/ Legal
Children's Privacy Notice
Effective August 14, 2026
This Children's Privacy Notice explains how NIX Development LLC (“we,” “us”) collects, uses, and shares personal information from children under 13 when they use NIX (the “Service”). It supplements our main Privacy Policy and is intended to comply with the Children's Online Privacy Protection Act (“COPPA”).
1. Who is the operator?
NIX Development LLC is the operator responsible for personal information collected from children through the Service.
- Email: contact@nix.management
- Mail: NIX Development LLC, 12167 W Devis Rd, West Olive, MI 49460-9393, United States
2. What we collect from children
NIX is deployed by schools, and we deliberately collect the minimum needed to verify phone-free participation:
- First and last name, to tie participation to the right student.
- School-issued student ID number, the student's existing school badge number.
- A login password, stored only as a one-way cryptographic hash (scrypt).
- A recovery email address, provided at registration or by the school's roster import, used only for password reset and account notices. Never used for marketing.
- Device location: a single, current location reading (latitude and longitude plus accuracy), used only to compute whether the phone is inside or outside the school's geofence. This reading overwrites itself, so we do not build an ongoing location history or movement trail. In the events model, each event check-in additionally stores a one-time location snapshot on that event's scan record, used to confirm the phone was away from the event, which is automatically deleted 90 days after the scan.
- Push-notification device token, a device identifier used only to deliver app notifications (for example, “a new event is available”). Not used for advertising.
In the school-day model, the only records we store about a child are derived signals: a per-day “phone off campus: yes/no,” and, if the device is detected inside the campus geofence during school hours, a timestamp of that detection. We do not store the underlying coordinates or any path.
We do not collect from children:
- Date of birth or age.
- Photos, video, or audio. (The camera reads only the barcode value of the physical ID badge; no image is stored.)
- Contacts, messages, or biometric data.
- Persistent identifiers used to track the child across other apps or websites.
- Any advertising identifier (no IDFA, no tracking).
3. How we use children's information
Only to operate the Service for the school: to verify phone-free attendance and compliance, to issue the school's rewards to eligible students (events model), to show the student their own status and history, and to keep the Service secure.
We do not use children's information for behavioral or targeted advertising, for building any profile outside the educational purpose, or to sell or share for any third party's commercial purposes. We run no advertising or analytics SDKs.
5. School-authorized consent
NIX is offered to children only through a school. Under the FTC's guidance on school authorization under COPPA, the school or district acts as the parent's agent and provides consent on the parent's behalf, because all of the following are true and NIX commits to them:
- Educational/operational purpose only. Children's information is collected solely for the use and benefit of the school, never for advertising, marketing, or profiling outside the Service.
- School authorization. The school has reviewed NIX's practices and authorized the collection (via the signed Student Data Privacy Agreement).
- Parental notice through the school. The school provides notice to parents, typically through its annual FERPA notice or technology-use policy, which names NIX (or “third-party service providers acting as school officials”).
Under this arrangement the school is the data controller for the child's education records; NIX is a service provider acting as a FERPA “school official” (34 CFR § 99.31(a)(1)(i)(B)) and uses the data only under the school's direction.
NIX does not offer a direct-to-consumer signup for children; there is no path for a child to use NIX without a participating school. We therefore rely on school authorization rather than collecting verifiable parental consent directly.
6. Parent rights
Parents may review, correct, or delete their child's information and may refuse further collection. Because the school controls the records, please contact your child's school first; the school will direct us and we will act within the timelines in our data privacy agreement (deletion within 30 days of a school request). You may also contact us at contact@nix.management and we will coordinate with the school. A student can also delete their own account in-app at any time, which immediately removes their location, revokes their device token, and disables their login.
7. Retention and deletion
We keep a child's information only as long as needed for the school's purpose, then delete or de-identify it. The live location reading is overwritten, not accumulated; per-event location snapshots recorded during events-model check-ins are automatically deleted within 90 days of the scan. On a school's request we delete within 30 days; on termination of the school's engagement, within 60 days (subject to any longer period the law requires).
8. Security
We protect children's information with encryption in transit (HTTPS/TLS), encryption at rest, hashed passwords, role-based access controls, rate limiting on login, and an append-only audit log of every staff view of a student record.
9. Changes
We will not materially change how we handle previously collected children's information without new authorization from the school (or parents, as applicable). We will give at least 30 days' notice of prospective changes through the school.
10. Contact / FTC
- Email: contact@nix.management
- Mail: NIX Development LLC, 12167 W Devis Rd, West Olive, MI 49460-9393, United States
- The FTC enforces COPPA: ftc.gov