You can revoke any of these permissions at any time in iOS Settings > IEPDesk.

8. Children's privacy

IEPDesk is designed to be used by parents and legal guardians, not by children. We do not knowingly collect any information from anyone, including children. The records you enter about your child live on your device; we never receive them.

For United States users: the federal FERPA statute applies to educational institutions that receive federal funds — not to parents documenting their own children's records. IEPDesk facilitates that parental record-keeping; it is not a school, district, or agency and does not transmit records to any educational institution.

9. Data retention and deletion

Because data lives on your device, you control retention completely. To delete all records, delete the app from your device. There is no copy on any server we operate for us to delete.

10. International users

The app does not transfer your data internationally because it does not transfer your data anywhere we control. The app is published in English and is primarily marketed in North America.

11. Changes to this policy

If we ever change how the app handles data — for example, if a future version adds a feature that transmits data to a server we control — we will update this policy and surface the change in the app before you can use that feature. The "Last updated" date at the top of this page reflects the most recent revision.

12. Contact

Privacy questions: captainlongevity@gmail.com